Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File:                     i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier:          yL5MCXpvv6CQ1dmavxWXdQ4SkehtLd7hql2Crvur+fY=
Subject key identifier:   65:DB:12:B7:87:47:B9:63:D0:9B:4C:63:0D:14:CB:45:ED:73:6C:83
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer:       /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial:       019EC111D3EB3EF4AE4E99A4235CD09C239B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number:          1971
Signing time:             Sat 13 Jun 2026 13:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:31 +0000
Files and hashes:         1: 4jNVPAJmLO9c6pL_yxre_7Qg83Q.asa (hash: 8bMdcGTnGljv1AHWzdlj2piSPGzoCzVunMnP41YGxLk=)
                          2: A_sUqXNJn9Rojoy-SannfwQKt2w.roa (hash: 7MgWH2+po5ITevBMtb9RWW486i9XpZGlyB9u24ejDDA=)
                          3: CwYtcY0RzoREVsUncN6feXvLhC8.roa (hash: ySt5zeOhGaWSVgsdZWXLp4TRyQYCT9hlwJu376Il+vE=)
                          4: Ju5bZFbzxZDEu6_EWVUu55SHf94.roa (hash: 3V3wg3sXHNBt7AEjJ/DpnJhsu+XXYKgeytuHR/IQBII=)
                          5: aontSbFahoS7z7yeQkm0W4LHsPo.roa (hash: nj6whxPf9P8SD5zY0uyTbTulc/A+27qSNJjJoDzd5t0=)
                          6: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: hvKjJ/Tp0ACYuPXFoarYuuMCtjwLSolKf/5BiC8jPQM=)
                          7: iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa (hash: oKspxLsKbdfZFXIMEqaNBaecIl0lk1KJLeO2odsQH/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:d3:eb:3e:f4:ae:4e:99:a4:23:5c:d0:9c:23:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
        Validity
            Not Before: Jun 13 13:00:31 2026 GMT
            Not After : Jun 14 13:00:31 2026 GMT
        Subject: CN=65db12b78747b963d09b4c630d14cb45ed736c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4f:af:9e:ff:89:c9:04:7c:56:e7:c6:94:c7:
                    ac:79:f7:db:96:10:5b:39:e3:33:8a:2a:ab:08:03:
                    93:e6:c3:b8:cc:f3:bc:9b:6d:cb:67:16:09:16:7e:
                    1a:49:6d:14:79:15:c5:cb:c3:44:b6:fa:93:d9:d0:
                    ac:d5:50:80:40:5e:b8:03:62:af:de:f0:24:f6:3d:
                    87:87:57:14:6c:d0:36:b3:f4:a1:76:f4:5a:5b:29:
                    56:d0:9a:24:3b:26:8c:ed:81:38:38:61:73:4f:2f:
                    b1:bb:eb:b8:92:2e:95:7b:ca:52:3c:a3:c0:96:53:
                    4b:16:13:a6:91:66:74:5c:90:70:b4:e6:3e:ca:0a:
                    3d:30:17:25:1c:fe:f1:55:da:45:71:b0:c2:fc:37:
                    c3:9f:10:43:b2:7e:e4:4d:88:72:fb:90:b8:f1:7b:
                    86:39:e0:41:e9:15:e4:24:9f:9f:dd:1c:83:7a:7c:
                    5a:a6:90:8a:ee:f0:ba:a6:6e:46:fe:fa:1e:17:e3:
                    3a:93:03:f9:1b:d1:c0:54:95:ff:42:5a:7e:64:9f:
