Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
File:                     08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json)
Hash identifier:          gRUuIaI0/E+gSUnYEHzUAKMwvbP/qgJiZHv9Vf9fquU=
Subject key identifier:   B5:B2:6F:8B:53:36:AA:D3:6C:3A:B4:47:13:E9:AC:60:77:61:51:4A
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Certificate issuer:       /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial:       019EBE107F016E00A2A970C0641496F70D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
Manifest number:          1319
Signing time:             Fri 12 Jun 2026 23:00:12 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:12 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:12 +0000
Files and hashes:         1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: ZzjCW/mZtZBFVDcsw7WHGZyI6nI9hlSllEgnQR5fDBQ=)
                          2: yXhNyXRSfQjfxmo-xnpGQqFi810.roa (hash: SLF2lVj7vn7i6fplRiTtNXFnugUCA5oqM+ECg7CqrFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:7f:01:6e:00:a2:a9:70:c0:64:14:96:f7:0d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
        Validity
            Not Before: Jun 12 23:00:12 2026 GMT
            Not After : Jun 13 23:00:12 2026 GMT
        Subject: CN=b5b26f8b5336aad36c3ab44713e9ac607761514a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:79:08:7f:56:ba:db:c3:4e:b2:ed:75:1e:
                    5d:85:72:ea:d6:94:c5:53:55:2b:f4:95:48:fd:2c:
                    72:a6:b3:5b:27:9f:b8:e5:d6:cd:4f:c2:57:48:2d:
                    c6:c9:fc:3b:13:8a:a5:52:c7:83:0e:a2:b2:1f:06:
                    8d:ae:be:78:f0:f8:b6:4c:1a:7b:d5:73:72:6a:f0:
                    6a:9c:2c:4a:38:9a:bd:80:d7:a9:d0:74:a7:cb:6a:
                    5d:da:82:79:ab:b2:69:aa:f9:cc:a9:78:7a:e9:ff:
                    3e:b4:98:fb:32:7d:aa:9a:aa:81:82:8c:17:16:c2:
                    5a:c2:51:8d:44:6c:e0:c8:07:4d:ab:39:f0:bf:37:
                    7a:21:77:82:04:b8:95:37:06:dd:b2:88:a1:2e:a1:
                    49:e7:55:1c:07:0f:0e:db:15:22:5b:db:70:57:00:
                    01:b6:16:41:0b:e3:8b:e7:33:14:2a:b0:e8:18:4c:
                    88:46:e1:a5:04:c2:5a:5f:d5:49:a8:51:ef:64:9a:
                    b2:fa:d2:14:c0:6d:01:48:08:cd:e3:df:a4:3a:e8:
                    6d:58:f4:8b:8d:d6:59:3c:69:b9:ff:37:d2:4d:cc:
                    ad:c3:24:7c:0e:0d:2e:f3:89:a3:85:4e:4c:e8:a8:
                    d5:69:93:d0:e0:d2:b7:34:1f:f2:34:04:45:0d:4e:
                    72:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B2:6F:8B:53:36:AA:D3:6C:3A:B4:47:13:E9:AC:60:77:61:51:4A
            X509v3 Authority Key Identifier:
                keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7f:6d:c2:76:c7:ec:5f:29:27:7f:4a:ea:e0:20:48:2c:e5:
         f5:97:6c:43:0d:33:33:51:a3:d6:d6:fd:85:b4:22:b7:5d:42:
         a1:1b:04:3e:64:d2:6e:57:47:af:68:fe:01:bc:ee:1f:02:a0:
         d7:22:8e:5f:28:d0:21:7f:d3:91:2c:7a:c0:d5:67:61:89:bc:
         78:da:08:6f:95:08:32:94:f3:a7:fe:04:a2:f8:6c:1b:2d:50:
         21:1a:a4:d4:e1:84:17:ab:8b:c9:90:61:bb:c4:60:44:3e:1e:
         48:84:1e:f9:21:c1:ce:ab:5f:76:0d:b0:b1:16:eb:3b:70:23:
         fc:69:b2:cf:a9:66:70:b0:1c:2d:05:1b:0a:c0:a6:44:a0:e7:
         eb:5f:cb:2a:99:1e:e5:65:62:74:3f:4c:16:91:0c:58:79:aa:
         47:02:4f:d1:71:8f:6a:32:1f:00:c5:f0:79:b2:0b:b4:a7:c4:
         99:38:1b:29:8c:9a:36:a7:f5:53:67:f6:7c:be:0f:97:4a:eb:
         7c:a5:d1:26:ce:a8:c8:7d:2f:68:d7:a9:1c:3b:e2:72:05:de:
         01:eb:b5:14:fc:33:05:7e:83:a5:24:f5:cc:3f:cb:54:0b:83:
         83:02:c8:06:ae:f4:4e:d6:44:a0:cd:f8:e0:c8:0b:44:07:53:
         30:54:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:19 2026 by rpki-client