Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File:                     maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier:          SMiNV+CC5kNV67U8CrH0lOU40kDktUegUNcR+iDbsVg=
Subject key identifier:   7B:D5:63:46:8C:8B:A0:4D:54:88:59:23:CA:50:36:E4:89:BE:FE:AC
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer:       /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial:       019EC0362E76DEC1AB9328F422E634CA0C2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number:          076F
Signing time:             Sat 13 Jun 2026 09:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:36 +0000
Files and hashes:         1: WXXJ5075ZAff04RmS5smR110RVw.roa (hash: uErB5MACpy/J873DH0P3yHm3DQt+fz1WVOuw3Q44104=)
                          2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: CvHrkxv+8XBfabX2Dlo7HjyF1KQKXHjBFLJu77Iov60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:2e:76:de:c1:ab:93:28:f4:22:e6:34:ca:0c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
        Validity
            Not Before: Jun 13 09:00:36 2026 GMT
            Not After : Jun 14 09:00:36 2026 GMT
        Subject: CN=7bd563468c8ba04d54885923ca5036e489befeac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:61:3e:d2:01:fa:a8:f6:00:1d:57:d6:09:
                    66:2f:89:b4:0e:13:39:e8:0a:b3:1f:67:c2:05:cc:
                    38:fb:0d:b7:ce:16:b1:bd:37:f4:af:b4:6a:f8:4e:
                    66:e5:cb:8a:ac:4d:3b:73:4b:02:e9:9e:2c:65:3b:
                    6d:33:a9:f7:47:59:ab:e5:91:bd:32:34:ed:ce:6f:
                    95:d0:48:d7:f8:9c:7a:b5:32:ad:de:a7:06:b6:82:
                    82:f9:cb:74:16:e9:1c:6b:3d:d5:fd:84:6a:bd:0c:
                    8b:bc:31:57:52:b2:89:c5:a3:89:4f:5f:4f:ab:aa:
                    00:94:62:c4:41:0a:87:e9:20:cf:46:c4:7c:b7:89:
                    41:d6:1b:ed:55:6e:4d:0d:6f:11:f8:0e:e3:42:58:
                    a0:8b:d9:13:e2:32:dc:51:b1:50:6e:58:54:43:0c:
                    0c:92:8b:62:c2:5d:ef:36:7f:2e:91:79:d2:15:3b:
                    46:f4:cd:fb:74:2e:1d:db:43:73:21:8a:42:ee:74:
                    ce:9c:d9:d8:4a:05:cf:20:a4:20:30:0a:1b:ed:c3:
                    e6:e3:b3:aa:4a:53:21:b3:47:e2:b3:ef:39:2e:6a:
                    67:b0:41:21:e2:74:4d:38:4f:d8:1c:8d:25:ca:24:
                    b6:a5:58:85:45:ff:8c:64:7f:57:2b:ad:bf:d6:2f:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D5:63:46:8C:8B:A0:4D:54:88:59:23:CA:50:36:E4:89:BE:FE:AC
            X509v3 Authority Key Identifier:
                keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:50:f8:63:f8:20:1f:a6:19:b2:c8:f4:d6:19:cd:04:77:ea:
         e7:e1:5f:cb:52:32:22:2b:14:f6:51:3c:89:2b:4d:2e:2d:fa:
         8d:f3:b9:1f:71:de:e4:c5:3e:84:d2:8c:63:31:10:41:86:2a:
         f3:6a:2d:31:d2:40:1d:38:55:bf:62:29:5e:ac:4d:5a:7b:af:
         f2:f5:e9:93:3a:62:13:1a:cb:70:b4:cd:aa:68:77:ad:e7:d6:
         3d:b0:97:3c:53:25:ef:52:3e:da:cd:e1:a4:b7:97:da:49:71:
         ab:76:95:25:8e:39:44:93:af:05:57:c8:0a:c3:43:5f:91:ae:
         bf:bd:e2:a3:0e:e5:4d:c2:04:1f:f2:96:78:58:a9:5a:0e:7d:
         7b:0d:05:46:01:f0:ca:49:87:b2:1b:b7:d1:53:02:b0:16:3d:
         8e:e7:3f:b8:29:ee:1a:4d:54:72:1f:eb:ba:13:df:c7:e5:06:
         80:3d:8c:77:3d:8f:88:d4:f6:06:f1:76:fd:1d:12:8e:6e:11:
         39:18:46:d2:0c:76:d4:a2:e1:fb:08:39:63:5b:ac:0a:77:12:
         73:57:16:3f:2d:3d:af:57:ed:22:eb:a4:07:06:52:14:d0:c9:
         28:12:1e:87:92:0f:20:82:82:26:2c:8e:5f:7e:24:a3:5f:97:
         79:83:04:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:25:41 2026 by rpki-client