                    1a:0b:2e:2e:68:d5:6e:d9:44:a7:50:f4:cd:54:f1:
                    43:ef:88:d5:a5:ce:57:01:0f:16:76:19:f7:05:c3:
                    d6:be:c7:86:76:d0:e4:05:8e:b1:06:1a:98:60:ee:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DB:12:B7:87:47:B9:63:D0:9B:4C:63:0D:14:CB:45:ED:73:6C:83
            X509v3 Authority Key Identifier:
                keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ce:23:57:ed:aa:89:28:4a:ba:94:84:c5:9a:84:3e:cd:79:
         d2:12:37:39:2d:0c:c2:6e:dd:21:93:a7:6f:d2:73:05:77:d8:
         52:20:94:8b:65:95:04:c2:44:90:4a:e2:32:5e:19:22:dc:60:
         47:b6:c7:fe:77:8d:74:28:8c:a1:3f:49:fd:0e:10:1f:88:c9:
         0b:3e:92:21:38:d8:2b:d3:65:5a:13:5f:c0:6f:59:af:0f:df:
         28:c9:94:3c:56:2f:d4:69:11:8f:4a:e5:ad:bd:b0:6b:4f:04:
         c4:89:c9:f2:5f:38:d2:f6:25:0c:ec:b1:49:d8:ed:99:94:94:
         9e:c8:e2:43:82:1e:0d:f7:a7:95:85:42:bb:7f:e2:6a:85:e1:
         1d:3c:e2:39:a1:d5:b5:39:bb:38:94:16:ef:9f:41:3b:29:07:
         65:f8:9f:f2:b5:64:4f:d6:14:34:65:8b:09:00:b0:1b:0e:0f:
         c5:41:4c:ff:b9:29:f0:6e:86:39:c8:ad:43:c2:41:6d:6f:61:
         82:71:f7:05:83:56:06:8c:b3:27:14:88:9e:ad:7f:84:38:08:
         d7:d1:20:ad:82:47:03:c3:64:c4:7d:8c:d3:1d:8a:4f:8f:cb:
         f5:82:4d:80:86:b8:de:9b:c1:d6:ed:8a:36:08:58:fd:dd:44:
         ed:8f:03:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEdPrPvSuTpmkI1zQnCObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl
YmU4ZTYwHhcNMjYwNjEzMTMwMDMxWhcNMjYwNjE0MTMwMDMxWjAzMTEwLwYDVQQD
Eyg2NWRiMTJiNzg3NDdiOTYzZDA5YjRjNjMwZDE0Y2I0NWVkNzM2YzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE+vnv+JyQR8VufGlMeseffblhBb
OeMziiqrCAOT5sO4zPO8m23LZxYJFn4aSW0UeRXFy8NEtvqT2dCs1VCAQF64A2Kv
3vAk9j2Hh1cUbNA2s/ShdvRaWylW0JokOyaM7YE4OGFzTy+xu+u4ki6Ve8pSPKPA
llNLFhOmkWZ0XJBwtOY+ygo9MBclHP7xVdpFcbDC/DfDnxBDsn7kTYhy+5C48XuG
OeBB6RXkJJ+f3RyDenxappCK7vC6pm5G/voeF+M6kwP5G9HAVJX/Qlp+ZJ8aCy4u
aNVu2USnUPTNVPFD74jVpc5XAQ8Wdhn3BcPWvseGdtDkBY6xBhqYYO6x2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXbEreHR7lj0JtMYw0Uy0Xtc2yDMB8GA1UdIwQY
MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt
MjY1ZjJiZDBmOGYzLzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz
LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN84jV+2q
iShKupSExZqEPs150hI3OS0Mwm7dIZOnb9JzBXfYUiCUi2WVBMJEkEriMl4ZItxg
R7bH/neNdCiMoT9J/Q4QH4jJCz6SITjYK9NlWhNfwG9Zrw/fKMmUPFYv1GkRj0rl
rb2wa08ExInJ8l840vYlDOyxSdjtmZSUnsjiQ4IeDfenlYVCu3/iaoXhHTziOaHV
tTm7OJQW759BOykHZfif8rVkT9YUNGWLCQCwGw4PxUFM/7kp8G6GOcitQ8JBbW9h
gnH3BYNWBoyzJxSInq1/hDgI19EgrYJHA8NkxH2M0x2KT4/L9YJNgIa43pvB1u2K
NghY/d1E7Y8DCg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:21:16 2026 by rpki-client