Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File:                     CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier:          eqDA43kxSZ+VJVr6xhTnp6t6gk1vFsRYiroDe+70LSg=
Subject key identifier:   7D:F0:E9:68:C5:67:5E:E7:6B:60:57:49:10:80:FC:E0:DF:DF:CD:D1
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer:       /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial:       019EBF5A9BEE9ABC680ED0B7CCD78CF51023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number:          059D
Signing time:             Sat 13 Jun 2026 05:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:46 +0000
Files and hashes:         1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: P8hYDlm3FGlNcJmJQXnZMVcoSL3dU2RxaY4823jblxA=)
                          2: iup8bZJXQWzi6WIn8KegueZOLKE.roa (hash: zSYxeBh1XdgerWZy0gplpGx/R0toVcfaeIhO/MDyw5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:9b:ee:9a:bc:68:0e:d0:b7:cc:d7:8c:f5:10:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=080702932802c2743d335f67d47a4238c3324533
        Validity
            Not Before: Jun 13 05:00:46 2026 GMT
            Not After : Jun 14 05:00:46 2026 GMT
        Subject: CN=7df0e968c5675ee76b6057491080fce0dfdfcdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:68:4e:5a:03:ff:96:a8:fa:77:df:12:e8:83:
                    86:8e:6c:8e:61:47:84:07:97:c9:7e:14:d2:1a:a4:
                    5c:e6:ee:da:c2:49:51:4d:1f:36:33:2b:85:e9:cc:
                    dc:d4:81:bd:10:49:ee:dc:77:71:82:4f:90:50:9c:
                    6f:dc:31:30:a4:6d:a5:e9:50:88:6e:07:52:92:fa:
                    a1:c1:a9:ed:dd:d5:62:bd:bc:fd:0a:7b:4f:7f:2c:
                    29:9d:db:e9:45:53:62:98:8f:64:60:c9:63:0e:00:
                    d7:3a:3c:02:70:3c:c3:a2:66:72:eb:a9:a7:b3:2c:
                    ac:48:70:06:36:35:2a:75:a7:2d:34:b4:d9:d1:b7:
                    9e:37:65:f0:ed:a3:cb:b8:4b:50:63:1f:8d:c3:0f:
                    a1:0a:9c:68:bc:cb:5e:bf:7c:bf:a1:39:d6:55:69:
                    68:56:cc:91:06:30:3e:68:d9:d9:80:75:94:37:35:
                    2e:2d:97:ff:97:53:73:4c:52:96:14:e5:70:5f:d6:
                    81:44:69:85:95:84:84:c9:04:f2:6a:71:95:e9:d5:
                    9b:1e:cc:8b:f8:56:44:67:fd:13:49:96:52:20:34:
                    2f:9f:ef:dd:04:62:62:d8:06:f7:ee:a9:2f:78:f4:
                    7f:68:51:43:5b:2e:8b:12:b8:90:56:8a:ee:ea:19:
                    5c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F0:E9:68:C5:67:5E:E7:6B:60:57:49:10:80:FC:E0:DF:DF:CD:D1
            X509v3 Authority Key Identifier:
                keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:16:5e:91:4e:38:ba:91:35:00:4a:2b:d4:33:d3:0a:a2:b0:
         5c:c2:f8:1b:82:3b:ac:22:20:8e:ac:dd:b9:ae:51:d5:0f:88:
         67:d0:af:b2:a9:6e:06:d9:45:3d:ed:09:01:44:49:b9:0f:5a:
         cb:ee:68:47:a3:95:32:23:e3:66:9a:a8:47:a5:90:36:69:2a:
         a0:21:39:ba:c4:f2:4b:1c:a4:6e:c0:e9:49:75:77:2c:ea:b9:
         69:41:12:68:f8:83:4c:9b:f5:c7:f4:7c:36:4b:9d:0e:57:a4:
         31:bd:90:43:fb:34:23:d2:b7:86:95:3e:ae:ce:16:02:70:44:
         9f:40:0e:74:e2:b9:be:17:90:0b:02:57:0f:bb:f9:2a:e5:7c:
         11:67:96:4b:5d:35:45:9a:ae:06:c6:ab:64:15:ac:49:55:7a:
         5f:fa:bb:7d:07:cf:d1:71:e5:dd:19:be:03:b1:79:e1:84:95:
         43:da:1e:d2:e4:8e:0d:aa:a5:03:e4:ea:4e:b1:df:8a:20:3d:
         94:42:72:cc:c0:26:70:aa:16:ff:34:55:99:31:0b:98:6f:be:
         f5:07:04:80:f7:02:7f:cf:36:f9:65:b7:eb:8a:7a:d8:f8:0c:
         bb:80:65:52:d9:03:52:a2:11:7e:3d:9d:39:79:5c:e8:a7:0b:
         d5:fb:72:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:14:33 2026 by rpki-client