Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File:                     O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier:          rPHRxtVOKGBqKQlu3W7EswvJqRlwVQn95lOa6xTulmc=
Subject key identifier:   47:C0:9D:77:28:F9:36:0D:41:7D:8C:BB:1E:16:FA:D9:10:5C:AB:9A
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer:       /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial:       019ED49A10E2BECF02E7DD6E7296228A4A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number:          06F6
Signing time:             Wed 17 Jun 2026 08:02:06 +0000
Manifest this update:     Wed 17 Jun 2026 08:02:06 +0000
Manifest next update:     Thu 18 Jun 2026 08:02:06 +0000
Files and hashes:         1: 1UG_i4X68HiPHviRW1z0p_TSsXk.roa (hash: Rxi5VpSkCVYP7zpaawxiqgEVbztptEcbkSS6G+faZaE=)
                          2: 921A09PidqQ_DPqribEcJ4Ns9ic.roa (hash: 1p6ZvcbQbV5L2uaDpeFuyGxdzNA8guzksazYOvFT/c0=)
                          3: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: 3/YZhnxvLVKP5ak15GCTqnPFSOCOBGsiwoWPOudk2Ac=)
                          4: QakAbn2qL6zC8DUBjSIVZLBbpXc.roa (hash: 6xvVEYi0a4GqVQ6WMVJR2REYvzQK/KHG+c6HRFsJwKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:9a:10:e2:be:cf:02:e7:dd:6e:72:96:22:8a:4a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
        Validity
            Not Before: Jun 17 08:02:06 2026 GMT
            Not After : Jun 18 08:02:06 2026 GMT
        Subject: CN=47c09d7728f9360d417d8cbb1e16fad9105cab9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:3b:6a:f5:b8:ba:d5:db:75:2e:6a:e1:3f:
                    2e:60:0f:90:b6:fb:d9:ac:4e:2b:ee:0b:5d:18:fb:
                    44:9a:de:5a:83:39:83:6e:67:3c:36:1d:16:61:15:
                    09:81:7d:bc:28:69:4f:ef:6f:bc:10:a7:1d:26:fd:
                    c7:5f:0c:7f:d1:d2:db:47:95:d9:6b:89:d3:9e:a9:
                    37:b1:a7:ac:e2:be:fc:f7:3c:4b:80:3c:2b:23:26:
                    b7:bf:05:b7:d7:08:99:af:97:48:5c:0c:07:ad:66:
                    f9:6b:5d:39:b2:27:e6:fd:02:2d:50:a4:2b:74:6a:
                    86:0d:44:1a:10:db:b8:ea:97:40:02:f1:8a:52:f6:
                    6b:f0:05:42:ca:e0:26:32:79:f4:ea:99:d6:ab:e8:
                    0d:f6:4b:ef:44:0f:66:14:78:ca:b7:85:64:cc:90:
                    ae:a1:eb:f7:3b:5d:00:f4:2c:c6:5a:1c:e5:98:e4:
                    ae:ab:d2:ee:eb:c6:71:29:65:91:b4:19:14:76:7d:
                    6a:b9:3c:55:e2:fa:17:2d:4a:cd:f1:77:f6:3a:bb:
                    14:5c:f5:39:6f:44:98:69:74:49:37:3d:05:59:99:
                    1f:ac:ed:e8:67:c4:11:9a:d4:e6:eb:18:04:a0:df:
                    d2:fd:38:6f:95:99:8f:c9:e6:5d:b2:53:08:df:27:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C0:9D:77:28:F9:36:0D:41:7D:8C:BB:1E:16:FA:D9:10:5C:AB:9A
            X509v3 Authority Key Identifier:
                keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:67:6d:3e:72:73:f2:1b:b4:23:a8:5d:b1:57:a9:a1:b1:bb:
         c6:ca:2f:33:ab:01:47:04:5b:4b:d5:46:23:89:fa:5b:c8:dd:
         da:c8:fe:8e:58:b1:30:70:78:03:84:92:19:b3:11:84:a6:2e:
         6a:ef:53:c8:58:86:dc:af:2e:17:c3:2d:27:62:7d:dd:06:9b:
         5e:de:f6:3a:d9:80:5f:15:72:94:c6:01:3b:23:de:32:11:76:
         d8:93:d8:82:0b:c3:63:79:78:51:4c:d9:46:6d:e5:a8:f4:06:
         7a:63:38:e8:9f:12:a6:a1:54:97:05:73:69:3c:8d:3a:11:30:
         89:cf:c0:5c:8b:ca:59:8e:f1:f8:11:8d:5d:ae:25:77:de:ae:
         6f:4a:8d:7d:b9:9b:db:60:31:c8:13:31:2d:c4:ca:32:7f:0b:
         d9:89:21:45:de:41:c2:2f:36:78:3f:ef:7d:b3:e3:57:de:bd:
         b2:39:92:fd:b5:19:d1:b5:59:33:ae:9f:16:26:81:1a:f7:6b:
         d5:12:ff:db:cc:3d:23:57:77:f6:98:5f:02:30:59:47:eb:32:
         4a:eb:66:fa:ad:5a:53:70:da:8f:d9:aa:96:12:5b:75:84:89:
         d9:b8:49:e6:69:56:d1:67:e4:7d:73:d7:f8:45:30:f7:65:b2:
         c8:c5:ff:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:49:02 2026 by rpki-client