Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
File:                     dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json)
Hash identifier:          HMKKQ+PWnn2Pq9FcUGGSyUmOXw/UFUEv8GkAgUsmJrk=
Subject key identifier:   E2:8F:69:88:27:44:8A:15:FA:56:21:04:F5:E7:09:3B:D6:1C:43:EF
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Certificate issuer:       /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial:       019EBE47F567961B97B7ECA4FF85F920FB8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
Manifest number:          167E
Signing time:             Sat 13 Jun 2026 00:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:47 +0000
Files and hashes:         1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=)
                          2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=)
                          3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=)
                          4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=)
                          5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=)
                          6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=)
                          7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=)
                          8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=)
                          9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: nHrHzmb0ExyrDBOEe4yRynt9qQhIwUcGLNB69TUL90k=)
                          10: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=)
                          11: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=)
                          12: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=)
                          13: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=)
                          14: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=)
                          15: y8jNpNhJhN8HEtdIA-w7AJf_i5Q.roa (hash: 8sIOOrWgw4Q4JWzlfJJ/cqOkQmwBNx1SNCCheRpOVMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:f5:67:96:1b:97:b7:ec:a4:ff:85:f9:20:fb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
        Validity
            Not Before: Jun 13 00:00:47 2026 GMT
            Not After : Jun 14 00:00:47 2026 GMT
        Subject: CN=e28f698827448a15fa562104f5e7093bd61c43ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:b0:8f:aa:71:60:ed:99:3a:22:fc:5f:e6:
                    14:81:b5:ab:11:24:56:b2:0b:56:fc:ae:c8:66:30:
                    d9:f9:a1:89:32:ff:82:33:3c:8d:1f:20:d6:e6:bf:
                    03:d2:16:72:70:99:0b:3c:1f:8e:9d:6c:b8:52:15:
                    f7:5d:34:d3:c8:e8:65:22:40:30:64:a9:75:44:f4:
                    42:2f:84:ff:9d:74:5a:92:8f:ad:d4:b3:c0:b2:f9:
                    4c:d0:9f:1c:f7:2f:e9:45:ea:26:53:d0:2d:74:5c:
                    f1:ed:c2:7a:99:4e:1a:45:a4:9e:29:e6:6f:f3:bf:
                    d7:66:47:6b:fc:b7:c0:c0:33:e0:55:08:35:78:2c:
                    45:9a:05:f9:bf:a6:3d:29:a2:72:5e:e7:ee:ea:cb:
                    67:bd:b7:83:08:40:61:82:e5:72:4d:d7:da:81:56:
                    a2:63:bc:2f:a9:4d:d3:ff:91:4c:37:8f:35:4d:f1:
                    55:b0:82:15:3c:e0:44:80:47:42:7c:f8:70:85:28:
                    6f:a1:bd:bc:84:02:d3:50:fa:c4:e6:c9:a6:a8:8c:
                    66:38:ff:c6:54:2c:59:b0:26:46:43:b5:75:38:51:
                    c7:b2:e0:56:45:8f:0b:2d:fe:dc:2e:63:67:6b:3e:
                    4e:a0:c5:5f:4c:45:b6:9e:64:d3:99:43:99:d5:db:
                    3b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8F:69:88:27:44:8A:15:FA:56:21:04:F5:E7:09:3B:D6:1C:43:EF
            X509v3 Authority Key Identifier:
                keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:f5:5b:70:85:5c:46:48:b5:21:6c:42:eb:d9:d2:5d:d8:cc:
         5b:dc:f3:d7:be:53:96:13:c4:ba:70:4b:47:57:40:e9:00:59:
         ff:98:ff:11:ac:2e:fc:63:0d:dc:83:3e:46:54:2b:92:4a:b7:
         dd:34:b5:0e:3c:59:c8:af:ed:ef:fa:0e:7a:42:98:c9:2b:3a:
         7a:eb:1e:04:9e:69:0f:90:6c:04:5f:cd:45:a6:2d:52:00:ef:
         05:5b:b8:af:e2:6b:e1:9f:63:4a:44:af:c1:4c:07:39:a7:38:
         24:33:e9:0c:ba:e8:f5:da:d1:94:c7:b7:88:55:af:40:99:37:
         37:a9:b0:b4:07:e2:c9:c5:20:7f:69:8b:7b:ec:38:62:8a:49:
         14:49:3f:b5:42:b6:0b:0b:4c:d7:09:48:41:bf:ef:18:36:33:
         05:13:cc:02:41:f9:77:bb:03:0a:ec:da:21:a2:21:a6:f9:6e:
         a0:51:71:85:6f:a5:f1:54:d5:57:65:61:8b:f6:71:fe:9d:05:
         fa:59:10:d6:bb:90:f8:58:b1:bb:84:1f:a0:f7:7a:89:9e:69:
         9f:75:1f:ec:cc:3f:43:88:a3:be:34:60:7c:60:af:47:58:bb:
         6a:14:b0:3b:ae:6e:ab:d4:07:cc:89:9e:7d:f1:6c:e4:51:42:
         5c:47:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:29:08 2026 by rpki-client