Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
File:                     8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json)
Hash identifier:          OOtRrMkiPmssqxl13PM/bfv5+SErn+xvFuHswrRz33Y=
Subject key identifier:   75:1C:35:90:13:EC:A6:D7:9E:40:AF:AB:01:D9:60:57:43:5B:EC:44
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Certificate issuer:       /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial:       019EC06D3D359AFDD94737D1B46C05BE5C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
Manifest number:          0619
Signing time:             Sat 13 Jun 2026 10:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:44 +0000
Files and hashes:         1: 0tKNTcvutgmi05GASWx0PEyILOY.roa (hash: k6mCxAxzoTinU1/sVxlPB9SrgDwj5jJNmOfkRFaU9RA=)
                          2: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: aPXQb5jbs2gOagsWAcrCeZvUtRZ2xGL2dTQfSCifxjs=)
                          3: yrmrEDHLdh4dBGFaTpIBDSACdaQ.roa (hash: hNsr3+1Zh+bCK1vX9YSv52aqxq01DCYHfc2YnV/y8Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:3d:35:9a:fd:d9:47:37:d1:b4:6c:05:be:5c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
        Validity
            Not Before: Jun 13 10:00:44 2026 GMT
            Not After : Jun 14 10:00:44 2026 GMT
        Subject: CN=751c359013eca6d79e40afab01d96057435bec44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:c2:23:2b:1f:0f:6f:c2:b5:41:b5:6e:57:
                    94:4d:0b:d9:0e:da:03:01:11:da:38:39:f0:ea:91:
                    77:5b:e7:d8:53:d5:0a:00:11:3b:a6:56:07:f5:10:
                    1c:c2:68:77:46:52:66:8a:e6:03:33:1b:b1:8f:21:
                    b8:11:a9:57:b8:d2:30:8d:d7:6c:05:5d:d8:07:e5:
                    05:88:eb:20:3f:19:4e:70:c5:b0:36:16:0f:f2:71:
                    5a:c0:2b:10:fc:ea:0d:15:e2:1d:53:0c:ff:48:27:
                    98:f1:b8:24:80:b5:00:b8:2b:54:7f:04:23:9d:af:
                    07:85:fd:b4:29:cf:4e:59:5b:94:1c:f6:d7:0d:7d:
                    0f:71:a4:b4:08:31:b4:78:18:3c:15:b5:7e:59:65:
                    9e:b5:16:f0:e5:57:9b:6f:42:17:32:e8:06:56:fd:
                    3d:8a:df:95:05:93:84:e0:58:d0:a7:3f:d4:ff:ba:
                    b7:1d:ca:5e:6f:72:b0:d7:c0:28:03:34:55:bc:b9:
                    d1:38:a4:a2:4c:dc:6b:50:5d:d1:aa:44:c2:e3:3d:
                    ea:1b:66:99:c9:c4:d5:3b:75:6a:1e:2f:1b:12:07:
                    5f:22:66:e9:16:36:ea:52:a3:f0:36:5b:c4:dd:20:
                    43:26:5d:c6:ed:0e:30:e1:9b:f3:89:a5:ed:46:1a:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1C:35:90:13:EC:A6:D7:9E:40:AF:AB:01:D9:60:57:43:5B:EC:44
            X509v3 Authority Key Identifier:
                keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8a:34:75:55:6a:5a:77:07:a9:f0:86:5a:10:a6:d7:7c:ca:
         d1:e3:2a:06:e4:bf:07:97:de:7b:dc:04:83:af:ec:bf:e0:5b:
         4e:d3:ad:67:f7:77:0a:98:3f:8a:10:43:57:f4:0c:f3:27:37:
         f5:dd:84:af:d1:b6:44:10:3e:e3:61:88:21:5d:8c:b1:9f:ac:
         22:17:a8:b0:9c:ba:7a:08:27:bc:47:c1:8e:02:b2:99:ca:2b:
         55:a8:68:36:5c:57:63:f4:a6:c3:34:dd:eb:93:94:6e:a7:88:
         96:e4:d5:3b:99:74:8f:3e:eb:34:20:b2:7f:b3:ab:e8:15:2f:
         d8:8f:dc:f2:45:12:82:48:2c:44:01:93:d0:4c:06:7a:f6:45:
         fe:8f:9a:51:f7:cd:32:f5:77:65:e1:46:aa:a7:a0:a0:3f:aa:
         40:18:13:f4:54:30:3d:47:68:48:0d:5a:e2:52:f2:97:8c:fb:
         b4:d2:bb:7c:fe:03:d7:f9:a7:44:cc:1f:a0:41:af:94:7b:a7:
         73:35:69:34:64:67:51:84:a5:b8:a6:55:f1:f0:55:00:2a:a5:
         f4:09:d3:5c:19:a6:d0:ab:f3:e3:42:fe:01:fc:75:c8:30:46:
         1c:f3:95:9e:8a:0a:f6:d6:4c:a4:ea:aa:eb:c3:a1:6d:22:03:
         10:97:79:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbT01mv3ZRzfRtGwFvlxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOWRlMjYyMGQyMmZhNjljNTRjYmViYzZmMmY0ODUwNTZj
ZTJmZTUwHhcNMjYwNjEzMTAwMDQ0WhcNMjYwNjE0MTAwMDQ0WjAzMTEwLwYDVQQD
Eyg3NTFjMzU5MDEzZWNhNmQ3OWU0MGFmYWIwMWQ5NjA1NzQzNWJlYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4TCIysfD2/CtUG1bleUTQvZDtoD
ARHaODnw6pF3W+fYU9UKABE7plYH9RAcwmh3RlJmiuYDMxuxjyG4EalXuNIwjdds
BV3YB+UFiOsgPxlOcMWwNhYP8nFawCsQ/OoNFeIdUwz/SCeY8bgkgLUAuCtUfwQj
na8Hhf20Kc9OWVuUHPbXDX0PcaS0CDG0eBg8FbV+WWWetRbw5Vebb0IXMugGVv09
it+VBZOE4FjQpz/U/7q3Hcpeb3Kw18AoAzRVvLnROKSiTNxrUF3RqkTC4z3qG2aZ
ycTVO3VqHi8bEgdfImbpFjbqUqPwNlvE3SBDJl3G7Q4w4ZvziaXtRho0NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUcNZAT7KbXnkCvqwHZYFdDW+xEMB8GA1UdIwQY
MBaAFPCd4mINIvppxUy+vG8vSFBWzi/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTIt
ZjgyZDYwMGRkNGUyLzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTItZjgyZDYwMGRkNGUy
LzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIo0dVVq
WncHqfCGWhCm13zK0eMqBuS/B5fee9wEg6/sv+BbTtOtZ/d3Cpg/ihBDV/QM8yc3
9d2Er9G2RBA+42GIIV2MsZ+sIheosJy6eggnvEfBjgKymcorVahoNlxXY/SmwzTd
65OUbqeIluTVO5l0jz7rNCCyf7Or6BUv2I/c8kUSgkgsRAGT0EwGevZF/o+aUffN
MvV3ZeFGqqegoD+qQBgT9FQwPUdoSA1a4lLyl4z7tNK7fP4D1/mnRMwfoEGvlHun
czVpNGRnUYSluKZV8fBVACql9AnTXBmm0Kvz40L+Afx1yDBGHPOVnooK9tZMpOqq
68OhbSIDEJd5Sg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:46:02 2026 by rpki-client