Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File:                     iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier:          zo8nMKP4/fNGxgbB5FI6t/JPHMmz7lSIWML4Xa0cakE=
Subject key identifier:   2E:44:AF:80:72:5A:DD:87:A9:8C:D3:74:62:75:41:D2:F9:0C:3C:18
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer:       /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial:       019EC1B76094D59F8F6E59C8D9807A269927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number:          01A7
Signing time:             Sat 13 Jun 2026 16:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:20 +0000
Files and hashes:         1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
                          2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: I0zFUKmBBnXCGa91qUU7mA424toNj9QPjnAqW4hALG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:60:94:d5:9f:8f:6e:59:c8:d9:80:7a:26:99:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
        Validity
            Not Before: Jun 13 16:01:20 2026 GMT
            Not After : Jun 14 16:01:20 2026 GMT
        Subject: CN=2e44af80725add87a98cd374627541d2f90c3c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:1c:4b:08:40:55:c4:5c:eb:4f:8a:78:bf:
                    64:13:7e:a5:90:05:7c:c7:b2:26:db:a3:3d:91:04:
                    ef:ae:fe:ad:44:a7:42:b5:ee:f7:be:a9:cc:27:df:
                    e7:d9:87:09:b4:81:79:8c:25:6b:80:17:05:8a:a9:
                    0c:1e:3c:92:e2:07:56:b8:f4:7f:62:01:aa:9f:97:
                    90:2d:a7:6c:f0:b6:1c:11:51:0b:48:6f:30:a9:f4:
                    09:2e:92:cb:a0:ab:20:35:11:61:63:33:02:b4:4f:
                    af:83:ca:fc:b5:19:36:2c:b3:c0:6c:72:ce:d9:e1:
                    12:73:52:ba:7f:e3:67:f8:46:87:df:f3:4a:8a:b8:
                    95:f8:1c:74:9f:3c:ee:f6:ab:c2:12:ac:20:78:c6:
                    be:70:0b:a8:04:b7:5a:33:cc:9a:7c:dd:98:16:b9:
                    eb:ef:9f:74:3f:b5:20:64:d9:cd:75:f5:1a:bd:c1:
                    d7:c9:13:61:de:3e:49:0e:28:11:53:c5:ef:24:83:
                    26:36:ea:4e:19:55:b7:75:68:04:52:c8:49:7c:ab:
                    67:95:da:e3:b1:8f:7d:9b:7b:2f:ed:ff:42:1b:bd:
                    a9:9e:2b:42:da:90:23:93:20:af:c9:81:10:8b:3b:
                    a2:75:ce:74:06:3b:d3:62:9a:04:1d:bb:83:98:2e:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:44:AF:80:72:5A:DD:87:A9:8C:D3:74:62:75:41:D2:F9:0C:3C:18
            X509v3 Authority Key Identifier:
                keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:2e:c2:f4:57:da:c6:74:ed:12:3b:ff:0e:1d:66:fa:51:87:
         09:3e:93:59:68:7c:06:45:fe:15:e5:42:7a:9d:ca:b1:53:44:
         ee:fc:7e:6d:d0:f3:d8:4a:c3:1d:c3:7e:48:8d:8e:8b:88:88:
         5f:fa:9c:ab:b5:91:e1:2d:39:b7:ef:e7:93:15:dc:9d:4b:a8:
         6a:f0:f5:47:7b:81:24:c6:5d:72:3a:83:5e:63:e7:51:d2:d9:
         3c:2c:2c:6e:ae:6a:24:55:58:08:6f:61:f1:63:5e:43:05:6e:
         21:9f:0e:c6:86:94:00:41:b6:45:96:3e:73:35:f0:2e:7a:fa:
         f6:c0:1b:32:bc:29:58:d6:7f:a1:cb:21:c5:1b:09:fc:84:b2:
         96:87:14:5e:c1:a2:ef:70:a8:f0:79:47:7a:79:4a:0b:ba:64:
         2c:08:30:16:48:04:e9:0a:ef:39:a1:6d:f2:da:87:9d:22:a9:
         4d:e6:47:15:23:b8:e0:d7:2b:42:e4:9e:b9:fa:94:d5:02:64:
         83:06:8e:ee:76:a9:3f:ba:5e:1a:36:5e:7a:f9:c9:0f:f2:75:
         41:78:98:b3:1c:55:b1:bd:b7:42:f3:5f:9c:31:dd:92:a1:be:
         e5:7d:dc:85:d0:7e:3b:ff:02:a5:dd:b9:7f:d1:10:11:cb:4a:
         2e:62:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:16:32 2026 by rpki-client