Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File:                     0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier:          kLv8NfytC21ms9FL0Rk2spvCgn2DoPS45p/Y1rM1/s8=
Subject key identifier:   0A:09:DB:C5:25:FA:24:CB:98:5D:81:C2:99:83:3F:CF:CD:91:0A:58
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer:       /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial:       019EBF5AA6ADDE9B882600BA5B0B7411FE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number:          08DF
Signing time:             Sat 13 Jun 2026 05:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:49 +0000
Files and hashes:         1: 0HODiJ6zETUxB5V-7gVm2tivJwY.roa (hash: qGeG3nhf+YLEqzJKX+7cT8wuG9iiTSfd9cCIvKbcpI4=)
                          2: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: jq+CvCp85efQ/kVxwHYG3N1Tua7geZr745tNJ1SoWlc=)
                          3: UwYA2ZqOaaqxV-SbROLNU0LYhKs.roa (hash: yo5jrp46t5eed1f0aD/LDv5fDkeM+5705upQY6SakhI=)
                          4: VVzdT8i8Ic0mJD0Mcn7QSzTVqqg.roa (hash: 2cduIqBhGdf+BQ9zIXwABKUp5BhlSqCikGKIR7rcdp8=)
                          5: jguZW_JXxXZXEs7UeDtL_uxFA7E.roa (hash: Di5fz7I66QZtyKR+rBwTjQSM3JlDgDmbsZZusapxtVw=)
                          6: s3WGIAUoxaXezGvnamEPgxxSe6s.roa (hash: m+UVZt/8nZjpbFNEjpwY5nsDKhbrb260ASrF4yP760c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:a6:ad:de:9b:88:26:00:ba:5b:0b:74:11:fe:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
        Validity
            Not Before: Jun 13 05:00:49 2026 GMT
            Not After : Jun 14 05:00:49 2026 GMT
        Subject: CN=0a09dbc525fa24cb985d81c299833fcfcd910a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:59:63:32:34:44:2f:49:be:cb:9f:d7:32:
                    70:e9:7f:d3:5a:91:95:a0:79:d8:64:77:31:e4:b3:
                    95:d0:57:ba:e3:1a:2c:c0:d6:7d:de:72:14:6f:8e:
                    a5:f3:46:53:bd:f1:ae:90:41:58:5d:66:72:16:b5:
                    fc:05:53:6e:06:15:b3:87:fc:9a:b9:9c:e2:91:e6:
                    c4:9a:ca:bb:a4:1e:e8:f8:b0:7a:89:4a:e5:50:d3:
                    72:24:db:c7:ae:91:06:81:76:b2:15:07:63:d3:3f:
                    57:77:dd:d1:81:56:79:d4:d4:1a:50:c7:69:04:f4:
                    71:ad:e0:09:cc:ab:67:8f:e6:69:5e:0b:7e:b7:45:
                    11:92:05:fd:13:29:7a:cc:81:49:dc:7c:77:b6:77:
                    18:c6:ce:fb:da:5f:d6:08:6f:80:f9:a5:60:79:02:
                    0d:9b:08:b7:9d:6b:31:6c:b9:79:cb:70:13:e8:53:
                    fe:0d:b0:de:ac:d1:18:7d:9a:91:f8:13:66:7a:e4:
                    7a:a7:90:75:ba:f6:99:fc:a5:e3:d3:74:48:e6:c0:
                    f0:77:46:a8:3d:5b:6b:9f:e6:d7:7c:9e:b8:a3:8d:
                    d2:2f:9f:1a:34:ed:df:cf:46:1d:e7:2f:4b:23:14:
                    c4:47:3d:ae:6e:d6:bc:89:0f:a2:77:b0:4e:4c:b0:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:09:DB:C5:25:FA:24:CB:98:5D:81:C2:99:83:3F:CF:CD:91:0A:58
            X509v3 Authority Key Identifier:
                keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:c7:18:65:92:9f:bf:8a:32:13:fe:a9:b1:a1:87:10:fb:
         41:81:e2:95:a0:bd:3e:fc:b7:28:5e:d0:28:ad:16:1f:2f:13:
         5b:f3:1d:a3:75:5b:72:0c:3d:f0:4e:19:70:be:6d:2b:85:79:
         b2:dd:45:65:29:32:c9:ff:b5:4b:99:39:25:d7:5f:e9:5b:80:
         fa:d5:8d:e6:f1:03:21:3c:9a:ff:60:c9:5d:a3:2e:12:05:48:
         d9:9c:32:8d:3b:3b:e2:34:ab:72:c1:5e:a5:2b:d3:61:5e:62:
         c3:35:5d:b7:da:6e:ee:b6:d0:50:33:ee:34:86:1a:50:06:61:
         5d:13:98:25:c8:bf:ed:b9:bc:ca:c0:f4:0f:f2:e1:c0:11:22:
         74:54:5f:26:64:61:d5:10:9b:2f:c6:0f:28:9d:65:34:13:91:
         b9:87:13:48:3e:ef:7c:86:bb:e4:95:68:94:a3:af:4b:5a:86:
         2f:cb:54:4b:33:87:dc:7d:ad:6b:68:a7:1d:55:ad:38:87:43:
         be:d7:fd:f2:f6:fd:5d:01:e6:ef:c5:c5:ca:5d:e3:04:a3:73:
         92:0d:c9:8f:e9:b2:95:9c:d1:14:8c:d7:b9:0a:6b:e8:4c:a4:
         81:9c:88:21:f6:40:6c:49:b1:2e:5e:50:e6:aa:ed:62:cd:fd:
         de:6d:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:55 2026 by rpki-client