Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
File:                     DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json)
Hash identifier:          JL1Xg7NoJKs1bqOGqNZaXCp9Ttdfx5Q1454Uovph4lc=
Subject key identifier:   6D:5C:86:4C:E5:60:AC:9E:2B:7C:B4:FD:07:A1:C2:52:54:28:08:54
Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
Certificate issuer:       /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Certificate serial:       019EC0DA9E945495D78E60F5274D3BF7FDA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
Manifest number:          0155
Signing time:             Sat 13 Jun 2026 12:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:13 +0000
Files and hashes:         1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=)
                          2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: NHevO9CLAIChiHSdkjRNASZPB0ZAyV1EMI+liv9TFVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:9e:94:54:95:d7:8e:60:f5:27:4d:3b:f7:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
        Validity
            Not Before: Jun 13 12:00:13 2026 GMT
            Not After : Jun 14 12:00:13 2026 GMT
        Subject: CN=6d5c864ce560ac9e2b7cb4fd07a1c25254280854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:04:33:6f:b9:fa:30:d3:bf:06:02:2e:62:
                    1e:45:b0:d5:72:ed:31:09:df:e5:59:1c:66:f6:93:
                    ed:65:85:0c:81:46:f2:93:5e:ff:bc:2d:86:9e:14:
                    17:bb:d2:db:a9:24:a2:a8:4e:11:f2:f1:3c:27:1c:
                    2c:71:91:00:68:3d:74:64:af:66:0c:98:28:a9:13:
                    0e:e3:0f:4c:b3:36:ed:db:65:c1:dc:52:fb:fc:9f:
                    47:fd:84:bd:0b:d2:e2:56:38:ad:ac:1a:f1:36:17:
                    79:6d:7d:1c:c9:4b:35:39:c4:f2:a0:c2:b9:33:f3:
                    c3:12:c8:5a:c0:1e:5b:78:89:71:b8:15:bc:8e:28:
                    10:df:8d:2c:d3:e8:38:7b:19:fd:3a:02:d5:c5:2f:
                    c5:25:7f:c3:d0:c0:51:fa:06:28:4c:63:b4:f2:1b:
                    c1:82:cb:3b:78:1c:61:24:59:c0:25:2f:ff:b5:52:
                    ea:72:1b:7f:27:03:f0:0b:ae:45:be:b1:8e:67:3a:
                    ce:6b:dd:42:91:2d:2a:93:ec:64:84:ee:87:64:e7:
                    17:f7:c9:25:f2:e8:7e:cc:5e:13:b2:73:02:5a:ff:
                    fc:47:e1:b3:2e:00:5f:d3:4d:b0:3f:13:90:ae:6b:
                    38:bf:08:5c:7f:4d:5e:97:e7:3c:44:54:55:42:8a:
                    92:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:86:4C:E5:60:AC:9E:2B:7C:B4:FD:07:A1:C2:52:54:28:08:54
            X509v3 Authority Key Identifier:
                keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:29:fe:92:76:db:c0:ad:9a:15:1d:bc:9a:8a:59:77:0f:61:
         47:27:47:83:82:52:a4:ce:41:d6:db:ca:f1:76:65:41:cf:d3:
         f1:46:09:35:ea:32:70:8b:e0:ca:a1:2b:ac:d2:b3:ad:5c:d2:
         b0:f2:d5:de:cd:8f:2a:3a:2d:a5:d6:21:a3:58:70:90:de:99:
         c8:07:66:80:93:cf:3c:b4:8c:e8:c4:fb:a1:9c:f0:01:c1:6d:
         02:c7:c7:22:fc:24:57:25:bb:eb:6a:fa:ae:70:4b:9d:f8:c2:
         74:6b:1c:c5:f0:15:69:f6:5b:9d:ff:c9:3e:42:e0:13:1a:0a:
         03:62:ad:85:d6:ab:04:7a:54:40:af:35:e4:c9:50:bd:da:3a:
         3a:85:b9:e3:64:1d:28:b5:5a:da:09:f8:4e:bc:8f:eb:57:9a:
         ee:c4:7f:f5:ef:80:1f:12:ce:a4:72:04:99:4b:4e:89:bf:ce:
         e2:12:5e:dd:02:1b:f3:6b:c3:0a:cd:a6:31:3b:e2:1b:1f:1a:
         86:a6:5f:db:37:2f:25:be:17:8e:80:64:ce:d0:52:e3:d3:ef:
         48:b9:87:37:4f:55:72:06:49:54:5a:a8:40:15:83:15:11:c7:
         ee:87:72:99:19:33:46:0e:b7:ce:f9:ce:5c:61:1c:7c:92:bf:
         90:10:7e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:21:19 2026 by rpki-client