Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File:                     d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier:          xABFljFLeU2zCfnzCZui914r/XNVF511f+kKsnOqws0=
Subject key identifier:   C4:45:41:B0:1B:C8:C8:43:44:A6:68:D6:B0:60:0C:D4:5D:29:CE:F5
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer:       /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial:       019EBE7FD7B844EAED0F5CB743B92C323AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number:          1136
Signing time:             Sat 13 Jun 2026 01:01:49 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:49 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:49 +0000
Files and hashes:         1: 0gkjksOno670ocIFMbRjSDKIvKQ.roa (hash: 7fdQyOsucl3w/CcG9UB31TgK1ZGG4pW/88lMHFnh6NI=)
                          2: 91KPHlggwTaeQm7B9Z-AqzP9EBQ.roa (hash: IkXK2vJL4pQnTxIekZE8OSCq0z8UL2BTuoyyjhTkN4c=)
                          3: QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa (hash: n7+TsjKCJzLkUr9shTyI7r/icRNSvOD74GCCpk5ZSUI=)
                          4: SOoKX4cNuYJIPao636suM6QbecU.roa (hash: AmP+tcOlMZhqBPlPO/PnVy1DrGZoadzcvOYUXfRfWD8=)
                          5: Tz7z7nnpOo-_7_49pU8TRQgx4D4.roa (hash: fX3u4dH9kXlBUEKXajJ7/RMZrYzYaBeRsNw5GTo8Vhs=)
                          6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: KXYGcQcAVfIVmX8fOT1+HdpFa8dxRaFe9tnK7k25fCU=)
                          7: qBcLlywaD6m7lZXiWermZkxeWVc.roa (hash: auQTPfDUcRzWJ8RTz3z6nOVCI/Q9IjlAOX2YpbeFNMA=)
                          8: ve-jf9EP-jZkCjaun2Gx06psfDo.roa (hash: 5muddW+OaJvatwuoYErV6aaVeMSYh2Ga8iL+J5a6G3k=)
                          9: xdAaexAUdUDttJM21F7tUlAz2vs.roa (hash: VedRkQ44jOEPcPIUd0dHiyi/hpTJ8KF1xUzmzLpT6Aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:d7:b8:44:ea:ed:0f:5c:b7:43:b9:2c:32:3a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
        Validity
            Not Before: Jun 13 01:01:49 2026 GMT
            Not After : Jun 14 01:01:49 2026 GMT
        Subject: CN=c44541b01bc8c84344a668d6b0600cd45d29cef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:94:de:4b:e0:29:a3:ef:5d:8b:2c:93:e1:
                    d4:8f:41:6e:ac:29:c1:09:a7:02:d6:a0:0b:51:3e:
                    f0:fc:0b:3c:f4:00:30:79:fa:3f:f6:97:a3:a3:e4:
                    79:72:a4:0e:06:2c:39:33:9d:07:e2:30:a1:c5:90:
                    66:7a:cc:d3:e1:70:34:2e:67:73:c3:12:ac:1c:95:
                    aa:53:bb:54:94:cb:7b:05:c3:d0:3d:a6:77:ad:14:
                    e8:84:a5:18:60:9f:40:c6:bd:2d:c6:d7:d8:5f:0c:
                    e3:b2:51:a0:58:1d:6b:7e:7c:c5:f7:03:9b:09:58:
                    50:17:44:67:3c:32:4a:c1:f0:30:f3:e4:fd:b2:9f:
                    82:37:96:34:38:4b:de:8f:34:98:e7:7f:ea:c6:71:
                    0d:48:57:81:21:0d:84:b5:8e:7a:b1:e1:ad:2a:97:
                    d0:a0:79:26:0d:d4:65:b5:48:9b:f2:9d:d1:25:df:
                    aa:81:8f:a6:70:09:28:90:c7:df:c8:df:88:f7:0e:
                    9c:09:26:62:6e:7a:ce:8f:91:c1:1f:90:04:80:1f:
                    49:ba:03:22:f3:4c:e2:c6:f5:25:cf:bd:68:40:3e:
                    29:63:ae:5b:f6:70:a6:20:d0:27:f6:90:b8:59:10:
                    db:95:f5:55:be:30:95:69:77:4e:d9:ac:93:f4:ad:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:45:41:B0:1B:C8:C8:43:44:A6:68:D6:B0:60:0C:D4:5D:29:CE:F5
            X509v3 Authority Key Identifier:
                keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:3c:74:91:93:1b:e2:01:2d:40:30:1a:65:b0:44:c9:5b:75:
         39:c4:f3:83:b1:5d:e6:1e:f6:47:e5:a2:7f:ad:06:cb:14:42:
         c3:77:02:5a:08:6a:e3:22:c4:18:4a:86:ac:34:f7:af:ff:eb:
         e3:12:d4:d1:60:70:ab:4a:43:e8:59:69:23:87:5e:00:33:f9:
         c3:03:e0:9b:31:f9:59:b6:56:ed:ef:8c:ca:1d:f7:f2:6f:ae:
         89:03:03:70:5d:e0:ef:39:65:82:7d:d5:65:f2:44:b4:8b:cb:
         29:84:7d:39:0f:a1:e5:2c:50:8d:27:83:51:bd:3d:05:ce:f0:
         d5:cc:43:77:7b:7d:e1:3f:1d:c1:c5:9f:ff:69:cb:17:df:89:
         57:67:97:a4:ba:b7:e8:04:57:08:09:1c:c0:4d:29:f4:1d:12:
         c6:9b:87:7a:b3:ec:37:dd:72:22:e1:24:b3:00:5d:59:e0:70:
         c8:36:d3:a8:31:04:11:79:a1:08:09:97:f3:14:8d:3f:8d:62:
         32:c3:44:6b:ee:21:57:ff:0e:24:a0:5c:44:57:9b:eb:21:84:
         cb:00:7e:50:60:ff:1d:e5:fc:0c:f2:e6:fc:d3:d1:9a:d3:31:
         73:fd:e2:3c:3e:1f:cb:2b:c1:86:d7:14:79:64:d5:55:dc:d9:
         bc:f4:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:09:53 2026 by rpki-client