Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File:                     i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier:          OslJHPrRjo3JGpmkLly1xt+73SJ5UgAuVwElkTbcedo=
Subject key identifier:   06:AE:DF:72:25:31:29:3B:E0:01:FA:B7:06:00:C6:EF:EC:7B:D4:37
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer:       /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial:       019EBF236E39EE7B1BE7CA52B4A9D2D13FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number:          1970
Signing time:             Sat 13 Jun 2026 04:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:30 +0000
Files and hashes:         1: 4jNVPAJmLO9c6pL_yxre_7Qg83Q.asa (hash: 8bMdcGTnGljv1AHWzdlj2piSPGzoCzVunMnP41YGxLk=)
                          2: A_sUqXNJn9Rojoy-SannfwQKt2w.roa (hash: 7MgWH2+po5ITevBMtb9RWW486i9XpZGlyB9u24ejDDA=)
                          3: CwYtcY0RzoREVsUncN6feXvLhC8.roa (hash: ySt5zeOhGaWSVgsdZWXLp4TRyQYCT9hlwJu376Il+vE=)
                          4: Ju5bZFbzxZDEu6_EWVUu55SHf94.roa (hash: 3V3wg3sXHNBt7AEjJ/DpnJhsu+XXYKgeytuHR/IQBII=)
                          5: aontSbFahoS7z7yeQkm0W4LHsPo.roa (hash: nj6whxPf9P8SD5zY0uyTbTulc/A+27qSNJjJoDzd5t0=)
                          6: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: tjqTjeiADeQ4y0MREW6ILZ51X584zNQh8JBTDb0BqjQ=)
                          7: iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa (hash: oKspxLsKbdfZFXIMEqaNBaecIl0lk1KJLeO2odsQH/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:6e:39:ee:7b:1b:e7:ca:52:b4:a9:d2:d1:3f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
        Validity
            Not Before: Jun 13 04:00:30 2026 GMT
            Not After : Jun 14 04:00:30 2026 GMT
        Subject: CN=06aedf722531293be001fab70600c6efec7bd437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:94:22:a5:2b:8d:8b:1c:29:a9:fb:f0:d3:a9:
                    7d:44:67:d8:83:44:92:1d:3a:c4:67:18:13:f3:5c:
                    98:1a:ef:55:bf:0f:5a:b1:d2:a8:a8:af:89:91:80:
                    14:06:d7:f5:65:bd:e6:03:53:c8:8b:e6:0c:07:a1:
                    9e:0b:0c:da:f9:90:43:5a:1c:76:38:d7:fe:c2:7c:
                    b1:56:01:db:86:df:5e:7f:1b:29:b5:b5:a0:48:f6:
                    79:2d:56:da:4c:fc:1a:b6:05:7a:69:cd:d2:3f:05:
                    db:47:5b:5d:25:c6:13:5e:41:74:09:27:39:b0:19:
                    d9:09:5c:51:b6:03:1a:b9:4b:26:2c:c6:84:0a:a4:
                    b3:1c:fd:ed:02:7b:3d:4e:50:67:36:7b:fe:68:9c:
                    78:23:5a:a3:40:16:e9:f7:a4:37:d1:32:d1:af:3a:
                    0f:4a:91:8d:e3:4e:c2:b3:be:d7:e9:79:3f:97:4c:
                    42:a4:5d:fe:da:5e:c7:f7:d2:76:13:1a:d0:3c:af:
                    6b:81:f4:bb:74:23:c0:04:13:0e:6d:7e:4e:fa:0a:
                    6c:a6:bf:de:b8:b9:e8:5e:5d:b9:41:88:11:1d:41:
                    99:86:62:90:3f:3e:aa:cc:33:bf:e7:43:76:1a:c9:
                    85:2f:a1:8f:c2:65:e9:10:24:01:68:d1:8d:b4:5b:
                    ec:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AE:DF:72:25:31:29:3B:E0:01:FA:B7:06:00:C6:EF:EC:7B:D4:37
            X509v3 Authority Key Identifier:
                keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2a:9f:e5:03:e7:a9:30:44:3b:e5:11:99:7e:5f:e3:f0:95:
         5c:38:a1:fe:fd:44:e0:5f:17:6a:f6:e6:dd:c8:aa:89:c4:01:
         0d:44:1e:74:b5:c7:dd:8a:4a:63:9e:13:92:d4:2c:5e:a1:5c:
         2d:3e:4e:3a:79:17:31:46:b7:84:fd:ad:6d:f1:92:f4:82:8c:
         ba:95:79:6d:60:96:17:13:3f:f5:5e:d7:ef:3a:64:8d:39:8b:
         3f:ec:49:7b:07:3c:fa:39:ce:41:d4:32:67:3f:72:43:88:fe:
         e2:87:93:64:75:e3:00:b6:78:71:a9:cc:a1:08:95:4f:53:89:
         9f:61:46:d8:89:e4:cc:33:e1:28:7f:8d:80:1b:a4:8c:ce:62:
         66:a4:93:1c:4f:6e:e6:dd:38:1a:70:2f:3f:e6:4e:16:88:62:
         51:7c:cc:86:ec:c5:77:c7:c8:83:75:43:de:d1:7c:81:1f:9d:
         fc:78:a2:13:cc:3c:8c:af:83:b6:f8:85:f5:5b:72:51:ba:d2:
         69:a1:56:8d:14:fc:58:93:e1:90:d6:c6:80:38:3d:d6:84:e1:
         70:a0:f2:21:26:f5:da:a5:99:0d:e4:92:8f:05:6f:22:04:ec:
         e4:8e:f4:e8:9e:db:de:0b:0f:41:e8:18:a6:6d:9c:91:c3:51:
         57:39:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:26 2026 by rpki-client