Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File:                     rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier:          rVcOD8OIetXTi7MhAp6zd34EGWGUnVAI1GYWGlQj5D0=
Subject key identifier:   FE:FE:71:48:79:21:33:0C:A1:1F:03:2B:AD:CB:6D:B4:A5:A9:78:51
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer:       /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial:       019EC0A3E8581815947041C0B7C12D22D1A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number:          196F
Signing time:             Sat 13 Jun 2026 11:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:27 +0000
Files and hashes:         1: 1-QuFrP2FCGdb0e2Ii_z6LaU8br8.roa (hash: rbKcnlSwgT9Djc5Fqvy3u9yC2cYZiJQ7dfTu75ri+mI=)
                          2: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (hash: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A=)
                          3: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (hash: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o=)
                          4: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (hash: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg=)
                          5: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (hash: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU=)
                          6: jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa (hash: gYuzALxJxQy3dIl1B+tjxYOVPb7F/ttrTik4SzmNvpo=)
                          7: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (hash: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8=)
                          8: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: kkRIDEA6+6QKJgI7cyZJmbMqCDxScVcIHb6kh5lRZUc=)
                          9: uX2HFPa-1T3UMzqcLHxJG1wYem0.roa (hash: mt3IsY/c70SVPfG6w+VGWzHhy8025Nd/iJv2s56ORTs=)
                          10: xkw2dJ1kdWsWVrDQa7ecIv1ZfEE.roa (hash: TlO1SGSzKaGyjfYONLThtWXquMMxH3GzgJNd8bMLo1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:e8:58:18:15:94:70:41:c0:b7:c1:2d:22:d1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
        Validity
            Not Before: Jun 13 11:00:27 2026 GMT
            Not After : Jun 14 11:00:27 2026 GMT
        Subject: CN=fefe71487921330ca11f032badcb6db4a5a97851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:be:76:27:48:eb:0a:5a:47:69:5e:f0:b7:
                    9a:81:39:e1:52:91:06:4b:81:ec:cc:b1:f2:e6:30:
                    15:80:ec:4b:d5:e7:ec:70:d7:5d:80:d5:60:31:49:
                    0e:b0:14:95:db:81:c1:fa:96:ea:44:19:32:e8:09:
                    c6:dc:1d:ec:cc:3b:c7:f9:47:45:b9:9c:eb:1d:77:
                    13:1c:a8:3e:86:6e:70:f3:4d:f7:a2:45:f7:20:f9:
                    3e:7e:5c:e4:55:24:00:5c:77:a0:49:e3:dd:46:45:
                    79:c3:08:45:b6:71:84:28:16:f3:ad:93:27:2b:d1:
                    6c:12:a5:10:61:fe:bb:11:d9:29:a9:ac:b1:23:30:
                    78:94:2e:cc:63:09:23:2a:10:84:a1:1c:61:4c:e0:
                    f5:1e:a3:d0:66:e0:7a:74:3c:20:04:c7:71:e5:be:
                    ff:86:b9:2a:bc:a2:d8:57:ec:29:21:91:5a:41:ae:
                    48:b0:43:5a:65:b2:a8:85:7b:ee:48:7f:ff:e5:0f:
                    fc:47:4c:d0:61:cf:ae:fb:47:ed:4a:3d:2d:23:60:
                    be:92:aa:55:99:43:ed:48:47:fa:85:ad:64:9e:3a:
                    78:47:f4:d8:9b:1c:dc:d0:c8:bb:3b:db:ab:b5:32:
                    18:ba:3f:2e:ee:92:bf:e4:07:d6:e2:43:ed:fd:1c:
                    16:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FE:71:48:79:21:33:0C:A1:1F:03:2B:AD:CB:6D:B4:A5:A9:78:51
            X509v3 Authority Key Identifier:
                keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f7:b8:07:cd:80:d5:e4:e2:e2:0d:09:e6:ae:a5:49:c0:1f:
         21:4e:26:ec:7f:0b:fb:71:2a:63:65:23:e0:f9:d8:14:74:e4:
         e3:4e:fb:0a:21:2c:af:52:35:4b:15:b8:b5:17:3d:49:bb:ed:
         20:06:3c:3f:20:77:a2:9d:62:62:f8:3b:30:14:8c:8a:6a:f6:
         86:15:ec:a0:5a:1a:ca:1d:53:dd:a4:75:a3:9e:2a:b6:b8:2e:
         45:14:22:52:08:c4:d8:52:58:90:71:dc:3d:10:ef:8c:b2:33:
         9f:6a:9f:f8:3a:2e:0e:ac:11:21:32:34:ad:b5:fd:24:1d:1b:
         2e:bb:de:c0:d7:f9:dd:ba:51:4c:5e:3a:45:94:a6:98:6c:35:
         83:68:c4:b6:a0:5f:a0:53:a6:c0:78:f5:3d:92:cd:d2:58:67:
         24:50:29:ee:0d:e0:01:16:a5:ad:31:02:12:ac:49:42:11:de:
         22:22:85:a0:d6:c7:ff:e1:27:9b:8b:fe:44:c4:a3:76:79:9e:
         7b:fd:2a:c2:5f:c1:3b:2f:f1:07:1f:43:39:78:7a:a7:27:13:
         50:2f:dc:94:a2:00:45:0f:68:db:b4:be:b5:40:15:f5:26:ff:
         ca:d8:a3:fb:6c:8f:55:c1:30:14:5c:2c:17:a7:57:b1:5d:ac:
         0c:e1:ff:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:48:15 2026 by rpki-client