Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File:                     IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier:          zZGi/mwglL8d2BsnnTR7+m5/uFyyOYMeR9wqC75rZRc=
Subject key identifier:   81:3B:34:B7:53:94:2E:63:F8:27:D5:12:71:B8:E1:D2:98:28:5E:C9
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer:       /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial:       019EC480A91696E4BEF0958279730DF18B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number:          18BE
Signing time:             Sun 14 Jun 2026 05:00:26 +0000
Manifest this update:     Sun 14 Jun 2026 05:00:26 +0000
Manifest next update:     Mon 15 Jun 2026 05:00:26 +0000
Files and hashes:         1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: ySj/71tqUeeSmrBprmHb2EupqBNf4JSekGG6N1H+sDQ=)
                          2: qSWfUPbdifhrh3aKuAhxxmylP6A.roa (hash: fB+qGwcW2GhnHX2osyvSPDhd9KmuxX/DLSWIY8hF8h8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:80:a9:16:96:e4:be:f0:95:82:79:73:0d:f1:8b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
        Validity
            Not Before: Jun 14 05:00:26 2026 GMT
            Not After : Jun 15 05:00:26 2026 GMT
        Subject: CN=813b34b753942e63f827d51271b8e1d298285ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:59:e5:cd:a0:b1:cb:c6:03:44:a5:62:d4:
                    ec:2f:b6:d9:73:ad:03:9d:5b:fc:8d:47:94:ba:5a:
                    30:be:29:f4:e3:35:ac:b0:61:5d:f8:49:d5:e0:91:
                    6c:8f:90:ac:af:ad:b6:a1:a6:bd:33:72:93:ab:54:
                    9f:fe:45:75:49:7a:7e:f4:76:d1:fb:55:9b:fb:98:
                    14:11:6d:12:c4:54:dc:a1:fd:81:37:35:3f:a1:22:
                    a3:9e:d0:7c:61:fe:01:f9:51:92:ea:68:ec:0d:d1:
                    e9:e6:eb:20:ae:e3:ad:8b:5c:ae:1d:8f:47:e8:3a:
                    da:62:01:54:9e:81:bb:b2:c0:7c:cf:db:53:19:6a:
                    3b:9a:b9:96:3b:6a:9b:81:dd:75:06:7e:f9:a5:1d:
                    66:ed:94:78:73:03:bb:17:21:ea:98:6e:56:3d:a7:
                    84:0c:39:b8:5b:54:37:ac:e3:7d:6b:24:32:81:d4:
                    8e:ad:ad:ab:fc:3f:c0:b2:50:5a:72:c1:61:b0:d0:
                    29:b5:7c:1b:3a:66:3c:18:e0:21:1c:81:d8:8f:fe:
                    70:e3:20:f0:52:08:b7:18:ea:37:e8:bd:88:db:19:
                    b8:85:cb:6f:34:17:97:75:20:b8:24:86:3d:c3:f2:
                    cd:94:db:8b:e9:11:f5:0f:37:cd:99:2a:01:60:d2:
                    3f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3B:34:B7:53:94:2E:63:F8:27:D5:12:71:B8:E1:D2:98:28:5E:C9
            X509v3 Authority Key Identifier:
                keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:42:47:5c:ac:0d:da:9f:64:06:63:9e:2b:a7:45:57:9b:4c:
         da:de:d2:d0:2c:b2:3a:0d:55:39:f5:45:23:54:8c:1b:95:dd:
         91:2b:10:0e:4b:30:6b:82:db:7e:44:a1:df:85:72:bf:46:f0:
         bc:a2:74:e4:21:44:0a:f0:d6:09:1a:0e:13:75:ca:74:26:cb:
         c2:78:c9:a6:03:a0:a8:93:cb:81:54:3b:8c:70:b7:01:fa:f9:
         28:1d:d2:70:de:a4:01:db:1d:2b:ed:d9:46:36:ca:f6:d3:5c:
         f9:79:94:6a:53:4d:5e:d2:ca:d1:32:db:7e:3a:cd:0a:83:1c:
         e3:e7:ce:99:8f:65:3a:60:29:7e:25:61:a1:28:a0:ac:08:5d:
         80:7a:c8:9f:93:f1:d9:69:34:fc:1c:f9:09:f5:ad:b3:2b:a0:
         45:11:e7:0e:33:3d:b4:ec:e5:be:08:91:7b:cd:c6:6b:11:7d:
         66:b1:76:64:e4:41:a0:4c:71:19:f5:a0:fe:af:49:2d:d0:d6:
         9b:90:55:29:1e:42:98:32:b7:96:b0:b5:cc:7c:ba:2b:bb:f7:
         51:0d:3e:1e:bc:d5:b1:66:43:d4:f8:c1:2c:c8:4a:ab:5e:a3:
         f4:67:0c:16:ad:8b:8f:04:dc:60:98:89:63:33:42:c9:2b:d6:
         03:0a:38:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:47:02 2026 by rpki-client