Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File:                     ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier:          wJDC8oKHmi1mQ/8aI1OLtPYF6B/OnQHdBpZVPKUC8Jc=
Subject key identifier:   12:9C:DB:BC:A1:85:3C:8F:D2:BD:83:A6:3F:BC:5B:8A:44:05:0C:DB
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer:       /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial:       019EBF5B1FA639823AE68E73C5D5B3FE057D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number:          18EC
Signing time:             Sat 13 Jun 2026 05:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:20 +0000
Files and hashes:         1: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: oyRl52pzBQ+HBBq3joRZznIxRnmCPxRPkEBAEIzqBzk=)
                          2: bIXByjX6LuW26aekk-7LgPK4WBo.roa (hash: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:1f:a6:39:82:3a:e6:8e:73:c5:d5:b3:fe:05:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
        Validity
            Not Before: Jun 13 05:01:20 2026 GMT
            Not After : Jun 14 05:01:20 2026 GMT
        Subject: CN=129cdbbca1853c8fd2bd83a63fbc5b8a44050cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:6c:58:2a:c8:0c:69:e4:d1:a1:77:0d:44:
                    20:36:c0:bf:b9:89:75:9b:fc:33:92:4a:45:87:5c:
                    8a:4f:85:9f:4f:f8:31:4d:08:2f:10:b2:af:70:ce:
                    76:ea:86:1e:02:a7:b5:84:13:f0:c7:2c:f5:1a:ed:
                    86:0c:18:79:95:6c:fb:b0:7e:43:6d:9c:7a:d1:df:
                    c9:5f:ba:7e:61:e9:2b:7d:09:12:bf:da:31:a8:b8:
                    19:11:a3:ab:89:0d:88:47:6e:f9:45:09:b1:18:0a:
                    82:eb:96:4d:d7:11:de:fa:fa:db:a6:de:b9:59:30:
                    e5:0a:08:20:1e:86:c9:57:e5:b3:dd:45:01:a7:4f:
                    e9:cc:37:84:7f:c4:35:92:dc:30:da:60:ea:ed:ed:
                    ad:e5:20:f4:65:7e:46:f0:4c:06:9c:e2:1b:e9:15:
                    8b:a6:8d:b2:df:f7:58:51:84:e0:85:5e:00:63:e7:
                    6d:7f:99:f7:00:77:59:57:01:e7:3f:d2:b7:3a:60:
                    4f:46:c5:ec:73:f4:17:a3:77:da:f6:ed:49:7d:1f:
                    b9:38:4e:3b:e5:f8:6f:63:25:03:90:e1:30:36:79:
                    48:a1:07:1a:e8:b1:77:89:55:59:95:5f:90:84:e7:
                    25:e4:90:66:85:1d:27:bf:41:ce:45:d9:bf:60:45:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9C:DB:BC:A1:85:3C:8F:D2:BD:83:A6:3F:BC:5B:8A:44:05:0C:DB
            X509v3 Authority Key Identifier:
                keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:24:38:ce:cf:ee:39:58:4d:69:18:f3:fd:d1:dc:e4:86:35:
         9b:97:b9:b8:4a:88:5c:8c:88:6b:92:3e:8e:44:a4:52:87:8e:
         d8:c1:9d:89:93:bd:f9:9b:34:3d:07:d5:38:f8:87:9f:8e:8b:
         e3:d8:16:71:75:e8:0b:d8:f5:66:5a:4d:3d:e8:6a:7e:a7:24:
         92:6c:fe:0d:29:1f:06:26:12:af:52:68:84:e9:60:5b:a3:f1:
         4d:78:ff:60:83:10:63:a7:70:e9:60:73:b8:1a:69:c8:2c:38:
         ac:d6:f0:8d:85:18:14:24:78:ef:7a:c0:4b:30:ae:96:5b:0f:
         0a:4b:31:e7:1d:0d:15:55:f0:ac:10:48:e3:eb:94:88:e4:b5:
         cb:77:7c:2a:5f:a3:cd:09:3f:b3:a8:f2:22:0b:d4:57:bc:13:
         70:91:5e:da:04:cd:a0:fa:b3:e5:60:49:26:16:46:61:51:60:
         25:9a:cd:a0:b3:45:6e:85:53:3a:d8:69:35:7c:3e:88:fb:f0:
         e5:86:b4:0d:33:33:fb:67:14:28:cd:64:49:05:d7:80:93:e1:
         36:47:0d:97:8f:9b:6c:49:f5:48:22:78:79:ad:7c:b2:44:4a:
         4e:86:e8:8a:50:0c:4c:09:97:a3:9f:d1:81:56:8e:15:fb:6e:
         6d:cb:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:17:16 2026 by rpki-client