Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File:                     8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier:          lgy911d55t2C0iD6OuklDATC4ktlXrrqxg+r4CR+uEk=
Subject key identifier:   E6:C4:04:DF:1D:06:94:AC:02:10:F4:B5:23:93:07:37:6A:47:80:05
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer:       /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial:       019EBF23C7371FBEE8A6A7A9BBB1358B57E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 04:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:53 +0000
Files and hashes:         1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: +DyFvq6L69yBvwh2zES0qB6ey7VHWVQYKWdz0UJ8KHY=)
                          2: gItw0vdqzg90tFpmlTqKM5Onxow.roa (hash: EIklKyUdyJ9hgAFeB37ndmxzyfrlZyuSiNL83eIkim4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:c7:37:1f:be:e8:a6:a7:a9:bb:b1:35:8b:57:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
        Validity
            Not Before: Jun 13 04:00:53 2026 GMT
            Not After : Jun 14 04:00:53 2026 GMT
        Subject: CN=e6c404df1d0694ac0210f4b5239307376a478005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7c:e7:31:96:e3:d5:3f:61:1f:36:2b:5e:eb:
                    87:79:88:4c:a1:8f:ea:5b:0b:db:a9:07:30:4c:4e:
                    fe:33:fa:c9:ad:73:98:46:73:01:12:a0:ca:28:0f:
                    34:8d:82:b9:da:fd:2e:ad:a4:bf:10:8f:75:8c:79:
                    2b:2f:60:3e:f3:f7:36:de:4f:bc:14:56:75:0c:75:
                    3f:de:b8:c2:60:0a:a2:87:82:7f:ab:89:b4:e3:f4:
                    7c:1c:aa:6b:30:67:e9:d2:a7:b8:d9:ab:50:f7:d7:
                    03:51:dd:ad:b2:ed:7c:d8:29:63:1a:a8:b7:e4:5e:
                    b8:1f:4e:18:67:0f:05:37:6f:14:b8:40:a0:d5:3c:
                    01:b9:e4:06:6a:be:d2:73:1d:8f:cb:31:5f:94:b9:
                    f3:d8:fb:df:97:2a:1c:9c:58:39:8a:2b:72:a7:ca:
                    2d:91:1c:d6:0c:41:25:ad:c0:81:c9:e8:7e:bf:f0:
                    85:13:31:02:6a:8f:d8:53:49:24:a5:08:5c:d5:56:
                    e6:1d:b6:a9:29:7b:06:9b:cb:de:99:0e:64:56:bb:
                    97:1b:5e:91:42:49:5a:ba:3b:e0:bd:c6:c6:a4:aa:
                    3d:6b:29:c3:72:47:43:4e:46:d6:89:17:7a:68:86:
                    37:85:36:41:81:75:55:e4:94:0a:f3:a1:aa:44:d0:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C4:04:DF:1D:06:94:AC:02:10:F4:B5:23:93:07:37:6A:47:80:05
            X509v3 Authority Key Identifier:
                keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b2:ce:61:d7:64:31:38:69:c5:b8:0c:14:4d:1a:28:99:c1:
         c6:fd:48:88:ba:e6:ef:b0:17:d0:26:55:ff:a7:78:22:55:f7:
         58:7f:12:00:7b:7f:65:1f:fb:53:0b:50:20:f0:18:b1:7f:9f:
         21:fc:8d:56:1d:d9:f0:7c:05:17:f5:4b:13:72:9c:c1:02:4b:
         e3:8b:dc:91:81:6a:ce:a5:e0:1f:2f:09:12:dd:5b:51:4c:41:
         02:97:27:87:f9:cc:6f:0a:78:94:eb:cc:6c:a4:b5:15:d7:0d:
         37:3c:29:ac:0b:d7:06:74:77:77:f9:a0:ff:19:e5:66:3f:c5:
         45:81:d3:b0:c2:e7:b2:93:a3:12:be:fc:9c:23:ee:8c:18:5e:
         a1:1e:68:c8:b3:73:09:b8:73:78:f9:ec:9c:07:38:6b:7a:8a:
         e3:84:10:45:c8:e0:b2:c7:b7:31:70:53:39:fd:28:9b:92:bf:
         67:1c:c9:ba:18:65:9e:63:df:99:57:3b:46:af:bb:f9:57:8a:
         07:a6:4d:93:8e:1f:1d:a8:1e:cf:4c:e5:55:b0:46:8c:80:cc:
         43:71:c7:67:e8:6c:41:e6:41:1b:95:99:9f:42:ba:d9:ea:fb:
         cf:d5:39:28:8f:b1:a0:5b:4d:b1:3d:04:ff:e7:5a:62:5f:93:
         f6:2a:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:54 2026 by rpki-client