Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File:                     x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier:          S+fIgeMXAArKUa5orLBsb6Nmbr/wo7FGwEaROKHOLeM=
Subject key identifier:   22:76:DE:67:E8:97:D1:CA:2F:C5:70:EB:A3:1E:7A:8A:98:9D:8F:33
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer:       /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial:       019EC148BD676E8AA5E97734B9513E8181E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number:          1924
Signing time:             Sat 13 Jun 2026 14:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:30 +0000
Files and hashes:         1: 8nT5rb3UrAJDsICwRbRykN-JOS0.roa (hash: DT7HhfSPZrLtcCVQk42JiiDF/rCVVpx9BUd5IvtgTOU=)
                          2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: xp4ZG66WvxDxtubA09U2Byt32NfD6uGi3KrcqYK8bjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:bd:67:6e:8a:a5:e9:77:34:b9:51:3e:81:81:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
        Validity
            Not Before: Jun 13 14:00:30 2026 GMT
            Not After : Jun 14 14:00:30 2026 GMT
        Subject: CN=2276de67e897d1ca2fc570eba31e7a8a989d8f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:47:d8:d1:1f:1e:dd:dd:50:94:f5:34:d6:
                    66:78:d0:19:e4:58:d5:6f:8b:d0:e3:f7:f3:63:6f:
                    79:f5:5d:7a:fa:3f:c9:e2:fc:f0:7a:d4:9e:a2:2a:
                    e4:43:cc:e9:df:19:03:22:9e:d4:f5:d8:65:0d:29:
                    dc:ee:6e:fb:22:26:f0:f6:48:2a:26:60:9b:8f:a7:
                    1f:36:ec:84:00:c9:71:a5:bd:52:d9:8e:2d:2b:53:
                    21:93:bb:a6:62:1a:f6:92:4f:c5:f9:34:e5:11:48:
                    4e:31:cb:92:b5:48:a2:5f:31:85:4f:e0:cb:87:73:
                    6b:41:00:19:29:c6:ea:d8:25:f8:c0:8a:34:44:d6:
                    6a:7e:07:ef:8c:76:75:8e:af:cf:cf:a8:fb:72:87:
                    57:e9:62:9d:ab:9f:25:8e:b3:dc:1e:97:60:64:1a:
                    53:ec:55:3f:e7:cc:22:59:27:db:70:50:bc:8e:76:
                    e7:75:27:34:db:85:b8:71:d2:b9:98:10:60:64:c6:
                    bd:35:1b:0a:ff:27:36:4b:45:d1:99:ca:0f:ef:2e:
                    bb:cc:b5:0e:b6:59:f2:1e:57:b4:4a:4f:3e:df:bd:
                    d5:ed:fb:a0:aa:24:86:d8:13:25:52:50:f4:c5:96:
                    4e:a2:c4:f2:9a:c7:24:39:76:0d:fa:40:8a:6d:c5:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:76:DE:67:E8:97:D1:CA:2F:C5:70:EB:A3:1E:7A:8A:98:9D:8F:33
            X509v3 Authority Key Identifier:
                keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:19:19:08:44:2a:93:73:d3:44:04:01:e5:10:d0:36:e6:fc:
         d6:67:38:48:11:e3:54:f5:cf:00:fa:d1:a4:c1:ac:a2:4f:d3:
         02:81:2f:77:0a:5a:00:dd:66:43:02:5d:eb:91:e3:c7:b7:1a:
         0e:55:da:56:18:99:fd:75:a8:1f:7e:d5:04:e8:d3:8c:87:09:
         3a:02:c4:f6:0c:6f:4d:41:3b:b8:37:62:4e:95:c5:97:00:c7:
         1b:a3:18:81:b0:b3:59:cb:5c:7e:c0:42:79:70:ec:e8:d8:04:
         3d:7d:e9:0d:5a:94:50:c4:c6:5f:08:85:57:2d:60:41:82:d6:
         4e:83:2e:5f:50:83:cf:22:8b:d1:bc:99:59:a9:ee:fd:ac:f9:
         c1:2a:12:92:55:da:df:ea:39:99:fa:fc:79:b1:a9:af:80:67:
         73:e3:4c:c9:6b:69:9f:c5:dd:19:58:a0:92:15:3c:fc:d7:19:
         18:a4:f4:ac:e2:ac:a8:ed:08:55:f8:01:6d:f7:9c:27:2f:79:
         c1:d6:e6:f1:45:a0:fe:12:a7:31:ec:e4:18:14:09:1e:56:e9:
         ca:1e:2f:2c:96:bb:5d:aa:3f:3c:55:41:ab:e8:99:09:79:b2:
         50:99:99:71:46:7a:e0:b8:0d:db:52:d5:b9:66:70:37:b0:c7:
         b9:de:87:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:09:50 2026 by rpki-client