Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File:                     xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier:          euVNj06rXpR5pJqJMsIJa9Yd7HSTt8h3D6UY7I09rS0=
Subject key identifier:   1B:72:06:65:53:14:88:BC:F3:C2:7F:C5:64:B0:82:70:31:D4:5B:5F
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer:       /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial:       019EC44A12F42BB80FE73B38C38AD8A5F16E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number:          0677
Signing time:             Sun 14 Jun 2026 04:00:49 +0000
Manifest this update:     Sun 14 Jun 2026 04:00:49 +0000
Manifest next update:     Mon 15 Jun 2026 04:00:49 +0000
Files and hashes:         1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
                          2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: 21033JFos4Q0o5ZJu87vbcDzq+fPO2lbseuW6p+06fU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:4a:12:f4:2b:b8:0f:e7:3b:38:c3:8a:d8:a5:f1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
        Validity
            Not Before: Jun 14 04:00:49 2026 GMT
            Not After : Jun 15 04:00:49 2026 GMT
        Subject: CN=1b720665531488bcf3c27fc564b0827031d45b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:5c:d9:ca:48:1b:7a:db:e9:84:52:eb:ec:
                    31:f0:c8:11:47:41:c5:c7:fb:49:22:e3:08:6f:83:
                    47:ff:21:56:92:ff:bc:8b:b3:5c:9f:a5:21:35:ca:
                    e3:ed:94:b2:7e:9f:0b:8a:d4:2a:51:6d:6d:ef:2d:
                    74:3a:5b:a6:c2:4d:32:2c:98:59:a3:cc:93:f9:a3:
                    74:f7:6a:06:77:19:c1:e4:1a:13:09:a8:86:de:7f:
                    3c:17:e8:60:4f:0d:a4:dd:9f:3f:87:6a:76:73:fe:
                    8a:6e:15:9f:35:6e:44:57:4f:21:de:82:bd:07:96:
                    69:35:b0:89:1c:84:49:1b:9c:d5:76:63:32:47:b2:
                    c0:72:02:f3:7e:0d:a6:e9:46:50:dd:6b:23:5b:c8:
                    0d:c2:43:83:00:d4:77:71:c3:ec:b9:34:bf:ba:51:
                    5a:70:53:8f:ad:2f:62:db:29:48:c7:a6:10:fd:6c:
                    b8:d3:e2:13:6a:11:01:d5:b8:b6:24:12:1a:6e:a6:
                    15:5c:a3:cd:97:b0:1e:27:a8:50:d8:ed:11:dc:b6:
                    c9:81:85:67:f8:81:2e:ed:95:3e:b8:ec:01:00:66:
                    5d:df:91:28:44:9c:17:70:ac:2f:6e:6f:6e:fa:9d:
                    85:a6:32:c0:d7:01:ba:70:87:63:e4:f4:8b:4e:bf:
                    b0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:72:06:65:53:14:88:BC:F3:C2:7F:C5:64:B0:82:70:31:D4:5B:5F
            X509v3 Authority Key Identifier:
                keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:50:df:d2:7c:bd:fb:8b:73:58:0a:bd:b9:a4:8c:62:a4:ae:
         c1:48:5b:9c:4b:cb:9a:c0:e8:9b:26:5f:05:a3:39:61:21:13:
         c0:65:ff:4a:1c:64:f5:db:88:57:ca:2e:6f:0e:3f:11:0a:bc:
         9a:94:d3:cd:ab:76:c0:e2:17:85:35:13:6b:90:1a:2e:1c:17:
         b3:ea:ea:61:82:25:e4:99:b1:66:19:df:be:43:cd:bc:41:c0:
         99:da:69:49:e9:10:35:49:3a:f0:72:d4:7f:69:41:9f:fe:90:
         aa:7a:7c:c3:8b:d7:11:23:f1:aa:15:e8:7e:5a:fb:1e:06:ef:
         9e:ff:de:52:21:fc:7f:9a:82:6b:8f:4e:90:93:99:9e:d0:27:
         c4:df:22:8e:d4:92:6e:df:6a:c8:2e:da:2d:62:00:8e:73:07:
         b6:46:0e:da:ef:d9:62:91:74:ab:f4:3d:c2:31:01:a3:c4:00:
         41:b8:24:b2:07:77:06:73:78:67:96:74:7f:57:06:1f:f0:89:
         d9:f6:18:8a:d7:0c:e6:35:22:2f:57:f1:37:e6:c8:0d:1b:19:
         fc:31:e3:aa:db:d8:5a:86:20:a7:9f:1c:75:02:9c:dc:ca:b9:
         c2:3b:ca:38:28:06:6f:96:36:8d:77:66:dd:ea:79:4b:0d:7f:
         6e:00:4e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:21:55 2026 by rpki-client