Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File:                     rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier:          i7LUe5xI8MdxWTJWXIy7gR+r29f3t3qMHOSmHj5kLBA=
Subject key identifier:   63:5F:01:5C:FD:28:B6:E6:FB:10:C3:83:97:74:38:48:CB:18:52:46
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer:       /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial:       019EC36E1EE195A616AFA4D9FEFA73E74A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number:          1360
Signing time:             Sun 14 Jun 2026 00:00:34 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:34 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:34 +0000
Files and hashes:         1: ETi6rBv0jmHDZMdhavHXc91w57c.roa (hash: dIyT+dh+7DYUIlNnbK/CAN49jDHLvDXQ+GqXfT4OXIo=)
                          2: PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa (hash: 7iRXsmizHd8Z7h/cdyZGhXFEz1E/csMcQ5uEyt4e7f8=)
                          3: iIFXLBXRyhHRxODZud1xrElh64s.roa (hash: AExhCYGcQMhNtoiQSq64xmFEgJgvDNV9lYLc/Z+6mC0=)
                          4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: oSjlIGkFlUby9LgLUflQ6+E6a9H+vOcyfOJLstu0P5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:1e:e1:95:a6:16:af:a4:d9:fe:fa:73:e7:4a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
        Validity
            Not Before: Jun 14 00:00:34 2026 GMT
            Not After : Jun 15 00:00:34 2026 GMT
        Subject: CN=635f015cfd28b6e6fb10c38397743848cb185246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3f:46:7c:39:60:ba:88:85:aa:75:23:d5:bc:
                    d2:91:4d:06:a4:87:41:f0:db:0f:40:7b:bd:28:80:
                    b7:53:2e:a5:ed:6c:1a:95:85:bb:63:e7:92:a9:d8:
                    d5:e2:56:96:33:db:51:be:27:db:81:8f:a7:a5:76:
                    04:bf:36:a2:9a:ff:9c:5a:ef:88:a3:03:44:77:6a:
                    e9:f7:2d:4d:a9:62:e7:d3:f1:84:d7:1e:90:37:52:
                    ab:34:10:8c:3e:c6:26:f5:01:83:d5:f3:63:e3:88:
                    ea:db:3a:74:31:1d:29:55:a2:3d:97:8c:39:2d:6d:
                    c8:4d:23:c3:4d:15:ff:01:ee:d3:29:15:0a:15:83:
                    c1:30:22:9a:ea:c5:0c:26:4d:6c:47:fd:ec:80:57:
                    ee:a2:81:24:eb:d2:d2:60:86:5b:db:a2:e0:19:06:
                    9a:27:c1:49:82:99:b6:35:5f:7e:0c:98:c5:9c:a5:
                    6b:8c:8d:67:5d:f4:10:5a:8c:35:05:51:fe:ed:3c:
                    93:0d:8e:5d:da:08:6c:0a:64:e2:a2:bb:fe:6c:3f:
                    8d:01:f3:dc:d0:b2:b8:66:aa:cd:28:f2:83:1c:ba:
                    eb:9a:30:68:54:d1:bd:44:06:95:8a:94:4d:35:75:
                    de:d0:2d:a2:19:57:b6:7d:e2:1a:25:3a:65:dd:fa:
                    18:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5F:01:5C:FD:28:B6:E6:FB:10:C3:83:97:74:38:48:CB:18:52:46
            X509v3 Authority Key Identifier:
                keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2a:8c:5c:a1:b2:2f:57:5d:bf:14:e2:dd:77:5c:ae:e7:16:
         de:00:b0:e5:2a:9e:5f:f6:ab:72:ee:78:e5:db:6d:be:c9:e8:
         47:ed:80:fd:29:a2:54:1e:2c:66:19:78:20:75:26:53:73:f4:
         1e:3e:c0:ea:f6:12:de:94:25:fd:cd:31:72:56:34:cb:22:61:
         1e:9e:6c:ee:a6:51:7c:66:02:9c:67:54:71:1b:f2:a3:77:40:
         f9:25:0d:02:0a:62:27:cc:49:bf:8d:ec:ae:95:e7:5f:e5:82:
         7f:40:9c:b7:35:95:31:35:21:b5:c8:29:74:2b:9c:38:58:a5:
         d7:93:22:32:b7:d5:70:76:d8:ca:e6:9e:0f:d2:31:83:38:b2:
         c2:c8:ca:7f:4b:4f:a2:ee:77:45:8f:f6:0b:e6:45:46:06:44:
         e3:01:3a:4f:b8:4e:0b:9f:0b:d0:c1:9a:cd:06:ee:e8:f2:08:
         9a:8d:ba:79:54:f2:ea:8e:79:d9:4d:43:a1:59:9d:d8:28:39:
         ed:de:27:31:2d:f2:7d:85:bc:15:ac:75:2f:16:4e:5a:87:56:
         20:77:c6:5d:a6:ff:7e:db:ba:85:ea:dd:b3:15:61:a5:a7:e5:
         cc:28:b4:7a:9c:b0:2f:43:06:46:b4:78:f2:91:0f:22:5a:dd:
         0a:ce:d5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:17:42 2026 by rpki-client