Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
File:                     p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json)
Hash identifier:          F5zKhAB5b2aopAxueyElJW0COmAXkj/v6dB7Or4xp4Q=
Subject key identifier:   CC:81:F1:65:50:29:39:A5:BE:F0:A2:5E:E1:C5:AF:7C:EF:69:E7:F3
Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
Certificate issuer:       /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Certificate serial:       019EC17F8BE1DB0CC79B2E3A66D6B8C394C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
Manifest number:          0772
Signing time:             Sat 13 Jun 2026 15:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:22 +0000
Files and hashes:         1: SdRMQSisA3A52kvZfTcOqIZi7WM.roa (hash: FjVPIrI7M5sGkygChCHAIE+8f/f2VPSzrAXNL/N59yU=)
                          2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: mkojR1wN/WZOkjy/JWsAoS5O0lCjNXH7w3pYkhg4Szo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:8b:e1:db:0c:c7:9b:2e:3a:66:d6:b8:c3:94:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
        Validity
            Not Before: Jun 13 15:00:22 2026 GMT
            Not After : Jun 14 15:00:22 2026 GMT
        Subject: CN=cc81f165502939a5bef0a25ee1c5af7cef69e7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:85:db:df:84:fe:5c:35:55:ea:75:78:67:
                    b7:a8:b7:47:f4:5b:72:32:17:62:71:20:49:0f:c0:
                    b7:39:04:56:51:76:43:75:85:41:55:a0:cb:3c:1f:
                    1f:fb:7e:93:78:5e:f5:4a:21:8b:b1:20:92:e3:97:
                    14:a8:97:ea:8d:26:1e:67:05:15:ef:b6:46:1d:e4:
                    36:62:b4:23:3b:f3:90:6a:9b:97:5c:53:4d:55:03:
                    34:49:45:e9:5f:50:68:b6:d1:89:e2:59:58:37:17:
                    d4:88:e5:17:e7:94:4a:8c:b2:19:c5:5e:db:32:ad:
                    db:1c:61:90:bb:86:3f:8b:10:32:27:67:73:93:15:
                    64:08:8f:72:a3:19:6d:89:c3:57:2d:3f:de:59:f4:
                    e3:81:9e:92:9f:60:6b:87:d3:7b:20:7b:02:b2:c4:
                    cb:ff:b4:1d:9b:be:ee:38:30:2e:4a:fe:14:0e:f9:
                    31:de:8a:0b:de:bc:b2:59:51:9a:84:86:25:19:25:
                    bd:0d:0c:5f:e1:59:75:82:22:48:8f:f8:90:de:12:
                    3f:b9:f2:24:ec:c5:5f:db:36:d9:d7:67:05:55:84:
                    fa:f1:13:ea:f1:78:8e:05:53:40:fb:9d:35:b5:85:
                    eb:c5:70:f5:48:04:2c:18:d4:7a:d1:43:c6:94:1e:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:81:F1:65:50:29:39:A5:BE:F0:A2:5E:E1:C5:AF:7C:EF:69:E7:F3
            X509v3 Authority Key Identifier:
                keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:fd:74:40:11:ee:bf:7d:4d:b2:73:81:0f:96:86:d1:f4:
         35:d0:a0:45:22:9b:7a:e0:22:b7:93:92:c6:37:ef:8b:53:bd:
         07:16:3f:3b:38:19:04:83:a2:3a:ef:43:78:67:96:35:ce:96:
         63:2a:e5:8c:67:14:dc:51:53:72:01:2e:de:72:16:0f:17:fe:
         0c:0f:cf:40:ff:a6:4d:34:55:b8:ce:cb:63:35:e1:da:dd:2b:
         71:56:df:19:de:01:51:a4:5d:42:07:64:26:b1:a0:5b:7d:15:
         60:18:14:00:1d:a8:78:d1:74:62:3a:33:17:81:22:4c:35:ee:
         a3:54:5e:6b:90:57:ad:ce:b7:cc:bd:d0:c6:bf:a9:4f:25:67:
         79:f2:b2:fd:19:1c:48:de:67:d9:a4:f5:7c:45:43:c6:41:3e:
         ef:7f:b3:0f:35:53:f8:25:e5:22:83:2f:9b:21:c5:40:6d:3e:
         03:24:67:bf:d9:98:27:01:c7:e0:20:77:79:4b:ef:8d:1f:e9:
         43:e5:53:71:f9:54:01:5e:6e:48:49:8f:f5:d9:4f:03:65:af:
         cb:64:6d:6b:62:7f:d8:b6:18:58:65:a2:f2:30:5e:27:0d:55:
         14:d3:16:b0:ff:fd:e0:03:23:b4:ab:ef:7c:6a:7b:68:a0:2e:
         89:57:5e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:38:00 2026 by rpki-client