Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File:                     lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier:          ojVJN0COJPX8cMNGLvOyvjIcZjn4V/B9hRfu3tHOwpE=
Subject key identifier:   35:33:2B:29:6B:13:00:5D:22:AE:05:6C:6C:45:32:6D:71:A9:2B:A3
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer:       /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial:       019EBF2374912D4B9691A9FE04020767127B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number:          0477
Signing time:             Sat 13 Jun 2026 04:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:32 +0000
Files and hashes:         1: 18kHGWCAiXEwLk5tToiHTfxt3EM.roa (hash: +mCxyAdWpIpIXzXNLb7s3rq4vAYM5UY8Hn2uQ7Wbe0w=)
                          2: 4hphMIiGnD5dkRsiJyBBPbVD-VA.asa (hash: nDZrttogDfPJ+CPWuZAXD7WXRjv1eX2CBPcPX7A56PM=)
                          3: TWNFCCObGkb6aNl1-64DYQpBWus.roa (hash: UlueX8sbWPD2fhvWmHL9sCcVILRKQCMdFOnEOQOjliY=)
                          4: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: r/JE4fVD3lpnQUVE9/WLe+0WhSMUXvJYpI6wx4FOh3Q=)
                          5: rJNKAC_7vgy7WAf0s8sdhHN9BiQ.roa (hash: 1B23Y1SamnbnH9DuB2QCnvYB+p28JNjbqvc9WGT21MQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:74:91:2d:4b:96:91:a9:fe:04:02:07:67:12:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
        Validity
            Not Before: Jun 13 04:00:32 2026 GMT
            Not After : Jun 14 04:00:32 2026 GMT
        Subject: CN=35332b296b13005d22ae056c6c45326d71a92ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:37:67:9a:b9:7f:da:b9:7a:e2:cc:ce:2c:
                    15:57:b8:a5:bf:a2:b8:bf:b3:de:88:e2:3c:5c:88:
                    44:8a:23:45:c1:8d:04:d5:a4:cf:10:dc:52:a6:10:
                    f5:e8:33:30:a3:81:c3:5d:3e:68:c2:78:12:68:c6:
                    4c:87:94:4c:c2:44:31:4f:da:61:17:30:36:87:a6:
                    18:ed:99:25:0b:ac:90:83:37:36:f7:e4:14:52:dc:
                    08:c0:b8:2b:93:be:d6:24:f9:8f:6e:af:5a:18:bf:
                    96:d8:9d:b3:df:aa:6c:83:79:c7:0f:60:65:ba:66:
                    5d:65:66:33:b6:54:c9:ec:aa:81:b8:3e:69:3b:39:
                    3f:2a:15:dc:79:d7:9e:e1:b1:70:b7:00:9f:72:fb:
                    1c:a4:d1:8d:09:82:fd:16:69:5a:03:13:b1:81:58:
                    7f:86:f9:05:eb:ba:7d:14:e3:b9:9f:02:dd:2d:65:
                    45:40:6d:f9:61:5a:8d:4e:0d:a9:87:a0:44:87:b7:
                    d9:ce:07:a9:ed:d4:f1:94:e0:50:5e:81:43:fe:79:
                    68:6d:1b:03:89:f8:ce:10:2c:6f:46:b1:14:9e:ef:
                    fd:5b:32:12:72:25:94:19:8b:78:7d:fd:4e:fb:6d:
                    9a:a0:37:07:3b:48:7c:a4:35:d0:25:f0:55:1b:c8:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:33:2B:29:6B:13:00:5D:22:AE:05:6C:6C:45:32:6D:71:A9:2B:A3
            X509v3 Authority Key Identifier:
                keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:32:8e:ce:9a:a8:89:08:ce:20:7f:f3:67:fd:c1:b3:fb:af:
         cb:42:b1:f5:1e:de:07:ae:bf:7b:ca:93:8b:57:5a:22:65:4a:
         e8:60:66:cd:99:96:f2:a5:e9:30:db:b3:f6:04:70:93:fc:6c:
         cd:4f:00:90:12:1a:e4:2a:de:b8:56:96:8d:15:03:15:6b:35:
         52:d7:65:4a:0d:c0:ee:1a:59:56:14:1f:6f:f5:a5:7e:d2:02:
         07:6d:be:ee:3c:4b:35:e6:63:2f:ff:fa:fb:a3:94:53:43:71:
         ad:7e:28:24:18:c3:c9:62:9a:0b:6e:66:ff:cd:aa:5e:ba:1d:
         52:e0:c2:2f:3a:f5:bd:eb:f5:f9:a6:91:2c:08:8a:35:4e:87:
         51:3f:8b:33:58:a8:45:77:9e:c8:f7:00:93:1b:2c:f5:91:cb:
         31:a9:d3:69:26:7b:01:6a:49:15:5a:8b:bd:cb:f4:c6:15:3e:
         ee:0a:65:63:5a:19:76:ff:20:3a:23:3b:91:60:69:39:1f:c6:
         47:f0:d5:f9:33:e2:aa:db:1f:da:aa:20:70:d2:60:35:ec:ef:
         07:c1:b3:f3:0d:cd:16:66:4c:55:05:42:b6:17:da:ec:28:5b:
         32:76:79:64:b2:ab:e3:82:60:03:23:48:9d:1f:eb:90:d2:92:
         c1:47:fc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:10 2026 by rpki-client