Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File:                     D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier:          Z7Ck7v6oAkZMlEiWe8HghYPcDOG+RVKj8oyQHmUfT0U=
Subject key identifier:   F0:A5:3D:26:AB:42:C0:FA:37:D2:2F:BF:14:85:AF:68:27:36:E3:A2
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer:       /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial:       019EC2C9268371B659AE279EA9FB8F13D52E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number:          0A67
Signing time:             Sat 13 Jun 2026 21:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:22 +0000
Files and hashes:         1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: UiQGwUG7W0DCr/2E58gzzBawh9hhpm78d/7yvIapcyg=)
                          2: bbfdsDcnJI7l8XYTq2CjZ7GXkac.roa (hash: Zz0UmtBUzv4omIdkS3mEovbafENQWuqBsJq69kjW+GU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:26:83:71:b6:59:ae:27:9e:a9:fb:8f:13:d5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
        Validity
            Not Before: Jun 13 21:00:22 2026 GMT
            Not After : Jun 14 21:00:22 2026 GMT
        Subject: CN=f0a53d26ab42c0fa37d22fbf1485af682736e3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f0:1e:dd:ed:c1:32:5b:83:e4:2f:73:06:25:
                    32:6f:e5:91:72:25:18:06:a4:a8:66:1c:33:2d:28:
                    e7:2b:ca:0f:f4:05:cc:53:b6:da:f7:06:5a:9d:be:
                    3a:16:0e:65:ce:1f:02:c7:76:70:51:05:f0:cf:77:
                    65:34:6c:1e:be:77:2c:96:fe:4c:c2:f8:36:68:bb:
                    46:52:fb:13:76:1d:b2:08:04:05:8b:5d:75:dc:9a:
                    70:aa:7f:3c:e4:04:bb:2e:87:1c:f5:a3:99:53:af:
                    d7:73:9e:02:c4:aa:38:2b:77:fe:aa:25:75:3c:f1:
                    15:69:fe:5f:20:c7:27:0d:53:72:1c:c2:ab:f9:bd:
                    af:dd:a6:ff:e9:b4:f5:11:4f:c1:b0:7d:48:f3:69:
                    55:dd:28:fd:fd:21:52:ff:40:85:99:01:1a:ba:d1:
                    5c:d9:2f:5b:2c:c5:46:89:e4:13:aa:07:64:da:3f:
                    7d:61:d8:1f:bd:0f:d1:ec:14:7f:52:87:46:c3:cb:
                    fd:d4:e6:1a:bc:69:08:5b:1f:71:0f:1c:a5:90:90:
                    f9:9f:b3:4d:85:c4:af:37:1f:db:05:6e:e9:80:4b:
                    a8:f0:13:1e:82:87:06:a2:06:38:ec:8e:ab:96:14:
                    3b:6a:0d:d7:7d:4f:85:c6:d0:4c:2f:18:d3:25:12:
                    65:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A5:3D:26:AB:42:C0:FA:37:D2:2F:BF:14:85:AF:68:27:36:E3:A2
            X509v3 Authority Key Identifier:
                keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0e:4e:e1:9b:ba:6a:5b:57:6d:12:38:6e:21:e7:bc:20:e6:
         a2:75:45:38:00:8b:37:85:08:25:08:68:ab:a8:e1:28:15:c0:
         21:67:c5:58:00:57:a8:2d:69:fb:40:76:1b:e9:bb:e7:9a:78:
         d7:48:ff:cf:d4:08:49:41:0a:b9:c1:85:40:c1:30:1f:47:f2:
         eb:eb:0f:4d:d2:20:5a:5b:20:7b:cc:ed:c4:bd:b0:b8:96:96:
         ad:aa:ce:f3:d8:ca:36:bf:4d:16:b7:58:2d:bf:19:37:58:42:
         af:07:5d:ef:b5:4a:6f:b9:54:1d:be:b9:38:5a:5d:11:d2:69:
         d3:7b:01:bd:08:41:6a:34:1b:56:ae:ba:e8:64:67:0e:f1:04:
         7e:9a:93:d8:c7:d2:a8:7d:9e:d5:16:de:58:9a:a2:38:5d:f0:
         35:69:cf:95:39:9d:d0:0b:5a:db:65:8e:a8:70:7a:af:b1:fa:
         92:08:4b:eb:53:69:37:17:3b:4d:2f:00:23:74:6a:3c:5c:5a:
         18:c4:b2:a1:91:39:dc:91:55:3e:10:0c:37:f0:67:9d:70:c5:
         72:58:f2:0b:7c:08:59:5d:8f:ff:96:8e:f1:27:8f:5b:07:8c:
         1e:25:65:10:49:d4:6c:8f:8a:1e:04:7a:72:db:f5:cc:24:b6:
         a6:fd:0c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:08 2026 by rpki-client