Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File:                     S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier:          FFH5cy7ZMcTAD9Mdc7XYpw4sOKQUVkuqSfzj1cLZEOU=
Subject key identifier:   46:E8:5C:64:34:7F:D1:5B:CC:F8:7A:00:3B:A2:64:5E:D6:20:12:FD
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer:       /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial:       019EC3A4C9AA763CD1060678D04F7437659E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number:          0C1A
Signing time:             Sun 14 Jun 2026 01:00:17 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:17 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:17 +0000
Files and hashes:         1: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: 7jd7s8kItYqHpuQcCjN6ofmdmaau78Mqpsmesb85M24=)
                          2: hOCqHr0-rwjOn6wU8z8C-ggKXAo.roa (hash: aczilg5expuAqkln7fFu+xj4eV4HRQvyQA+wDQF1/60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a4:c9:aa:76:3c:d1:06:06:78:d0:4f:74:37:65:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
        Validity
            Not Before: Jun 14 01:00:17 2026 GMT
            Not After : Jun 15 01:00:17 2026 GMT
        Subject: CN=46e85c64347fd15bccf87a003ba2645ed62012fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:94:c8:84:22:be:e0:ff:3f:8e:8a:89:78:
                    7c:fc:8b:5a:a3:4d:32:4e:1d:56:7c:23:30:65:fa:
                    29:41:ac:2c:47:48:eb:f4:7b:6e:8c:d3:f9:19:99:
                    ee:23:3a:af:80:11:5d:75:2c:33:27:be:75:fc:4f:
                    8c:57:be:b5:49:69:a1:f0:95:87:64:15:44:04:65:
                    d0:3d:2e:3d:9b:e2:22:cc:9d:42:cb:51:8b:31:95:
                    64:70:b5:b0:90:41:c1:6b:43:31:7e:2b:0c:18:44:
                    4a:47:1f:30:00:5c:87:11:0b:58:3f:b2:88:d3:5e:
                    2b:8e:2e:0e:bd:f8:34:1a:23:9e:e5:43:a5:71:f7:
                    8a:7d:08:56:03:c7:15:cd:9b:bb:da:ee:16:64:01:
                    d0:f6:c1:64:55:a5:1d:81:fd:3e:d0:74:b9:d5:1f:
                    55:68:19:f5:c4:de:40:4e:da:1d:e2:7d:bd:48:35:
                    19:33:e0:fe:c9:dd:b6:7e:bd:4c:9c:6c:61:57:b8:
                    0d:10:12:73:71:89:c1:de:15:b7:e8:f9:9c:ff:89:
                    2b:09:e8:d9:e7:2e:53:1f:76:97:36:eb:3e:cd:ec:
                    20:f3:9f:b1:9c:5e:5a:4e:d2:77:56:a2:68:6d:31:
                    51:08:0f:71:31:f1:62:f7:3d:eb:87:5f:5b:c9:df:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E8:5C:64:34:7F:D1:5B:CC:F8:7A:00:3B:A2:64:5E:D6:20:12:FD
            X509v3 Authority Key Identifier:
                keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:aa:69:a9:14:8b:1e:65:e9:49:2a:d1:f6:e2:2b:51:5a:d6:
         84:07:c6:a3:8d:74:85:65:84:82:c1:2d:47:ea:6d:71:79:70:
         10:ea:e3:1e:97:73:59:48:52:46:71:a3:6b:68:54:53:45:5d:
         91:29:b0:3e:8b:ef:ef:c2:23:ba:16:87:73:05:51:fc:a7:05:
         8a:12:c7:4b:c4:5b:30:30:6a:3c:32:bc:12:2d:83:bd:b1:04:
         59:75:6f:96:47:38:79:93:78:81:42:20:45:33:d4:66:c7:2c:
         c7:35:47:c0:86:fe:8f:d0:a4:44:7a:bb:41:c3:02:51:01:d2:
         d7:fc:82:18:bd:13:45:64:38:25:e4:a2:f3:b2:59:a2:38:62:
         ac:8c:10:71:85:5f:16:3b:f0:49:18:e8:2a:29:d0:ab:1b:f9:
         97:c4:cc:01:5a:68:9f:0b:23:62:e9:cd:66:61:39:66:0a:81:
         3e:6b:57:a9:96:23:39:3a:f3:46:b3:b9:28:8c:35:c3:56:c7:
         3c:bd:b5:81:c5:e5:d5:57:45:14:30:25:1f:62:72:66:f8:d0:
         06:5c:d9:66:64:9e:d9:cc:88:34:1a:6e:c2:a5:fa:d4:92:36:
         95:28:cd:36:d1:dd:9b:ac:2d:7b:8a:cd:c9:f6:37:d4:42:84:
         be:07:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:55 2026 by rpki-client