Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File:                     Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier:          dzBUCWOj2pGGr/52UZfpw5cy90FZgV2ejRtmVuf+Zxs=
Subject key identifier:   39:76:FC:3B:B9:6B:F4:04:57:04:A9:55:5D:DD:2C:75:A5:8A:B9:D4
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer:       /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial:       019EC111DE7E6599868409B25B4E3DCA3F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number:          1582
Signing time:             Sat 13 Jun 2026 13:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:33 +0000
Files and hashes:         1: C8wsd-GToIrzlEu4UGpxb9GlCvM.roa (hash: Zr8JR1jTBR6rRKl1r523mHTzXKbJw6yy5nVuWzrKf9E=)
                          2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: J0r/7RhYiRgCuRJgRxYturKu3VdUGGOWJr7MK3cLHmE=)
                          3: uRQkD95GTfY6rjF1uHaPVB0eyic.roa (hash: DCYgdJ7UhUeMQMpapAAECzMIhYagZDmIZ36JKYt3YbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:de:7e:65:99:86:84:09:b2:5b:4e:3d:ca:3f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
        Validity
            Not Before: Jun 13 13:00:33 2026 GMT
            Not After : Jun 14 13:00:33 2026 GMT
        Subject: CN=3976fc3bb96bf4045704a9555ddd2c75a58ab9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:8c:2d:b5:8d:5b:ba:00:bd:54:a6:34:5a:
                    d2:0f:29:31:6b:72:82:77:1d:30:35:30:5c:44:5a:
                    1e:17:b6:b0:d8:1d:5c:09:ef:f9:68:56:1d:69:c8:
                    a3:1e:e3:0d:4e:50:87:91:24:41:28:13:3a:f2:e5:
                    dc:90:2f:3b:32:12:e8:2c:05:86:44:d0:9e:1d:4b:
                    54:3a:af:96:a0:dc:de:87:fc:a5:25:f9:5d:ab:4c:
                    84:f0:16:1a:09:aa:29:1a:99:f9:4f:8e:35:57:d4:
                    cb:d1:0d:92:76:95:c3:0b:6a:b5:b1:ad:4e:ba:c5:
                    5a:98:b1:7d:82:4b:5a:b6:09:6d:1a:5a:c1:21:a0:
                    c9:25:d3:85:2f:41:51:95:ab:e6:f1:88:a0:09:95:
                    d7:45:49:ca:f3:24:d7:0c:3f:b0:52:cb:33:ad:1c:
                    0b:e0:2d:2c:67:66:f1:33:72:f7:73:de:49:2d:f3:
                    bf:0e:27:8f:37:07:30:80:31:b6:7d:5f:5a:cd:6d:
                    a0:33:57:ad:d5:99:92:14:88:db:89:81:18:f6:77:
                    a5:91:e2:a2:84:19:2f:04:13:24:13:cd:25:68:4f:
                    26:13:98:9c:51:45:0d:cd:38:7f:8d:27:8b:3b:1b:
                    71:72:f7:10:45:96:71:6f:b6:9e:e0:4c:06:6b:29:
                    0c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:76:FC:3B:B9:6B:F4:04:57:04:A9:55:5D:DD:2C:75:A5:8A:B9:D4
            X509v3 Authority Key Identifier:
                keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:40:20:08:15:5c:25:06:1d:17:b4:8b:3d:f5:eb:1e:2f:d4:
         b5:2b:3e:19:7d:f3:c7:23:4e:5b:6d:d1:43:c5:3c:99:db:64:
         1e:ab:33:60:f7:f4:74:e6:46:6c:1e:45:76:3b:4d:f1:4b:b8:
         3d:56:25:c5:c8:f6:11:b1:c7:7a:65:5b:84:6c:98:bd:f2:04:
         86:9e:51:45:8c:9c:74:95:93:90:a0:a7:0c:df:79:51:20:a1:
         90:a8:88:99:ca:e2:ee:60:5c:f2:e7:fa:a3:54:bb:ab:4b:ba:
         09:67:99:1b:83:b1:ae:2b:bb:14:c3:48:12:eb:98:e7:99:e2:
         a3:25:d8:49:78:53:a3:cd:57:6d:e8:6d:36:d0:df:d1:0c:e8:
         60:ac:31:a8:bf:cb:38:a9:da:7a:f3:41:fa:22:e6:c7:28:1d:
         68:fd:6c:8c:d3:51:76:26:24:15:9b:c4:a6:ba:9a:57:fc:ce:
         e8:4f:15:4d:0b:7a:53:a1:f2:9a:ff:05:83:43:91:6d:21:1f:
         d5:8f:2c:6c:e6:a0:21:c0:31:6c:3a:5e:ea:c0:6e:60:1d:4b:
         90:66:70:6f:2f:ba:78:ed:12:ba:f7:de:bf:d9:fa:d1:e1:e6:
         4a:a1:c8:bf:6e:b5:22:13:e3:e6:73:ec:d5:4e:bb:b3:7b:39:
         60:2c:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:45:25 2026 by rpki-client