Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File:                     ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier:          ZPc2H6G1jfvxVl+uZT86t8pViQQ/l2+Wihl5H3v1C8g=
Subject key identifier:   16:23:DB:3E:F3:78:DC:0D:5E:0D:8E:33:66:AD:DD:28:E4:C4:C2:5B
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer:       /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial:       019EBE7FB74A2659C57D6B68703DF05A579F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number:          07E7
Signing time:             Sat 13 Jun 2026 01:01:41 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:41 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:41 +0000
Files and hashes:         1: DXojyG6Fa76_70LTpGedxCQc75s.roa (hash: HWxVU0ho3JUfdYcZ/ilbHWOHlNIlCGDgzL/80lsIOt4=)
                          2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: H2W9LWWrQgvKrA6hjE0xuuOzAsOo7/E11jFaVa2HPAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:b7:4a:26:59:c5:7d:6b:68:70:3d:f0:5a:57:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
        Validity
            Not Before: Jun 13 01:01:41 2026 GMT
            Not After : Jun 14 01:01:41 2026 GMT
        Subject: CN=1623db3ef378dc0d5e0d8e3366addd28e4c4c25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:49:7d:bf:c5:c7:59:bb:bc:e0:d3:da:8f:
                    cd:ce:85:c9:48:87:a9:b0:d7:76:54:36:7f:ea:ff:
                    2f:1c:17:58:4b:ae:96:9b:7c:62:6d:32:04:bf:75:
                    20:0c:e0:6d:7c:d8:a4:49:b2:08:4f:5f:c7:c1:6d:
                    78:7f:ca:f9:c2:2e:dd:48:bc:73:9e:1b:4a:8f:c9:
                    23:27:57:cf:b4:7f:34:e7:69:7d:05:61:19:c1:ba:
                    47:c4:6e:d2:d6:a7:48:f7:9a:ee:ed:7b:87:91:c0:
                    39:0b:f5:15:4e:ee:30:8a:a2:61:84:9c:ec:e4:9d:
                    9f:21:36:02:22:9c:ad:cc:a5:39:22:0f:ac:56:67:
                    5f:50:dd:af:a8:af:1e:0a:f8:7a:f1:f3:00:4a:11:
                    f1:8c:07:aa:b8:6e:19:b8:b7:fa:c9:93:a3:9f:57:
                    e3:93:22:fc:ed:c7:b0:d9:7a:6d:5d:c2:7c:c9:09:
                    08:60:04:fa:8a:b1:6e:0f:c3:a6:cd:66:0b:f2:c7:
                    b4:be:5c:75:2a:b0:e9:f8:a7:1d:3b:83:b7:fc:c5:
                    7b:e3:fe:9c:cf:e0:fa:a4:01:29:98:4e:af:6d:2b:
                    b1:45:2b:17:13:90:16:ea:47:2f:81:76:16:77:21:
                    ad:eb:04:71:70:8d:df:9d:6e:4b:8f:03:13:1f:35:
                    6e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:23:DB:3E:F3:78:DC:0D:5E:0D:8E:33:66:AD:DD:28:E4:C4:C2:5B
            X509v3 Authority Key Identifier:
                keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b6:5d:d4:16:c7:c2:7c:ed:08:bb:5c:a0:a7:85:82:1a:65:
         52:0e:60:51:e4:60:68:31:2f:ba:94:f3:a9:c3:7e:ab:16:ce:
         6b:7c:fc:87:99:f3:22:a5:7a:e0:76:25:0c:21:3c:7d:6a:39:
         f2:ca:69:63:86:fc:b6:f8:da:5e:a6:c5:ef:9f:bd:16:f7:90:
         7f:6a:d8:94:71:35:7c:11:11:50:bb:ab:83:df:f4:b6:61:b4:
         3f:fb:34:c6:87:2c:11:e0:21:63:52:bd:76:e1:2d:6f:e9:ab:
         a5:fb:c9:38:e4:5c:03:d2:ce:b2:3a:8c:71:1f:bd:94:94:97:
         24:3e:d2:a1:cf:62:6b:c4:98:08:6d:c4:60:31:14:ab:58:e1:
         11:bb:64:90:a4:1c:59:4a:3c:cf:67:86:22:26:77:58:ba:64:
         88:93:9e:7f:f0:1b:6f:f3:03:c5:e3:d5:2d:da:d9:4a:be:f9:
         a1:38:6b:74:13:06:74:24:31:dc:0b:4c:22:52:4d:0b:50:9b:
         9d:cb:4b:21:5d:f6:54:3f:be:dc:7f:62:96:e6:41:cd:eb:fa:
         d9:81:1b:63:b1:54:56:c1:b4:30:21:a5:3d:b7:b6:15:42:b1:
         1a:f1:0d:0f:0b:44:24:09:55:39:e4:db:6b:6d:18:93:ad:e2:
         b3:d2:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:21 2026 by rpki-client