Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File:                     pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier:          A5iPbJhuOVTlmV3DoV/IIlLFf/UO/TFfP4ChLyJ3rUI=
Subject key identifier:   C8:C1:6F:88:9C:5E:E0:4B:CF:28:62:38:54:B7:B3:67:31:C9:B1:0E
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer:       /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial:       019EBF5B13BE09D5ABE52E0B887A39D92D43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number:          0D4D
Signing time:             Sat 13 Jun 2026 05:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:17 +0000
Files and hashes:         1: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (hash: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc=)
                          2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: I+1B38xkbWQp3W8T0Q67e06nU+y44alacEHI4cFyERs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:13:be:09:d5:ab:e5:2e:0b:88:7a:39:d9:2d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
        Validity
            Not Before: Jun 13 05:01:17 2026 GMT
            Not After : Jun 14 05:01:17 2026 GMT
        Subject: CN=c8c16f889c5ee04bcf28623854b7b36731c9b10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:40:5e:99:50:0a:6f:24:82:4e:97:8e:36:
                    5e:e4:31:f5:c3:08:ab:b3:46:3e:ea:3a:4f:06:81:
                    4f:f0:6f:4d:5f:88:cb:44:39:8a:7f:55:68:d9:cb:
                    63:78:87:e3:0a:73:c4:9e:4e:15:ae:d0:33:7d:2f:
                    3e:96:2a:d0:11:5c:a9:97:1c:61:a9:1d:6b:ae:5f:
                    69:dd:82:9d:ce:6a:85:d2:8b:a4:c9:76:dc:b4:c8:
                    6b:d0:9f:be:ae:dc:2f:96:72:6d:96:9c:1d:8e:99:
                    30:59:bb:ab:26:da:8a:3b:a5:13:ef:de:ca:9f:ca:
                    4d:37:b8:39:05:ee:8f:d4:88:74:da:34:72:ec:6a:
                    b0:0f:da:bc:0b:0a:70:ae:ec:20:06:69:08:8c:bc:
                    35:58:7f:0d:14:6c:e8:98:c1:19:1d:fd:35:78:1c:
                    e3:6e:53:ba:e4:46:de:7b:6d:6f:db:2c:4f:37:c9:
                    1c:05:1f:ef:56:10:8c:dc:07:d4:91:ee:2a:06:f0:
                    ce:08:67:15:f9:be:b5:a0:3c:99:30:2b:68:29:d7:
                    1f:e5:87:4a:b0:33:8d:cb:9f:e0:e2:95:97:46:47:
                    7e:c9:db:2a:01:9d:59:c3:a7:9b:82:3a:fd:e7:ec:
                    d4:a0:0b:4e:5c:47:2a:c0:cc:16:3a:1f:0d:6d:ed:
                    57:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C1:6F:88:9C:5E:E0:4B:CF:28:62:38:54:B7:B3:67:31:C9:B1:0E
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:42:21:ee:1a:f5:47:78:42:15:5f:0d:fb:69:0f:08:49:
         ac:6d:93:5d:b9:45:b6:10:60:0e:1c:16:1a:01:53:d7:02:0e:
         35:6b:df:64:cf:21:cd:6b:b5:56:d1:c6:98:a4:85:79:97:3f:
         8a:fd:b8:9c:13:40:e4:29:ae:ae:d4:89:3c:56:99:c5:9c:e1:
         fa:10:34:f5:cb:1a:e8:e5:1c:7f:2b:3c:4f:a0:3b:f9:f4:73:
         45:f1:2f:45:d2:c6:18:b7:8a:cf:db:16:2a:c7:dd:cc:fa:0e:
         16:c4:d6:95:cd:cf:5b:05:bd:20:8a:f3:78:17:f2:70:ec:00:
         02:d8:01:df:94:7f:4e:14:14:71:60:0e:c0:a6:e5:6c:09:bd:
         98:e2:ee:23:b5:f2:b9:a6:80:1d:8a:65:33:bb:53:10:e4:95:
         7d:7b:d5:b4:c9:2c:67:e4:82:a6:d2:67:50:c9:1f:9b:f9:94:
         72:09:88:71:de:4e:29:84:67:6a:95:55:88:d7:a4:c5:cb:9c:
         05:43:45:0e:67:6b:e9:f5:54:76:b0:1e:e0:0c:8a:a4:c8:b9:
         da:c1:22:6a:48:1e:01:ef:a5:a7:82:46:a2:a1:6f:52:6b:c4:
         fe:25:9f:8f:7d:1a:53:a8:65:8d:b1:43:f0:9d:11:02:23:9f:
         ca:4f:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:16:17 2026 by rpki-client