Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File:                     du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier:          neEpq4j1Rlu7SopGRTmmWwrrm0N+xNvnwD7z6GIl9pw=
Subject key identifier:   41:17:63:E4:28:26:71:8B:D0:93:59:5C:9B:8A:EA:ED:3C:04:FF:A2
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer:       /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial:       019EC06E19CE03B8FD90A9D4ED47C993CACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number:          08D0
Signing time:             Sat 13 Jun 2026 10:01:41 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:41 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:41 +0000
Files and hashes:         1: 8X-KoCS_CU8kURq_ZAZXVIOmK14.roa (hash: SJRCGCTLI7qRzpMlBdPbpnoh4a93nmWJa23zttRgkJI=)
                          2: ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa (hash: 4mAnuGZm3yJjfvM0MnpTHsToaK6IwB9ToRFiX7Ssoj8=)
                          3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: PNkXVkSCg342Na4SLGpQ96VXHtiPSJOQ1JjFUzjaxGs=)
                          4: f9BVLAip7ndiLMIkBamn3zQu3IA.roa (hash: 67NYj05lmXLMB7WB8zJUBcnZzB3Nm/KReJjNyPG8c+o=)
                          5: vbJFubKoe57vVKHqUA-HZghNpIw.roa (hash: YCX9UsXniCoP5xRmTzYMDDvpToHqW+Wl+uPQWMRLB04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:19:ce:03:b8:fd:90:a9:d4:ed:47:c9:93:ca:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
        Validity
            Not Before: Jun 13 10:01:41 2026 GMT
            Not After : Jun 14 10:01:41 2026 GMT
        Subject: CN=411763e42826718bd093595c9b8aeaed3c04ffa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:24:88:01:df:5e:4a:05:ee:c3:ee:42:98:
                    a6:3d:fe:7d:d4:b8:ab:90:af:18:72:1b:32:c6:1e:
                    8a:e7:01:42:e5:bf:e7:c8:4b:01:a1:2a:67:b6:43:
                    f4:28:f6:6a:43:24:16:ef:cb:54:68:c5:f5:ca:09:
                    29:95:b3:19:7b:cb:d0:84:dc:30:0c:9d:41:2f:31:
                    07:c9:04:47:15:36:10:3e:02:48:ae:4c:8b:dc:c2:
                    c8:98:dc:36:e0:61:b6:d9:54:3d:44:75:19:7f:6a:
                    e6:fe:11:81:c0:e2:02:e1:37:8d:cf:c9:af:9f:3a:
                    57:92:e8:da:33:58:5c:8f:30:32:9c:ba:e6:30:d6:
                    8f:5a:9b:8f:9e:74:75:4b:e6:48:4b:ff:53:b2:da:
                    5d:56:20:5c:ad:91:25:bd:9a:3d:28:a2:13:7b:9b:
                    53:50:40:68:52:db:50:3a:0d:9b:a0:b8:bc:79:f2:
                    d3:1f:88:9d:b6:91:8d:75:06:3b:a8:a7:94:7d:09:
                    a9:a7:78:40:56:9c:b3:7f:4b:21:fb:bc:4b:91:da:
                    bc:a3:d0:72:c6:b9:00:d4:e1:75:ab:00:ba:1b:02:
                    c1:4c:db:3f:cd:2c:37:1a:b9:46:ed:87:b0:88:db:
                    fa:56:15:cc:73:d6:b4:a4:ba:cd:a1:e4:cc:d8:65:
                    db:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:17:63:E4:28:26:71:8B:D0:93:59:5C:9B:8A:EA:ED:3C:04:FF:A2
            X509v3 Authority Key Identifier:
                keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:32:82:f6:4c:1e:8c:e0:28:58:92:cc:58:b4:b1:07:2e:e4:
         c6:42:08:ed:8c:b2:ad:18:cd:14:2c:20:4f:86:a2:92:11:08:
         1d:ab:f1:c1:6b:2a:0c:57:1e:c8:ff:e5:bc:11:7a:35:ca:e5:
         f5:80:11:e3:a5:f8:ee:75:4a:2f:70:a8:7b:2d:b0:1e:cb:bf:
         10:2f:ab:1e:68:19:91:51:9e:42:df:88:8d:40:32:90:4d:a8:
         05:b2:06:fc:a4:92:cd:f6:fe:19:2a:eb:d0:a7:ef:09:ce:0a:
         5e:60:bf:99:03:e0:68:7d:b4:80:65:24:4e:34:92:64:b8:cc:
         ec:96:0d:1c:45:02:91:15:29:8a:59:30:62:c4:1b:f0:5f:a4:
         83:71:ae:c5:11:f4:74:0f:ea:fd:a4:61:75:4e:b3:f4:ec:1f:
         77:ce:5b:10:8f:89:b7:81:76:1b:6a:a7:3b:5a:93:35:9e:af:
         a2:c4:50:26:5d:8d:2b:e1:5f:c8:ed:e1:36:a0:c4:85:50:04:
         35:4b:53:a2:e5:4f:29:11:d1:43:24:bc:a4:40:fb:17:d4:f6:
         b8:30:93:88:ef:bd:e9:a8:16:af:a1:fd:3b:98:61:20:d6:ac:
         36:a0:26:40:50:6b:18:fd:70:b1:2b:0c:6c:fe:c3:8e:80:1a:
         7e:56:7c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:24:34 2026 by rpki-client