Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File:                     7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier:          go0OiRQ9NeSWXslHbUR5SsNqeAAXX8VN1cgFflFTzVA=
Subject key identifier:   BF:12:4A:44:F0:14:C0:5B:A5:5E:6B:E0:89:A0:20:29:FC:CB:17:69
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer:       /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial:       019EBFC8E62786FBFAF66B7B70D4B78084EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number:          0DBE
Signing time:             Sat 13 Jun 2026 07:01:14 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:14 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:14 +0000
Files and hashes:         1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: kyFF0IIXfi6fhgT8ITHmfgdhCSzWw1bUt5wWEof8q3o=)
                          2: HdaygFB4iSszAmMjo8uX2Se1nQA.roa (hash: UArj7jtroG3BsSDh4aM2iaAylpZS3vUew6s3b3GEueo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:e6:27:86:fb:fa:f6:6b:7b:70:d4:b7:80:84:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
        Validity
            Not Before: Jun 13 07:01:14 2026 GMT
            Not After : Jun 14 07:01:14 2026 GMT
        Subject: CN=bf124a44f014c05ba55e6be089a02029fccb1769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:81:72:be:1c:4b:a4:6d:b2:28:90:cf:ee:88:
                    1b:39:57:a2:da:d9:2e:60:99:3c:8b:43:d9:73:d6:
                    9a:32:ee:58:39:03:60:a9:8b:31:1d:1d:a4:dc:f8:
                    b8:5f:c9:f3:4c:2f:bd:19:14:92:00:32:12:19:6a:
                    2d:40:3d:63:9d:7b:e1:7f:9d:b7:a4:d5:bf:dd:26:
                    d2:50:d2:11:3e:fe:6a:db:d3:32:82:e7:58:d3:b4:
                    cf:66:da:9f:28:19:c8:8e:f8:2f:d6:99:dd:10:74:
                    f4:76:50:12:ea:90:59:1c:10:71:80:d2:be:c2:bb:
                    11:f9:42:10:f1:c6:19:89:38:74:b7:a8:ea:77:de:
                    7d:37:6d:40:54:ab:44:03:75:b4:c1:8e:3e:68:a5:
                    32:a2:fe:cc:f6:bf:49:5b:cc:c0:17:00:67:c7:a7:
                    88:77:80:de:68:df:03:f7:1a:e7:62:27:6f:c4:73:
                    9a:65:e2:66:d4:77:38:1e:a2:3e:09:25:33:08:2d:
                    9e:56:12:50:24:40:4e:f1:e2:36:b2:2e:69:05:b3:
                    30:9d:f6:7b:8d:d8:8a:5b:15:83:11:c7:a9:d1:dd:
                    90:3e:32:a1:70:18:0e:9c:1b:cb:95:26:56:80:20:
                    dd:b3:30:c0:4e:66:81:cd:7d:7a:a1:fd:f6:1b:a6:
                    1c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:12:4A:44:F0:14:C0:5B:A5:5E:6B:E0:89:A0:20:29:FC:CB:17:69
            X509v3 Authority Key Identifier:
                keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:92:6d:71:d5:82:1d:eb:67:e7:e3:19:ef:c9:f6:25:c7:
         36:e0:cd:94:43:25:fc:fe:1c:41:cb:ac:a0:e3:b5:6f:83:1f:
         80:40:9b:c2:78:79:ef:f2:ff:48:53:c8:a3:c6:e6:83:a1:54:
         34:18:9d:85:9e:53:25:69:ee:93:c0:d7:9a:84:95:1d:65:07:
         43:12:fb:03:48:53:d5:49:2e:91:94:07:97:a0:fc:54:8e:52:
         d6:bc:30:f9:a3:81:8e:56:bc:2b:e2:a1:d3:f2:ac:fd:9e:7c:
         28:2e:29:fd:19:a3:33:fd:5f:bf:1d:75:a1:b9:3e:c7:67:86:
         13:6f:f7:e4:cd:65:cd:4f:4f:47:96:0f:fe:2d:1a:72:35:80:
         37:47:d2:a4:3c:7b:1e:c8:8c:32:cc:cd:f3:0f:c9:5c:c5:20:
         ea:52:f6:04:71:a2:5a:f6:31:39:34:6c:d4:f7:0b:94:24:9d:
         0b:9c:f9:0c:da:de:c6:1b:9a:4a:dd:9e:e9:a9:c7:0d:3e:b8:
         ee:58:60:0a:1f:29:a8:43:25:88:58:54:c4:2f:c8:38:37:a8:
         56:0c:67:9c:16:2f:8b:0d:a6:4c:e5:cc:83:61:3a:c8:97:71:
         65:ca:c8:bf:66:36:a0:6c:f9:29:58:0e:c0:0f:0e:f5:86:80:
         78:6b:5a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:32 2026 by rpki-client