Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File:                     60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier:          Qr6shkMs2oBwK1O5cbOxyhM8cRsxVzqapXiezmR00Nc=
Subject key identifier:   30:ED:07:D3:50:3B:71:31:BD:47:E4:73:EC:56:2C:F5:5D:63:2D:9E
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer:       /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial:       019EBF23F5A5B7471C16706BB8281692B613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number:          0DCE
Signing time:             Sat 13 Jun 2026 04:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:05 +0000
Files and hashes:         1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: MHt7KTHFKFNV5nO/aV90V4zPphOCGJJRQpZUOSiUExc=)
                          2: SaaOxyoRftnC93VwoMwsYhac2Cg.roa (hash: Jyzc6vUApI7lUiCT6AHnK70fIf9nJAWEiYkk+m1RDzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:f5:a5:b7:47:1c:16:70:6b:b8:28:16:92:b6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
        Validity
            Not Before: Jun 13 04:01:05 2026 GMT
            Not After : Jun 14 04:01:05 2026 GMT
        Subject: CN=30ed07d3503b7131bd47e473ec562cf55d632d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:f5:02:15:6c:f3:61:22:b5:02:d3:95:de:
                    1a:48:e3:3e:66:45:df:04:07:d9:51:5f:11:bb:c6:
                    1f:4f:47:19:28:64:c6:c7:ff:73:36:2e:cb:b3:f2:
                    ba:d4:27:0c:b2:49:a7:cb:95:43:c2:9f:08:9e:b6:
                    9a:a9:b4:d8:fe:69:1b:06:3a:23:a4:8d:40:7c:d8:
                    cf:be:cb:70:01:b5:cf:e5:c1:1c:42:5a:22:17:92:
                    10:ca:c2:81:fd:c2:89:93:02:99:9d:1f:c9:ec:14:
                    e2:16:9b:0b:27:71:b7:3c:bf:72:a8:1b:f4:bb:c6:
                    75:80:a3:4a:3c:9e:0a:cd:1a:bd:69:ee:32:ef:bf:
                    31:ca:af:50:8e:ad:c7:dd:45:7d:82:17:d3:18:e2:
                    25:84:67:dd:4b:94:dd:0a:8c:1f:6d:10:38:f1:b5:
                    03:8c:21:f9:fd:6c:32:b3:c6:88:d4:a6:27:d6:7b:
                    b3:5b:16:d0:3a:b1:22:a4:e6:8f:ed:47:d5:cc:5c:
                    91:0c:0d:a1:20:20:a4:2d:b0:4b:b1:1b:58:36:ca:
                    f0:76:f7:15:54:37:02:02:fa:d7:34:0c:aa:e5:a5:
                    1c:9c:a9:d0:a8:61:cb:1c:c9:3c:48:3b:56:b2:28:
                    19:d9:c7:ad:27:a8:ee:d1:66:9d:6b:19:f8:18:bc:
                    bf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:ED:07:D3:50:3B:71:31:BD:47:E4:73:EC:56:2C:F5:5D:63:2D:9E
            X509v3 Authority Key Identifier:
                keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:47:25:97:29:4c:a0:11:bd:2c:33:d2:2e:99:a9:22:6c:88:
         b0:5f:1b:eb:f3:95:52:9c:54:09:2c:ad:9b:a0:06:5e:55:68:
         a1:8c:35:e5:a1:95:64:61:1c:6f:09:22:79:d1:64:2b:b4:7d:
         0f:b8:c1:33:ef:79:a6:40:41:19:5f:37:04:45:c7:c4:6a:bb:
         9b:3f:47:99:ba:7d:04:aa:81:8e:df:41:09:8b:89:f4:e6:df:
         b9:64:43:db:c0:f0:39:45:a3:ce:f0:19:d3:2a:40:fe:11:c7:
         35:67:3f:0a:6a:06:4c:13:88:ca:90:c9:8c:ca:80:fd:c8:d9:
         67:78:67:8e:68:60:1f:52:b5:43:ca:5b:03:69:d8:99:13:80:
         86:f3:de:78:2a:a6:e1:b1:82:c9:f5:0a:24:cc:0d:c6:87:7d:
         7a:81:9c:0d:9f:2f:57:de:58:cb:a6:b8:f0:68:0d:8d:9c:a1:
         0d:f7:a1:04:68:1f:be:7d:56:28:31:7c:48:fb:fe:f9:7f:3e:
         a3:04:21:bc:1e:5d:84:d2:5f:eb:35:e0:6c:8b:3f:50:30:cf:
         bf:ed:41:74:d6:05:fc:af:15:54:d2:83:cd:02:85:62:f0:72:
         46:d0:a7:04:a4:f7:48:e1:f3:2c:17:90:d1:98:26:5c:d1:40:
         3c:a6:9b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:55:46 2026 by rpki-client