Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File:                     iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier:          CnG9FFiHfm0Z2jqigP62l4Ce7NYWaVd9jcJfEg+7T5M=
Subject key identifier:   F1:64:69:1F:90:C1:C8:B0:25:7E:FF:9A:8D:4D:D8:08:B7:A7:D0:66
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer:       /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial:       019EBF233187E2D53790A854A7784BBB7D4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number:          1288
Signing time:             Sat 13 Jun 2026 04:00:15 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:15 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:15 +0000
Files and hashes:         1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=)
                          2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=)
                          3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: YY4zCdDEFkf4cOaguZXwPM05zhct2UWQM+x/YEGMB+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:31:87:e2:d5:37:90:a8:54:a7:78:4b:bb:7d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
        Validity
            Not Before: Jun 13 04:00:15 2026 GMT
            Not After : Jun 14 04:00:15 2026 GMT
        Subject: CN=f164691f90c1c8b0257eff9a8d4dd808b7a7d066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:bf:ff:5f:a2:b7:75:44:01:3e:22:76:b7:
                    da:b1:63:ae:bd:fe:f2:75:55:ee:c4:2f:78:f9:49:
                    89:2a:24:92:54:35:7d:3a:6f:54:98:f7:ce:7b:d8:
                    aa:1f:f7:40:cc:5c:ba:47:d4:70:c3:a6:ef:55:ac:
                    24:7a:67:da:9e:57:5c:2b:cd:f6:be:cc:23:cf:9a:
                    90:58:ea:c5:82:78:fe:02:27:ef:c5:7b:fe:25:25:
                    46:16:46:72:11:f2:2b:42:81:d0:c2:83:c0:73:aa:
                    59:93:2d:2c:20:8c:18:04:53:65:c4:ac:87:7c:e7:
                    d6:17:93:5b:72:fd:6e:9a:8c:a6:a4:dc:74:fb:dc:
                    af:31:47:c6:fd:78:6b:48:c2:75:f9:6e:e5:ae:12:
                    91:5b:cd:e5:3d:a8:8f:13:aa:f4:c5:8b:8f:2c:ce:
                    55:24:12:d1:80:b2:7e:ae:f3:0f:f1:fd:d7:ff:b6:
                    91:2b:90:1f:72:be:52:2d:18:d7:88:c7:6d:ca:68:
                    d9:53:7b:e2:8e:70:e3:68:0b:b3:da:a5:29:7f:71:
                    f8:26:32:c8:bf:4b:c2:f0:52:b6:ac:c4:c8:ac:81:
                    cc:03:7c:7f:95:8c:82:01:80:ab:1f:83:81:93:a5:
                    b1:f0:15:d7:92:3c:7e:70:45:0f:47:eb:6a:38:65:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:64:69:1F:90:C1:C8:B0:25:7E:FF:9A:8D:4D:D8:08:B7:A7:D0:66
            X509v3 Authority Key Identifier:
                keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:84:64:6a:d6:1f:46:f1:c2:1f:8d:71:fb:07:68:d0:a9:78:
         40:af:f1:f7:08:4a:1c:e7:a5:16:cf:7b:23:03:e0:09:00:70:
         e6:35:3d:4b:5f:d9:ba:02:34:e7:a5:5b:8a:3b:63:5d:2b:01:
         df:69:35:ed:e1:07:71:cf:fb:44:03:0f:62:b8:f9:95:0c:0d:
         bf:80:fa:91:d5:26:ac:53:6b:52:24:2a:e9:8e:50:65:46:85:
         2a:84:4d:2e:54:1e:b3:0e:b8:cb:6f:a4:fa:8a:24:87:89:4e:
         78:cd:b9:80:87:29:04:18:d7:b8:eb:33:97:25:b7:b2:f5:40:
         3d:98:69:e7:38:9b:2a:3f:46:cd:9b:ca:97:c1:72:91:39:00:
         8e:09:5e:3b:ff:0c:85:63:05:08:35:36:a0:18:ab:c6:8f:72:
         4b:24:bf:65:a2:44:a6:75:eb:23:07:24:af:30:bf:77:3a:30:
         a3:d4:2f:33:5f:0b:c0:07:80:94:bd:40:cb:92:dc:c4:a6:a2:
         8c:65:b0:cc:51:8c:51:ad:b6:c5:4e:30:7b:52:cd:55:a8:da:
         8f:57:34:81:29:e4:8e:c4:74:e3:1f:64:25:c8:fe:48:e9:18:
         32:73:87:2c:84:b0:f2:0c:c5:3b:c7:b9:ba:74:bf:07:c0:3f:
         1d:9a:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:19:00 2026 by rpki-client