Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File:                     rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier:          2NlSqRZWdg5xVndux0Y6mYJLKF7lR6cPRdVkIU3q35g=
Subject key identifier:   D8:24:5B:CF:34:10:64:E0:D7:FE:84:A1:89:75:01:30:34:3F:2B:7C
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer:       /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial:       019EC29248C2C092FCD573918E9C2FC11151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number:          18F8
Signing time:             Sat 13 Jun 2026 20:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:27 +0000
Files and hashes:         1: NZ4KU7XjOTlJfpxZEeYBOqiocLc.roa (hash: 1hvoqCoD4N6W+G9hGoZfjVl3mm68AnZJdnlCiI2tn30=)
                          2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: 0/VzciK5bb9jPPcADf1CZ1wRJBQkemtxYBsCXbMFHXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:48:c2:c0:92:fc:d5:73:91:8e:9c:2f:c1:11:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
        Validity
            Not Before: Jun 13 20:00:27 2026 GMT
            Not After : Jun 14 20:00:27 2026 GMT
        Subject: CN=d8245bcf341064e0d7fe84a189750130343f2b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:86:e4:c5:f4:ad:c1:c2:85:4c:af:f3:e6:
                    02:86:59:77:36:de:b2:b4:d2:13:e9:08:a7:b6:8b:
                    43:5b:0d:a7:fa:52:65:92:25:e9:c4:39:8a:cc:84:
                    ab:0a:17:74:d3:c9:12:24:43:5b:79:ae:15:83:46:
                    47:5b:c8:7c:b2:0a:80:e1:b9:e0:12:0e:47:9a:90:
                    cf:fa:0b:4a:10:30:a1:cc:17:2a:f9:00:ba:af:b8:
                    44:ba:af:15:ea:f5:c9:08:0f:e7:47:48:0d:08:a6:
                    e1:45:ff:f2:47:86:44:4b:d8:7f:86:68:57:18:2d:
                    88:3c:ed:7e:71:ed:a5:cf:7e:7a:6a:e0:b6:6f:6c:
                    01:d7:22:eb:b2:99:3a:8f:75:57:6e:ca:f2:29:5f:
                    3f:dc:9a:0b:9a:0b:6f:02:dc:5e:22:98:9e:c0:27:
                    0e:c2:0d:86:87:84:23:bd:f9:e0:ed:e9:bd:0b:a2:
                    56:b6:e2:ed:ad:12:9e:71:1a:69:cd:91:f0:64:7a:
                    d9:4f:50:d3:3b:5a:82:1e:a5:17:bd:24:f1:f1:79:
                    42:b5:df:d2:0b:52:3c:5b:62:d4:f4:0d:e3:fb:74:
                    cf:44:00:02:b1:f5:b7:ec:43:75:45:ea:d6:20:72:
                    c7:f4:c2:ed:b9:0b:fd:e0:bc:eb:2e:40:26:66:fa:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:24:5B:CF:34:10:64:E0:D7:FE:84:A1:89:75:01:30:34:3F:2B:7C
            X509v3 Authority Key Identifier:
                keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:da:e5:b1:b2:9c:f3:19:0c:ef:e0:04:92:d1:3d:5d:9b:71:
         ff:48:9a:11:cc:85:1b:2e:59:69:d3:96:68:f3:53:c2:8f:96:
         52:50:53:83:b9:0a:00:d6:8d:33:08:0f:21:32:f9:5c:95:77:
         5f:a8:6a:d4:96:b7:8a:d3:0d:4a:df:7a:84:ad:72:89:9e:34:
         f8:cc:2d:c9:8f:79:db:fe:a1:25:cc:19:37:33:54:0e:cd:44:
         c4:7e:44:f9:00:e5:ba:64:0b:79:d5:69:0b:f0:c7:a0:21:72:
         ac:87:28:7e:bb:c9:42:0c:27:42:f2:59:03:ba:1f:8d:1e:11:
         df:0e:63:5b:35:eb:44:78:be:59:fa:23:61:56:33:37:c1:e9:
         2f:05:c8:c3:ab:39:4c:ec:b8:85:74:a9:c9:6c:e4:0e:c5:7c:
         50:b1:ec:2a:21:c9:bb:09:06:04:38:3a:16:bb:81:69:d0:d1:
         fc:33:a3:2b:12:e3:e6:13:1c:c4:ee:69:82:4f:8d:dc:d0:e7:
         ec:63:5a:94:ad:64:29:20:87:fa:52:1b:e7:e2:f0:66:7d:b7:
         86:ab:ee:96:1e:bc:96:71:45:cf:af:95:fa:ce:5d:68:2d:4b:
         c1:8d:c7:5d:c4:9c:5f:c7:ee:5d:38:da:bd:d5:74:89:c0:7e:
         01:78:a8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:30:15 2026 by rpki-client