Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File:                     X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier:          ALz5StpsZtc5fOPOuDOTVhd3Y9THDkfh2hyctiASC9c=
Subject key identifier:   10:EC:04:45:6D:D8:84:59:D9:23:36:67:3A:8E:22:F1:02:59:9A:FE
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer:       /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial:       019EC3DC2AE3826AB4EA035F494DFA42FDCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number:          195E
Signing time:             Sun 14 Jun 2026 02:00:46 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:46 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:46 +0000
Files and hashes:         1: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: Gmf+sjxIejTpioMy0h/2moDsrJNyzNslAdDhLdPmFsA=)
                          2: cF9T-jxoP9kV3otKbs6wprWqe14.roa (hash: By9z72uPVXpGvtlPCEnMJBu0BtKh3WPCweFaBQSyntA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:2a:e3:82:6a:b4:ea:03:5f:49:4d:fa:42:fd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
        Validity
            Not Before: Jun 14 02:00:46 2026 GMT
            Not After : Jun 15 02:00:46 2026 GMT
        Subject: CN=10ec04456dd88459d92336673a8e22f102599afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:3b:98:32:39:2b:65:9e:c5:d7:c1:95:6e:
                    93:d3:a1:25:63:c9:03:07:11:94:63:98:87:21:a7:
                    7a:d7:e8:c0:a8:5d:3e:8c:1b:fb:e3:e8:98:e3:27:
                    c0:20:9a:b9:dc:9c:fb:23:4f:54:73:c5:80:30:e9:
                    62:44:1b:d6:77:ff:75:5b:8e:5d:cd:ed:5c:a9:97:
                    2a:ca:40:73:a1:5f:c9:ee:ae:ce:e0:4d:b6:98:17:
                    86:49:5f:57:cb:f0:59:6a:19:4b:19:31:b6:0c:a9:
                    c4:c6:27:62:48:84:be:3c:1e:fd:25:7f:ef:4f:4f:
                    84:72:60:ed:67:99:23:47:3b:bc:7a:45:74:4e:3f:
                    0f:dc:d3:e5:8b:e9:db:6b:fe:5a:f8:f4:2a:01:e8:
                    f4:a2:9b:ee:94:92:e4:7e:47:1c:bd:97:bc:53:16:
                    b4:cd:5b:cd:fb:f6:2b:f7:d0:bd:62:19:51:6f:1a:
                    75:59:a0:ba:b9:b6:02:4c:b1:7d:86:06:d2:34:df:
                    80:ea:bc:8e:a4:9a:b0:88:e3:8b:56:de:d6:c6:8c:
                    40:49:cb:87:dd:f7:8c:4f:02:39:99:e5:bd:4d:96:
                    d2:24:0c:c0:38:78:40:ea:5a:4f:ff:48:a8:4c:80:
                    1f:97:9a:eb:22:67:db:52:0b:83:bc:0a:ff:a5:5f:
                    1e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EC:04:45:6D:D8:84:59:D9:23:36:67:3A:8E:22:F1:02:59:9A:FE
            X509v3 Authority Key Identifier:
                keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:68:7b:6b:82:91:d8:b0:a2:6c:63:fa:c1:0c:e5:e0:77:ad:
         e8:53:de:1f:3f:5c:2b:5a:d5:69:7b:cf:ca:b7:20:ae:01:82:
         e1:b0:e1:a2:eb:c9:ae:84:ac:3a:c0:94:bb:c9:a5:ca:7d:9d:
         4f:8d:4c:a1:ef:7d:8e:c1:47:2f:5a:dc:2f:0e:e8:0c:97:13:
         a1:ad:2e:40:c9:9b:63:dd:62:78:c2:a6:33:17:90:5e:b2:9a:
         c3:99:45:58:de:ad:ca:4d:23:27:cc:42:e3:af:ce:6f:d4:4a:
         c4:49:d8:ba:4a:6b:81:b3:6c:0e:d1:9a:83:5f:e1:3f:55:6e:
         3a:13:43:60:4c:a0:82:23:28:7e:51:08:41:31:43:b6:59:a3:
         f1:18:1a:32:80:3c:54:e0:34:64:db:03:95:fc:13:8a:3b:34:
         b1:b8:58:7a:f3:5f:23:92:8e:3d:97:e0:d6:df:9a:6e:49:eb:
         3a:c5:64:90:ed:b2:24:c5:45:3e:12:92:48:32:9c:91:7a:eb:
         21:34:fb:b4:43:ce:27:c1:b1:3a:dd:0e:77:46:29:d1:44:0b:
         25:92:71:e6:ac:0c:10:ff:6b:95:11:e6:26:c5:3b:4a:28:12:
         77:e5:9e:ad:64:e9:1a:fa:c7:de:50:58:5f:30:ed:3c:a6:16:
         8f:6f:10:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:18:21 2026 by rpki-client