Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File:                     25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier:          QFdt9OfjMzVqPmTx29VA6M57bToPDciQMw6LMmRoDFE=
Subject key identifier:   02:E7:34:67:7A:09:00:D5:00:DF:41:4E:77:24:4E:38:10:E3:5A:45
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer:       /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial:       019EC3A4FE54E5F870B2E621719404F541DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number:          05E0
Signing time:             Sun 14 Jun 2026 01:00:30 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:30 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:30 +0000
Files and hashes:         1: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: 2Rn08X7KepGR/n7rGOWa7PdSBTIgkAXVzAeRQn4sPk8=)
                          2: IehXfhpPn3dEnZKsKI0F4aPgIJw.roa (hash: 1JowsJbpz4yi5Kd0RwN5YPzQlbBst/1as7STi6Wlb1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a4:fe:54:e5:f8:70:b2:e6:21:71:94:04:f5:41:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
        Validity
            Not Before: Jun 14 01:00:30 2026 GMT
            Not After : Jun 15 01:00:30 2026 GMT
        Subject: CN=02e734677a0900d500df414e77244e3810e35a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8e:3c:34:c7:e8:29:03:74:52:92:fc:58:1b:
                    5a:fd:ed:1e:09:d6:45:17:6b:61:0e:87:51:96:86:
                    42:c0:cf:ab:63:46:30:e9:fb:ff:1c:5a:a2:01:5c:
                    ec:78:43:f0:71:01:1d:91:c6:8d:c8:a2:6e:16:d3:
                    d9:b7:89:13:d9:8a:1f:13:2f:79:f9:e5:6e:55:08:
                    b4:1c:73:a3:87:b3:30:cb:67:cc:81:8b:a9:ae:08:
                    0a:d7:0b:8d:0d:4c:e6:30:e3:bd:cd:d3:6c:f7:28:
                    a9:30:9f:ef:e7:b5:3a:46:ca:e0:08:e4:bb:6c:a4:
                    28:c1:6e:88:e9:2c:fd:12:5e:41:82:d8:97:13:5a:
                    1a:71:60:5d:6d:13:b6:0b:41:98:14:d3:c6:a8:22:
                    7b:35:db:58:ee:81:e9:a7:31:cc:b4:64:87:10:32:
                    af:81:cf:73:a3:da:a7:72:60:b8:6b:9c:a9:db:1a:
                    99:60:1b:0e:e6:21:5f:c0:78:5b:70:ac:60:15:40:
                    4e:a7:fd:f2:03:97:3a:a2:41:c4:a8:5f:4b:7b:ce:
                    ab:e0:99:16:d7:02:81:9a:97:30:a7:86:28:6b:8e:
                    c4:14:a9:bd:8c:8c:03:c4:e1:5b:a7:49:16:4b:a0:
                    bb:26:ca:77:7b:02:1b:b5:30:97:78:9c:64:a4:6b:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E7:34:67:7A:09:00:D5:00:DF:41:4E:77:24:4E:38:10:E3:5A:45
            X509v3 Authority Key Identifier:
                keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:2e:ab:f9:54:11:64:76:05:31:54:60:7d:fb:bf:a4:02:b0:
         af:18:ad:43:a6:96:24:63:92:b2:74:7f:60:75:01:4b:b4:8e:
         ad:46:92:55:4d:fa:80:25:ae:64:f7:da:1b:b1:69:56:3c:af:
         45:2e:67:1a:f3:bb:f3:e4:d7:61:56:2c:f3:c8:73:0d:3e:26:
         f1:44:57:89:90:37:4c:86:6e:f9:3c:bf:19:04:12:2e:09:35:
         9e:51:c2:b5:85:b8:8f:04:a4:a0:94:cf:c8:bd:b5:c3:84:13:
         5f:f2:cb:66:bf:d8:03:a1:e3:43:ba:65:51:8a:d1:95:52:09:
         e7:ca:d3:3d:4b:10:84:38:ff:a9:17:fb:67:16:8d:6a:50:aa:
         f3:19:17:0b:57:b2:84:16:21:a4:ff:29:62:df:3e:db:e3:49:
         f9:f3:a7:81:ac:a0:21:fe:b7:d7:56:72:7c:50:c0:de:6c:ff:
         61:70:1d:b1:a7:51:89:7a:4c:44:4c:2a:3e:96:5a:08:db:a0:
         11:62:38:a8:91:a3:bd:ac:3d:5f:69:04:ce:05:d2:5e:d7:88:
         bf:7e:78:f4:de:88:13:ae:89:ff:e7:13:8c:bf:6c:72:d4:1d:
         7d:22:54:f5:f6:1f:de:2c:4d:7f:0e:b2:15:36:c9:8f:7e:55:
         93:5e:ca:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:04:21 2026 by rpki-client