Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File:                     ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier:          o3dxtnENOf9aWn67IoolK7BEJJ2MUz8/dH3mjYn8Kmk=
Subject key identifier:   50:3E:63:86:2C:03:AD:2D:47:AF:88:37:39:98:1D:AA:0B:00:6B:88
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer:       /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial:       019EC412E1FD700987E593B993EFBC57CB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number:          0752
Signing time:             Sun 14 Jun 2026 03:00:32 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:32 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:32 +0000
Files and hashes:         1: QdViC720LUGk8rbETFc7icn6Tx4.roa (hash: wxpHqs3D6Qy6qVLUeFjXp0nQiZFcnT7PBeNSBBjzhuM=)
                          2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: DQ5qg+8M09LMSqs1G90ajHxgLPp1a5MipUIT6mQDFb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:12:e1:fd:70:09:87:e5:93:b9:93:ef:bc:57:cb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
        Validity
            Not Before: Jun 14 03:00:32 2026 GMT
            Not After : Jun 15 03:00:32 2026 GMT
        Subject: CN=503e63862c03ad2d47af883739981daa0b006b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:db:9c:77:12:4a:1b:8d:88:e3:8d:2b:e1:
                    29:52:a7:84:52:b6:be:df:a6:ca:7f:3e:07:a8:e4:
                    fc:ee:cf:bf:a2:76:08:f6:0a:67:af:85:1a:13:04:
                    b7:7d:1a:8b:09:33:a4:0f:20:84:1d:a1:60:e5:3d:
                    d6:51:b1:55:5a:ac:dc:b5:36:27:07:a5:1a:45:00:
                    2d:08:7b:e5:a7:11:d6:4a:b1:bb:1a:d7:7b:8d:26:
                    df:3c:07:b7:85:60:7f:f6:e1:ec:87:7c:c7:51:89:
                    30:99:24:25:6f:57:5f:06:f9:b6:6c:d5:00:80:74:
                    21:8b:83:23:f4:f2:d9:c1:16:b8:bb:7a:d6:63:c3:
                    e9:b2:d6:a7:ff:38:d9:78:6b:c2:96:da:53:6f:87:
                    4c:bb:6b:45:46:97:16:df:b6:7b:ac:73:95:ef:25:
                    0d:ac:bf:19:49:5b:93:e2:1b:4d:73:03:21:c5:d1:
                    31:76:c2:81:5f:02:08:f8:0b:7f:f2:81:51:ae:31:
                    66:9e:2a:7d:55:e3:76:00:2c:c5:ec:90:7b:16:ca:
                    cb:e7:30:29:ed:f8:08:34:65:8b:57:ff:bd:2e:13:
                    a5:c2:40:f5:48:29:35:20:18:0c:cf:92:99:b1:3c:
                    6b:21:0a:bc:ce:15:59:ae:e0:d7:f1:2c:29:67:51:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3E:63:86:2C:03:AD:2D:47:AF:88:37:39:98:1D:AA:0B:00:6B:88
            X509v3 Authority Key Identifier:
                keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:dd:2b:5c:09:9a:8d:6e:5a:c8:0b:ba:ac:d6:92:9e:c1:
         29:c5:d6:36:d2:9e:8c:34:0f:bb:44:73:fd:08:48:72:f5:46:
         c5:f6:da:e3:72:ed:ad:93:7d:c5:91:51:2c:1a:d8:3d:5a:5a:
         bb:ba:c1:bc:d4:7d:0d:c4:4a:db:5e:9d:be:b2:dd:f1:97:c4:
         75:5c:d0:34:15:da:c9:be:87:04:fa:2f:63:93:b2:85:01:90:
         0b:51:03:4f:12:ac:34:6c:91:65:29:20:4d:14:91:83:22:64:
         59:84:46:7b:72:34:17:73:17:1f:68:b8:d2:a1:73:08:44:40:
         26:b4:b2:6a:16:43:af:52:d8:42:1d:9e:d5:5d:b1:b4:ba:f7:
         e6:80:20:e1:ee:14:c7:c1:7d:2d:1e:8c:76:fb:f1:38:33:44:
         a2:29:a2:54:e3:be:e6:ad:4a:63:b5:6f:b9:68:7b:d7:19:57:
         cc:2a:ed:88:34:13:7e:63:a9:eb:58:4a:d2:2b:84:23:36:49:
         11:be:ba:3b:8b:0b:c0:c7:bb:4d:27:66:83:33:1f:3b:48:db:
         31:4a:b8:75:93:aa:6d:51:e7:57:4e:64:3f:e2:76:6d:bd:4c:
         8b:85:a4:1b:a7:f3:a5:f4:26:be:18:fd:97:a4:09:cd:1f:1c:
         b1:31:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:50 2026 by rpki-client