Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File:                     a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier:          tQL4BM4pyguOFYqbcGCbu0sysBDRxpYertijkKSE8kg=
Subject key identifier:   DC:52:02:21:D4:7C:96:25:CC:F4:5D:51:B8:D0:85:05:55:A7:E3:26
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer:       /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial:       019EC412E128E0D16C7E855686ECCC3572FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number:          0EB5
Signing time:             Sun 14 Jun 2026 03:00:31 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:31 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:31 +0000
Files and hashes:         1: QgMG-u89Y-TWbT4Gt6ZsQgsTYNI.roa (hash: sETsQ4q/+Tu+FYDJynqCF64iSLCcXXD4r9m9lwpRbx8=)
                          2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: V2s2ErXdv4WoSzOrHSJbMcT0qWfKH1R9l/TtUz83+vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:12:e1:28:e0:d1:6c:7e:85:56:86:ec:cc:35:72:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
        Validity
            Not Before: Jun 14 03:00:31 2026 GMT
            Not After : Jun 15 03:00:31 2026 GMT
        Subject: CN=dc520221d47c9625ccf45d51b8d0850555a7e326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cc:74:40:03:f4:9c:7a:f3:c6:93:0d:8e:ca:
                    da:6f:9b:34:7b:50:49:69:a9:45:04:87:fd:37:b4:
                    39:2b:ec:79:0d:7a:c9:1e:d2:b7:7e:f1:06:52:a4:
                    31:f8:e5:09:d7:1f:85:5d:bb:f8:2e:78:0b:c9:81:
                    0b:84:69:24:91:9a:6e:7e:58:8c:ab:21:c9:48:68:
                    1b:71:e3:1d:18:8c:9e:49:39:86:39:6b:3d:24:c6:
                    9f:fa:e6:8a:a5:42:2b:4e:1c:87:81:34:f9:49:78:
                    a9:54:2c:f5:1e:4b:e4:03:18:20:cb:53:23:99:cd:
                    53:d1:62:6a:eb:77:78:1e:5c:79:fb:89:e5:9e:8f:
                    a2:74:ba:4d:92:37:ca:d1:cf:20:5e:db:fe:32:78:
                    de:59:48:cd:50:01:65:89:8a:34:8f:f4:ba:76:c9:
                    76:94:36:e4:e4:3a:cb:10:c7:59:6d:39:bf:71:4c:
                    3f:35:23:3f:3c:47:79:53:90:56:2b:5c:b6:0a:5d:
                    c0:11:7d:43:1c:4d:98:06:af:2b:cc:0a:a5:9d:d8:
                    3a:1f:65:3d:19:8e:e3:f9:c1:ca:b9:e4:11:95:8c:
                    65:46:0d:f3:45:35:c5:cc:0b:d8:d5:b4:24:96:70:
                    5c:4d:da:ce:1b:8e:b9:a2:ee:85:35:b2:df:dc:bc:
                    fa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:52:02:21:D4:7C:96:25:CC:F4:5D:51:B8:D0:85:05:55:A7:E3:26
            X509v3 Authority Key Identifier:
                keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:a1:71:e4:78:5f:06:41:48:3f:4e:d3:43:df:e6:73:f4:
         21:22:e3:2d:f6:3f:1f:47:c2:cb:b9:44:85:93:d7:b9:15:1d:
         5f:4b:ad:c0:de:53:fa:88:42:71:4e:3b:81:7a:33:6e:08:9d:
         2f:b0:d4:dd:57:97:2d:f2:ac:97:37:3f:d0:16:9c:2b:84:88:
         ae:f9:6f:c3:54:d3:82:27:c1:44:a4:5a:17:7d:20:28:56:61:
         c8:6c:10:92:6a:bb:fe:1e:7b:e6:2a:4b:f5:3b:1f:1a:5b:60:
         97:bd:bb:b6:9d:42:eb:bc:ac:49:81:c6:23:a5:2b:77:5f:73:
         7f:46:a3:de:28:47:8c:60:cd:13:0b:25:42:c4:d2:72:e2:c2:
         17:6e:ae:ae:4d:41:8d:0f:9c:76:45:f7:65:23:2e:75:4e:8c:
         cd:89:23:85:40:fc:12:a8:09:dc:a8:16:06:aa:4a:94:b7:94:
         74:b5:f9:ea:c5:12:79:b1:bc:b5:a2:5b:a7:d0:5b:e5:47:13:
         b4:ee:d9:9f:58:03:46:2d:1e:1b:17:80:15:dc:26:df:21:aa:
         dd:18:2e:22:c5:63:c7:d4:6f:40:c4:78:b8:6c:78:31:59:75:
         49:3b:83:c2:d7:bc:26:c9:80:e8:13:c3:79:4f:25:6e:49:c7:
         26:34:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:09 2026 by rpki-client