Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
File:                     IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json)
Hash identifier:          bPBI5uRiE1n8+diBfaEUW/91APq8QZnzw2dp8rbRfVI=
Subject key identifier:   7E:EE:74:5D:E1:F2:BA:B7:CA:EE:3B:53:0E:2C:4A:90:A6:7C:B4:AF
Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
Certificate issuer:       /CN=2004d6293274396f5a8d691485d6876a0a2071d9
Certificate serial:       019EC224E051368BF7DCF48C98ED323F8A22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
Manifest number:          15FC
Signing time:             Sat 13 Jun 2026 18:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:56 +0000
Files and hashes:         1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: XGkjlZFJmz/lgCRNEzs3Da+yIQmIo3j+hM61Q0ZidCA=)
                          2: hnmnA26xKXY54jFPUcSN_0PAckk.roa (hash: iZnIOMbwxqj7gdSqvCeT/1vFVrhvoJ0Z39/9nmcH68s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:e0:51:36:8b:f7:dc:f4:8c:98:ed:32:3f:8a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9
        Validity
            Not Before: Jun 13 18:00:56 2026 GMT
            Not After : Jun 14 18:00:56 2026 GMT
        Subject: CN=7eee745de1f2bab7caee3b530e2c4a90a67cb4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:e0:8b:de:5c:7e:93:59:1c:d3:d2:73:48:
                    18:be:a0:e4:98:8d:6d:2f:dc:86:77:ea:fb:b8:f6:
                    56:1a:6b:9c:83:fa:4f:6f:6f:46:90:a7:09:a5:3d:
                    85:3c:74:e5:12:89:35:fa:a1:b7:b8:5d:a1:15:20:
                    11:53:7b:55:c4:93:ae:51:a5:e3:07:29:fc:d5:66:
                    2a:72:7c:ad:61:c2:e4:6d:8a:64:fd:22:83:14:ee:
                    06:eb:3f:35:21:79:6f:4e:29:9d:34:c7:3b:f7:15:
                    c2:e5:08:8a:11:32:59:f7:03:b8:60:8f:93:45:9e:
                    72:6a:a5:26:f4:a9:5e:64:2b:dd:2d:e6:a2:81:cb:
                    ca:71:70:d0:92:f9:3c:f7:26:6c:cb:0a:d2:d9:de:
                    9b:b3:64:4b:c8:7a:1f:ba:ce:5d:25:fc:fd:15:da:
                    d0:4d:fd:fa:f8:ec:14:16:5a:a5:d4:c4:ca:f4:04:
                    18:8c:df:87:2b:cb:23:b3:ca:1f:4e:f1:ab:8a:a2:
                    b0:f2:5c:f2:ac:a9:c7:0a:4d:6e:0f:62:33:fb:95:
                    e2:be:2e:6e:7e:b7:b6:c3:d8:98:9c:3a:5d:5e:8a:
                    0c:7a:1e:3c:e3:bf:16:c6:61:45:66:c0:d1:0a:6b:
                    ec:b8:1a:78:e7:4c:6e:d2:43:75:dd:79:6d:c9:44:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EE:74:5D:E1:F2:BA:B7:CA:EE:3B:53:0E:2C:4A:90:A6:7C:B4:AF
            X509v3 Authority Key Identifier:
                keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:77:08:6a:68:80:40:c0:cd:17:aa:47:44:0b:1e:a5:6c:13:
         c1:e4:3e:b4:c5:47:43:00:5c:12:c8:d6:78:25:ba:60:7e:71:
         01:96:fc:42:3c:f1:55:92:67:9a:ae:b9:2a:6e:cd:9d:19:b1:
         9e:98:18:80:a7:71:53:17:ad:72:6c:d8:9b:6e:07:72:d0:cc:
         88:e0:34:c7:85:ed:5d:ce:e9:c7:39:53:21:e6:e4:40:e4:1b:
         eb:88:e4:9b:f3:ca:cb:5e:6c:d5:e4:63:7e:9a:8f:62:21:f7:
         c9:d1:ec:97:a1:a5:b7:c8:31:c7:48:8d:6d:c5:00:08:af:dd:
         96:d0:60:ef:bd:70:b0:00:ba:eb:47:63:cc:65:45:c2:6d:13:
         28:f4:a2:8b:1a:31:4c:b0:9f:0f:f2:d0:95:a6:11:ae:40:2e:
         a3:7d:82:23:16:45:a0:f6:fb:dd:15:9b:71:2a:ec:06:e0:17:
         73:60:e1:9e:ea:69:d8:fe:e2:67:67:5f:fe:ba:3e:c3:a3:23:
         ee:32:46:b8:f5:37:35:4a:4c:26:e4:62:8d:87:d5:37:39:cd:
         30:0b:08:60:21:10:60:64:b3:36:01:e5:d8:11:7b:4e:d6:0a:
         7f:1d:10:d2:b1:90:b8:f8:02:c8:c7:34:c0:43:e3:12:31:9e:
         28:3e:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:41 2026 by rpki-client