Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File:                     IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier:          m7zVMxGsff3GA4sAp0g8D0/whSwAd+P9/KcJhJ4Mf8k=
Subject key identifier:   E9:54:80:C7:F2:B7:C6:69:DD:FC:D4:A7:17:1E:20:AA:4D:F9:6D:DD
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer:       /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial:       019EC1120275C26A1A8BA7642324F7B7999D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number:          14A6
Signing time:             Sat 13 Jun 2026 13:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:43 +0000
Files and hashes:         1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
                          2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: w01/nnmirqqN60/N6VFfEyslzB8ceAx5J4hFzkQTYFg=)
                          3: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
                          4: PZ3DvBnBZEzRJV1pn3nJOWDaINo.roa (hash: kJlVCfKZcI1/z1HhlgFzXn1hqpVcX/my4yK+JhAitIM=)
                          5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:02:75:c2:6a:1a:8b:a7:64:23:24:f7:b7:99:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
        Validity
            Not Before: Jun 13 13:00:43 2026 GMT
            Not After : Jun 14 13:00:43 2026 GMT
        Subject: CN=e95480c7f2b7c669ddfcd4a7171e20aa4df96ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:f0:e4:b5:40:d0:6c:c1:dd:9b:8f:92:85:
                    fd:4d:9c:c7:5a:31:ec:ec:08:b5:48:18:4c:b8:14:
                    a5:27:a1:db:c4:1f:b6:7e:d3:d5:8c:38:3b:22:d5:
                    b8:a9:9d:b9:7d:16:da:c2:0d:5d:4e:43:a8:d4:ba:
                    ff:68:d3:94:65:c9:e2:5d:10:7f:62:43:23:9f:91:
                    8f:4c:6b:82:b9:29:8c:51:9b:b8:d9:fe:14:9d:e2:
                    f6:46:a7:3e:f2:13:3b:af:18:f2:c0:22:35:43:28:
                    e2:28:de:11:ce:1a:45:0d:3a:c5:99:17:60:f5:51:
                    76:17:7b:db:33:07:2f:ac:3c:27:0a:ff:b7:08:49:
                    d1:99:6d:57:6b:3a:79:d6:d0:d8:21:8c:fe:db:5b:
                    58:b9:e7:5c:e6:ed:4f:22:82:fa:94:04:46:97:b2:
                    5f:d2:a3:30:74:22:0a:0f:cf:53:e2:04:3e:b6:a8:
                    87:0b:25:aa:f2:c7:0e:95:d7:2f:ef:da:ce:e5:a5:
                    7f:70:6f:96:c0:60:a9:9c:39:4e:df:1d:b4:d2:b7:
                    a6:f0:6f:45:6d:f9:73:2b:85:1b:25:96:77:2f:61:
                    c2:fe:16:88:d0:35:28:c7:fe:40:81:d1:2d:1b:e5:
                    13:f2:44:ae:d3:e4:b9:0d:64:1c:00:40:d3:ea:52:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:54:80:C7:F2:B7:C6:69:DD:FC:D4:A7:17:1E:20:AA:4D:F9:6D:DD
            X509v3 Authority Key Identifier:
                keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:69:26:48:30:88:8f:f1:9a:b9:9a:80:c6:05:39:d7:75:2a:
         40:1a:ce:bb:98:aa:38:86:17:82:ba:a8:ef:62:5f:f3:9e:18:
         03:37:31:ca:01:d6:a8:d4:83:ab:fe:7e:2b:e7:43:57:56:a0:
         66:4d:9b:34:e4:c0:77:6a:d2:52:ed:49:29:5c:58:86:f3:8d:
         87:58:64:18:10:26:8e:36:ee:16:19:e7:ff:1a:dc:11:91:98:
         fb:2b:f3:65:01:20:db:bb:35:97:30:37:86:42:34:6c:e8:76:
         60:31:23:97:73:4f:e0:80:e6:a0:b5:36:21:24:ec:32:eb:b9:
         2c:74:bf:54:f8:35:f4:79:fa:1a:ac:20:36:ec:5e:0c:9e:66:
         4c:3e:4f:a7:8c:50:5b:cb:84:22:d6:3b:60:18:51:a7:dc:d7:
         47:23:df:18:39:70:b8:ff:d5:93:2d:db:ef:13:e5:fa:ac:e6:
         9c:c4:f3:a7:e5:c4:2c:61:13:b6:c0:6e:08:8d:0b:da:ad:35:
         57:43:d3:d6:72:1e:dd:86:c5:b9:0c:e2:6f:bc:f6:57:6b:20:
         e7:72:0f:60:50:8c:dc:89:cb:bc:60:38:44:c1:6e:25:6b:07:
         59:43:79:13:7d:87:a7:de:d1:f1:1f:5d:34:89:f3:78:5a:e6:
         65:42:e1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:55 2026 by rpki-client