Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File:                     CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier:          LX38YszB0NMOzbr2c1FixzAE4OqpNG0Uk2/BdWed03w=
Subject key identifier:   BE:54:FA:2D:96:0E:EE:D0:E1:31:30:B3:EA:38:C8:3C:A6:A2:30:FC
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer:       /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial:       019EBF911663ADDFE1E2A749A42FBE10FE95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 06:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:17 +0000
Files and hashes:         1: 6fN9h0BE8aQ9CkNz0FDDwJzJ1WI.roa (hash: lchc3zsBE0dtE9KZlnVKCzZkcOJOv0TaeNSl6grWrKg=)
                          2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: 0mo1q4nSfog1/u92JLYel5JO4tWfd0dhlrBs+l5oYto=)
                          3: DvkdV1ExA2552HGIzRMhCZK-OFE.roa (hash: qyrvDF/4Y9K7iv9NFa3njXZ6qQZMH2yHwSx8qwfZey8=)
                          4: I3QKFov--NDtK49UPqV2RMA_ZSs.roa (hash: 5bH+Qg+gTHLwp5S4Kx2BVafx6XVTZnjE39jOohvcHdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:16:63:ad:df:e1:e2:a7:49:a4:2f:be:10:fe:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
        Validity
            Not Before: Jun 13 06:00:17 2026 GMT
            Not After : Jun 14 06:00:17 2026 GMT
        Subject: CN=be54fa2d960eeed0e13130b3ea38c83ca6a230fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:22:bf:01:47:5b:20:59:3e:30:a1:1e:cf:ae:
                    4b:ba:14:95:39:40:c7:e9:76:7d:c1:07:31:5e:23:
                    ab:f9:7b:b9:6d:9f:58:0a:66:56:cc:a8:1f:7b:31:
                    19:72:3d:73:2c:ce:43:71:d1:39:33:22:2b:3e:24:
                    1e:2c:27:7a:88:6d:72:61:ec:ec:b2:4e:1f:d7:97:
                    7c:86:ad:be:eb:f3:53:d4:d2:ef:93:bc:45:41:65:
                    92:3a:41:a8:e3:d3:49:22:b3:6b:fa:d3:67:51:50:
                    45:86:6d:6c:58:68:e8:d9:2c:75:6c:41:40:db:32:
                    3d:f4:1b:01:e9:11:f3:d8:f7:b0:0e:c4:80:3b:09:
                    4a:eb:97:25:a3:e0:93:0a:23:43:1c:4c:99:b6:e2:
                    d1:68:9f:1d:26:38:a5:98:07:87:65:ac:0e:00:d0:
                    19:b6:6f:23:59:90:45:7a:3b:e5:65:02:ef:75:8a:
                    dd:a6:06:c0:cb:70:13:19:c1:17:fd:c1:6b:33:08:
                    b2:e2:3e:55:d6:dd:dc:34:0d:e4:fb:92:8c:a3:9c:
                    f2:6f:96:1b:58:79:46:fb:f8:42:ef:32:e3:71:31:
                    6a:89:8b:58:df:e6:b2:98:05:f9:5e:48:98:13:47:
                    ad:e5:0d:9d:e3:37:44:ce:d4:f3:03:f0:e5:60:67:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:54:FA:2D:96:0E:EE:D0:E1:31:30:B3:EA:38:C8:3C:A6:A2:30:FC
            X509v3 Authority Key Identifier:
                keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:48:e3:71:f7:e4:e4:5d:03:a9:3c:ab:35:5c:d4:53:d3:68:
         24:fc:13:ee:7d:73:4b:c0:b2:a0:13:f3:25:8a:43:e0:53:f8:
         3c:a2:e7:d2:da:83:52:96:bd:ef:c9:a0:62:51:57:c6:6c:ce:
         e7:d5:41:a6:7d:3a:56:06:bf:19:45:e6:67:f6:ba:43:08:b2:
         f2:3d:14:05:c1:29:fe:a5:68:8b:12:1a:3c:14:a3:7c:74:0e:
         65:15:2f:0f:db:6d:27:e3:a9:f4:92:44:6a:23:3e:9e:02:4a:
         3f:1a:c4:a5:66:95:f3:c0:d4:88:7d:47:7d:2e:6c:01:01:87:
         16:97:41:0a:e0:56:bb:3c:5a:43:94:e7:e4:6d:d0:fe:7d:2e:
         4c:ca:a7:0a:47:74:d8:24:f2:62:ec:2f:f5:6c:90:0b:ca:18:
         ee:eb:f3:aa:36:df:96:55:08:dd:55:c0:77:88:0c:3d:56:7a:
         99:1f:48:09:ad:8e:d6:71:c9:33:3c:df:1c:05:74:d2:e4:d1:
         fb:d2:f1:e5:b6:2d:22:d1:1d:57:5b:45:ad:bc:52:80:52:82:
         bd:34:0c:d1:3f:5f:04:c9:97:1b:9d:fb:bb:7e:d0:e9:67:db:
         4c:12:0c:7f:99:17:5b:9d:e3:2c:50:d5:1b:b3:bc:75:a5:a2:
         65:4a:03:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:53 2026 by rpki-client