Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File:                     d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier:          GV0Cf0WsvTMv2JaAElSZE3L8QBKl5EVHnhCDhdeLrEM=
Subject key identifier:   0A:69:3C:46:DA:F6:CC:C2:27:C7:B6:5D:80:8E:9C:83:7A:F8:AA:8B
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer:       /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial:       019EBF915BA904B0ABAC6C9CCC68840BE4F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number:          1680
Signing time:             Sat 13 Jun 2026 06:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:34 +0000
Files and hashes:         1: WIBc-XhxOnD5f9bCQ8Jz0ZuTnGc.roa (hash: BEfaJedvpJl8LX0jJodXnPNHqf67lfg9OTd8BTanSlQ=)
                          2: biWMyLPxPMl5FtQJTRrTfAxg-wg.roa (hash: pNDoD30C6cU3KpMd8R/7fMFpHc25Pe1LLUHjt0eH4ZA=)
                          3: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: 7CsDRHT/HUBWQdk+7AGsebXlmhQkvSjb3xB2zCGVEok=)
                          4: pInkCUNgtUwuBuyF0FBGq4Od_LA.roa (hash: 84LwnqiXuuACgBX/nkeDGPUuwEvED3Wv0F8ikRwy6Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:5b:a9:04:b0:ab:ac:6c:9c:cc:68:84:0b:e4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
        Validity
            Not Before: Jun 13 06:00:34 2026 GMT
            Not After : Jun 14 06:00:34 2026 GMT
        Subject: CN=0a693c46daf6ccc227c7b65d808e9c837af8aa8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:12:4f:fd:9c:46:a4:91:23:5b:23:b2:2e:b3:
                    37:3c:d4:a6:11:33:9a:6d:97:87:52:f0:49:13:c9:
                    f9:f2:b0:0a:0e:59:89:b4:e4:33:bc:ac:fb:f0:f5:
                    10:2d:e7:72:fc:7f:fc:6c:0f:a1:7e:85:26:39:ec:
                    d5:8c:ff:bc:03:e8:bc:2d:fa:52:8d:6d:73:4f:80:
                    bb:9a:57:b8:4d:ea:1d:00:da:0f:2a:c5:bb:74:da:
                    a2:b4:76:e9:98:37:da:17:97:d1:46:23:36:85:8f:
                    5e:b9:68:40:c6:a4:43:fa:81:7e:48:f5:54:47:55:
                    05:9a:21:f4:54:8a:a1:83:37:43:0b:c4:28:a0:c0:
                    58:74:11:46:77:40:c6:b5:9b:b2:b1:c4:5b:63:66:
                    97:05:ca:1e:1e:04:c8:6a:b3:fe:e7:43:b1:fa:2c:
                    9c:ef:f1:fd:cf:4c:43:ee:81:42:99:30:99:de:07:
                    04:a7:ad:e1:b5:4d:3c:6a:09:a9:6b:a9:79:a6:fd:
                    40:df:d1:49:27:17:74:9f:ec:11:e0:e2:3d:ba:7c:
                    3b:f1:24:07:6d:6a:0b:fd:97:75:ab:30:df:c8:b4:
                    f5:6e:3f:02:c3:80:9b:bb:6c:7f:cc:05:60:84:d7:
                    5d:b0:e7:a4:f9:08:68:f8:a8:37:6b:60:fa:41:8c:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:69:3C:46:DA:F6:CC:C2:27:C7:B6:5D:80:8E:9C:83:7A:F8:AA:8B
            X509v3 Authority Key Identifier:
                keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e9:03:ed:8c:55:9e:b8:34:3d:c9:af:87:1f:e8:2b:87:17:
         2a:b7:83:8f:fe:c7:e8:7c:05:75:ca:ea:e6:9a:9d:9f:44:90:
         be:b0:4a:06:78:2e:6c:a3:83:99:33:ed:86:1f:3d:9f:25:e2:
         9d:65:ca:53:31:8b:a4:60:5d:85:87:ce:b9:c1:17:de:0d:20:
         6b:75:d5:d0:ad:6d:3e:0d:6a:8f:89:03:a7:04:4a:02:23:a5:
         cf:d0:4a:36:bd:59:9d:8a:7b:a2:85:fa:e7:b4:c3:7e:0b:86:
         ea:c2:a6:db:a7:86:c5:40:c3:d6:02:e7:8c:a6:4f:1f:5a:03:
         63:4c:1f:41:b3:12:a6:fd:b3:b2:ca:7b:56:57:50:49:42:dc:
         51:b1:6e:23:8f:6c:1f:ce:4f:88:7d:82:be:9e:d5:0c:70:27:
         0f:fc:c0:fd:cc:67:aa:f1:c7:20:bb:b7:90:09:1a:5a:c8:ec:
         69:84:55:e2:75:91:85:cf:ac:43:bb:ee:2a:53:3c:15:39:91:
         a2:ee:7e:82:45:71:21:65:f9:3b:b2:32:e0:3f:25:25:99:c3:
         fa:f1:08:fd:15:cc:7b:36:16:22:d9:b1:cf:11:f1:64:1b:fa:
         0d:8d:64:d1:4c:ba:81:32:7f:d3:9e:bd:7c:e5:4d:ea:de:a9:
         ab:ac:cb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:05:09 2026 by rpki-client