Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
File:                     I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json)
Hash identifier:          VvnHulYVryBmvAZz4BpQPyK/Clh+5SeMxipNOj5/J3w=
Subject key identifier:   AD:FC:95:66:21:F6:EE:33:F7:7F:74:A3:5B:2D:25:48:C6:35:47:E0
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       019EC0362C0A153752B2E38A0C4831AAC1AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
Manifest number:          0F9F
Signing time:             Sat 13 Jun 2026 09:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:36 +0000
Files and hashes:         1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=)
                          2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=)
                          3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=)
                          4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=)
                          5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=)
                          6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=)
                          7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: YoBdM9ru8igBXQvRYvJBGyRlSq2zp/0z6Hh1t6k/tIg=)
                          8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=)
                          9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=)
                          10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=)
                          11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=)
                          12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=)
                          13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=)
                          14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:2c:0a:15:37:52:b2:e3:8a:0c:48:31:aa:c1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Jun 13 09:00:36 2026 GMT
            Not After : Jun 14 09:00:36 2026 GMT
        Subject: CN=adfc956621f6ee33f77f74a35b2d2548c63547e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:df:a4:fa:41:71:c5:b9:5b:0d:df:68:40:
                    ae:fb:eb:c5:4d:00:25:c2:3a:34:8a:33:89:a0:d5:
                    b7:76:34:f6:b3:04:44:af:46:10:bc:99:e6:0c:ea:
                    1d:99:3d:9f:55:5c:9b:2b:4c:45:09:45:41:be:2b:
                    a8:e5:f3:e6:11:12:e6:91:cd:95:7f:82:4a:67:bc:
                    7c:6b:0f:31:6b:1c:4a:4e:5a:2c:66:b9:d2:6a:51:
                    4c:82:b4:2e:27:27:09:c5:28:0c:ed:9d:48:ac:4a:
                    98:bb:bc:eb:22:5b:7a:35:cc:ad:de:d1:d4:c4:43:
                    fc:fc:24:2f:65:fe:62:ca:02:a2:f9:6e:f0:57:03:
                    09:72:04:10:24:b7:64:fb:3d:b2:31:a6:83:e1:18:
                    ae:c9:35:49:ac:21:9c:06:56:46:2a:cb:27:7b:e0:
                    b9:6e:7d:07:e1:d1:1b:f1:16:a2:14:82:43:34:f3:
                    37:94:ae:fd:8c:7b:c4:f1:b4:93:e5:63:0f:8b:32:
                    46:59:b5:79:5e:1b:79:0c:10:48:c9:3d:06:28:6b:
                    23:47:6e:45:ad:72:b2:6d:43:be:d9:24:b1:4d:6a:
                    31:a3:d4:10:de:bd:a9:83:74:c4:60:e5:87:07:e5:
                    1b:90:8f:38:14:ef:98:e1:98:df:19:f2:64:a3:68:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FC:95:66:21:F6:EE:33:F7:7F:74:A3:5B:2D:25:48:C6:35:47:E0
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f3:17:76:bf:4d:95:9a:9e:60:65:12:69:32:ff:40:6d:f7:
         39:d4:4d:4a:3b:11:57:69:40:c3:1b:b1:f8:31:1d:6b:c0:3b:
         f0:a6:40:29:2a:e5:6d:71:d2:d4:2b:8b:f1:28:cf:ed:98:39:
         a7:b4:3e:43:2d:87:76:66:00:b1:cd:37:de:6d:12:8c:35:bd:
         aa:3d:cb:28:4f:a6:c1:cc:19:db:77:1f:2d:11:40:a4:ab:ec:
         d3:be:a9:1d:aa:b6:13:76:44:d5:8d:40:48:82:de:73:02:28:
         7f:84:d0:12:f0:c1:b6:9a:5a:7e:b6:18:c1:b3:4a:4a:8d:42:
         5b:35:cd:cc:5b:79:80:1e:fc:01:92:92:c8:c5:a7:3b:44:57:
         e2:fb:56:4a:66:2c:1e:fd:73:af:89:5c:ac:89:0b:53:96:ed:
         e9:59:10:47:41:bc:77:2e:25:89:bf:77:c8:ca:f5:4c:fe:8e:
         67:b4:d3:56:13:2f:5e:41:a6:89:7d:b8:79:76:cd:23:8c:c6:
         1c:cb:0f:d1:21:5f:4a:34:24:65:63:ef:cf:f8:c8:b8:5d:fe:
         7d:af:c8:ba:a4:92:19:76:2e:c8:c8:51:cd:35:c1:1f:e9:5c:
         6e:1e:87:fb:8e:2d:c7:24:d0:0c:80:a4:ba:6f:50:da:45:94:
         a0:56:77:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:59:17 2026 by rpki-client