Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          8CbHl/5geA2nGL6yLgt4Q5KIvQT2d0v2izz6TxfjZR8=
Subject key identifier:   A0:26:51:3D:74:3F:4C:1B:B4:14:71:9D:AB:9D:F9:F4:62:97:FB:4A
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       019EC0DB08B91F00B5B1ED5BE52C5C03EB4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          1962
Signing time:             Sat 13 Jun 2026 12:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:40 +0000
Files and hashes:         1: 17V0jzStQoCb_AQ6tvGaBLavGoM.roa (hash: xin2ArbEF/v8y8IFPHvAh0sLnYeJkUxdnoEAhdH3Knc=)
                          2: P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa (hash: mHchc2zREYZlnOuz8p+co3qUvhS0H4UpE0PWUACDroc=)
                          3: fn22VffPk13JEZ43P7QzWAHfKUI.roa (hash: jLIrzazW1c/8A69YDLVF5OeAhGmqg599WqHWOZ8LrQc=)
                          4: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: sBx0fd4U3cAw9I2MUU6BKtieKH+seRUCDi39khdaEr0=)
                          5: lvjXs-MIPCkpvks5PHkIN5Ickrg.roa (hash: rbC/bc1gnAJSprju+NYQ5fdLrBRf1LuhW2461H5788Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:08:b9:1f:00:b5:b1:ed:5b:e5:2c:5c:03:eb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: Jun 13 12:00:40 2026 GMT
            Not After : Jun 14 12:00:40 2026 GMT
        Subject: CN=a026513d743f4c1bb414719dab9df9f46297fb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:d9:46:22:69:0a:5d:2a:0a:e8:22:55:cc:
                    74:2c:dc:be:10:8e:6f:59:d3:b9:f3:67:90:7f:f8:
                    80:7d:b2:ed:4b:b7:17:b4:e1:a7:d7:1d:b6:b0:03:
                    3f:45:80:61:54:33:fe:dd:34:61:bf:e5:b0:89:22:
                    41:42:1a:b5:0c:da:ad:f6:9f:4a:3f:e5:7f:d4:50:
                    14:ce:f3:44:cf:76:ba:ee:7e:f0:b3:dc:cc:aa:75:
                    45:80:fd:ba:b0:34:c6:08:fe:67:2f:ba:f0:67:fa:
                    4d:01:e4:6c:37:e5:48:d8:80:d7:17:83:a8:1a:94:
                    f1:72:5a:54:a3:59:55:0c:1e:4f:72:7c:5b:58:d4:
                    ad:ed:d8:70:4c:10:6a:0b:43:88:e5:b6:8e:69:47:
                    3d:6b:c4:7c:69:d0:ff:ca:d0:af:68:81:84:51:3e:
                    90:35:e0:8a:9b:12:df:94:7b:c7:64:05:94:9d:d7:
                    65:e8:ba:48:52:e5:44:3a:e7:d8:15:3e:f0:d6:11:
                    c9:ae:37:14:c0:d3:af:56:25:dd:4b:f7:d1:bb:68:
                    18:1d:fe:6f:31:9e:ca:4a:d3:81:36:a9:21:07:76:
                    a5:05:38:9c:8f:c0:82:8a:e2:fb:9c:a0:96:9e:75:
                    a6:12:d0:90:aa:1b:1a:cf:08:c8:5b:5d:e5:f8:d0:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:26:51:3D:74:3F:4C:1B:B4:14:71:9D:AB:9D:F9:F4:62:97:FB:4A
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:cb:90:11:ab:e6:b8:4c:b9:f7:23:b3:57:ad:07:38:9c:7e:
         7c:97:55:e6:f0:48:7e:60:7c:ad:93:25:c2:2e:32:9f:14:5d:
         67:95:c9:a3:17:83:b3:10:a7:bc:fd:2d:25:ed:b2:50:42:6f:
         e9:be:1f:b9:0e:70:ac:a0:29:88:7f:5d:d7:ba:d8:f4:35:50:
         a4:f3:d8:63:dc:09:05:78:b2:93:9b:ec:3f:4c:a3:ea:f2:b0:
         f4:6c:28:ee:f9:ad:ff:e0:18:7c:4b:9e:eb:d1:db:71:ec:68:
         6b:4d:d4:9b:f5:39:3f:b1:e6:e4:3b:59:72:08:fe:03:e8:64:
         81:5e:5a:5f:70:5b:b1:c0:d1:bc:74:38:40:5d:5e:17:19:b0:
         df:a3:58:ad:bf:d3:4b:23:6f:43:17:02:8d:1d:0b:e5:c6:b9:
         ad:ba:64:9c:c0:a0:72:f1:01:92:41:58:60:bd:aa:a8:a4:21:
         b9:76:6d:0c:45:3c:34:d2:c6:dc:8d:d9:fc:c6:67:77:f4:49:
         00:e2:4d:48:b0:64:7d:99:17:3a:27:8a:a6:e8:37:1a:9a:55:
         70:73:a0:98:07:3c:b1:3e:58:0f:1c:c3:3a:7b:4b:34:27:c7:
         90:43:71:76:28:3f:c1:d5:62:bd:30:31:b1:7d:ec:18:e2:c4:
         0c:0a:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:55 2026 by rpki-client