Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File:                     AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier:          lTnM5CR0OOHVaMiNL/CSjxnCIcHeHD/lQrNQyJ3FlqQ=
Subject key identifier:   23:1C:8A:0C:41:95:98:8E:D5:AA:5A:B7:5A:87:3B:4C:26:4F:2D:D1
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer:       /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial:       019EBEED3C6CA3D6D3E8CF6CC4B6D906ACFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 03:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:18 +0000
Files and hashes:         1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: 4qZv/+dG5ckZk1C7Xl2IwObJZ90SzrwuWvjQBKN3nQw=)
                          2: _ERGoNtkfCnC57fEn319xuy5MH0.roa (hash: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:3c:6c:a3:d6:d3:e8:cf:6c:c4:b6:d9:06:ac:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
        Validity
            Not Before: Jun 13 03:01:18 2026 GMT
            Not After : Jun 14 03:01:18 2026 GMT
        Subject: CN=231c8a0c4195988ed5aa5ab75a873b4c264f2dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:de:ab:99:79:e7:7c:24:ec:d7:7a:49:ab:19:
                    a8:c7:47:b0:36:96:78:c0:09:29:5e:75:81:1c:6d:
                    ee:4c:11:4d:1b:09:5c:50:24:ab:8f:d7:52:86:ac:
                    89:0b:df:d0:07:c2:54:c1:20:1e:18:c5:ce:8e:2b:
                    85:88:74:98:a8:82:14:10:6a:31:05:3c:6b:83:1f:
                    c3:8e:cc:ba:e9:80:92:6f:ee:fd:42:3a:6f:31:4b:
                    75:14:d8:0c:e6:62:86:2e:e1:14:67:a2:b5:98:4c:
                    09:41:20:e6:d5:23:02:b0:2d:81:cd:a3:d3:bf:b3:
                    93:2c:63:e3:ad:e5:0e:64:e7:8c:7f:57:a8:ea:b4:
                    da:9e:e0:b6:da:ca:a1:22:67:a2:ff:a3:57:0b:16:
                    68:bb:86:f5:31:5d:49:a3:f4:f7:7b:59:5f:bd:98:
                    0e:b3:78:c3:ed:25:18:86:29:fc:2f:69:0a:9c:d4:
                    49:66:e9:72:bb:64:8b:9e:a8:a5:9f:e3:21:5b:3a:
                    66:4c:d9:c0:06:e4:21:ef:e7:89:c2:54:71:d4:49:
                    f1:37:7c:28:e5:68:f0:c3:95:bd:a4:cb:55:a2:fe:
                    6d:e5:fe:73:55:90:ae:3a:66:93:7d:fd:e9:9c:83:
                    51:c6:d3:1d:4a:d9:90:e0:94:d1:fe:74:bc:cd:48:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1C:8A:0C:41:95:98:8E:D5:AA:5A:B7:5A:87:3B:4C:26:4F:2D:D1
            X509v3 Authority Key Identifier:
                keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4e:0b:74:21:a8:d6:f0:d2:f1:4e:63:c9:92:4f:c8:5c:af:
         77:27:f0:de:a9:91:53:ab:0a:ac:0f:95:3f:e0:7a:84:7b:75:
         4d:76:39:ac:28:06:be:61:d9:c8:f0:73:4e:d5:24:e0:6a:26:
         b6:84:3b:55:e9:8d:8d:32:00:ab:e0:dd:0f:bc:59:f8:ad:74:
         7d:ed:70:60:a8:b9:24:66:5b:0d:1c:e0:e5:22:d8:8e:78:c8:
         41:bc:20:47:ca:0e:4c:f1:a4:69:56:ee:bb:95:82:c6:65:e2:
         79:2d:24:92:b6:ba:33:47:74:61:11:4a:b7:41:3f:53:25:2b:
         82:4b:4a:02:dd:26:b3:aa:44:b8:cc:84:36:46:db:04:b0:6e:
         48:6f:2c:15:60:60:61:af:cd:3b:4a:a0:ce:8c:13:cc:27:e0:
         07:37:6f:eb:1e:26:5f:2c:4c:51:2d:0a:bb:1f:26:4a:fb:09:
         7b:46:d6:b5:53:69:14:49:33:fb:97:66:e2:83:ac:b5:14:6e:
         0d:8c:1d:c7:a2:42:fe:65:56:fe:71:77:3c:97:c6:51:5e:73:
         a8:83:1b:05:d6:c3:f2:80:35:ef:fb:a6:f3:cb:a4:0d:33:78:
         80:df:a6:81:36:cb:74:28:bf:ba:34:a4:a2:be:17:5e:1b:68:
         08:23:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:41 2026 by rpki-client