Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          5QL6OaywKEJwJCgphKz5hzz3ptes3x+OkGYaJrvUelA=
Subject key identifier:   D7:D1:27:AF:9D:C4:65:B4:4C:E6:55:AC:7A:00:0F:20:EE:A4:AB:05
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       019EC3A57A46AFEFE4463C2B95D16B090B30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          1266
Signing time:             Sun 14 Jun 2026 01:01:02 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:02 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:02 +0000
Files and hashes:         1: DgHkmROyC3MxqqPYkuTyDoxtyqw.roa (hash: q4huZNQpi2E4AXxex6IplXT0SZt2O1CYv71WiSI/rLI=)
                          2: Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa (hash: Jq4DCJzMOXzkiYCzhRhQfITbIQrgdmZME0+wIilmKI0=)
                          3: PWseQmzX6iLF_AKjxIoDYYEV-zs.roa (hash: 5qw7OHsXZ5/YdO0FCT2hsJ4vIKg9r9qwZPsnMuFb2j4=)
                          4: W4ezimhOK28HTElZ-mL_VlHTTYY.roa (hash: aW+HAsRTpiBjWIXXUsRRtCgHyvy44DkCN4CGgiTo7pw=)
                          5: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: LKLKi6Odey880uKD+e+KqSg0EdMu9na6mxdF58xosS0=)
                          6: dvl1qc6F1GgOMamGgtlUjjsOAmg.roa (hash: HqSbVOynVSnxKlocjrN8BkkCsHJA79UECwHRf5zem3E=)
                          7: lPV_USFOSo5QlpwzyG9GZkglfYI.roa (hash: F2MPkEsQMavl9IFac2UMwUB3IRMDo28oAPxrO4XQVFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:7a:46:af:ef:e4:46:3c:2b:95:d1:6b:09:0b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: Jun 14 01:01:02 2026 GMT
            Not After : Jun 15 01:01:02 2026 GMT
        Subject: CN=d7d127af9dc465b44ce655ac7a000f20eea4ab05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:6d:7c:4c:d7:8c:4d:2f:5d:d5:42:68:cf:
                    26:69:b8:0c:cb:1d:0b:90:4d:9f:47:0a:79:3e:31:
                    ac:5c:64:55:f0:55:69:ba:0c:bb:03:bd:dd:61:4a:
                    c4:cc:7c:49:e5:6a:5a:58:af:37:96:da:7d:3b:43:
                    2a:a2:3e:e7:66:d6:0c:36:5b:f7:c6:ac:14:76:52:
                    fe:c9:93:89:80:fd:58:ae:aa:4b:45:99:4c:5b:29:
                    27:ea:bd:f6:e2:9b:48:48:90:be:a2:86:92:34:9f:
                    45:db:ff:10:a7:4f:3f:45:56:45:a2:ed:16:a8:3b:
                    2c:29:e6:e9:0b:86:d5:35:c3:a5:39:9d:b9:79:a5:
                    5f:03:bf:ad:a3:93:ad:6a:06:b0:f0:43:b2:d7:37:
                    d2:84:aa:03:68:99:28:4b:a7:6d:84:d8:fc:b4:2a:
                    7e:e9:1f:65:67:da:5e:2f:dc:ad:d5:ac:3e:7d:a8:
                    d5:23:fa:7a:81:3a:b0:33:08:44:98:36:dc:5c:a7:
                    e7:d1:d3:2f:4d:c3:15:0a:12:83:da:9c:b4:d4:03:
                    ec:16:8f:80:58:3b:70:a8:55:6d:e5:00:3d:f7:aa:
                    56:8c:17:d5:8f:ab:0d:d0:21:9f:20:3a:ed:9e:8a:
                    91:f2:55:27:41:d5:49:58:4d:1a:a8:01:c8:77:2e:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D1:27:AF:9D:C4:65:B4:4C:E6:55:AC:7A:00:0F:20:EE:A4:AB:05
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b8:ff:5e:d1:74:81:aa:79:65:21:ab:a5:b2:2b:5e:0e:ca:
         3c:89:a9:ec:7c:82:cc:ac:96:52:c2:a3:1e:65:50:c9:a7:30:
         5d:b8:36:02:e3:99:07:b8:6c:8d:3f:df:76:b5:f1:77:b6:7c:
         af:cd:37:fa:e7:36:74:ba:b8:a1:49:3a:40:a6:fc:1f:d4:59:
         0f:a2:f8:85:fa:f1:84:64:51:b3:46:59:3d:e1:d2:07:f8:3c:
         1a:06:3d:fe:b5:f6:63:23:de:d9:05:1b:6b:4f:3f:24:13:3d:
         5b:8f:be:5b:c4:b6:a9:44:60:65:2e:b1:6b:8c:f4:ea:11:dc:
         dd:45:b9:7b:e7:9d:bd:6f:0e:ef:29:ad:16:ba:74:36:d1:cf:
         d4:b7:23:ef:2d:36:45:ca:c4:63:4f:31:a9:28:d9:69:f3:43:
         80:4c:41:99:9f:5f:5f:99:5f:18:45:d6:5f:db:1d:13:d3:79:
         a7:37:c8:27:3f:75:6a:64:a5:a1:1c:48:ff:8e:3d:29:f9:55:
         04:1b:c9:75:fc:e2:70:29:71:b0:20:a7:ef:9f:36:ce:71:71:
         cd:b3:0d:06:1d:18:90:ca:b7:47:5e:a4:4b:b8:e8:85:27:c8:
         d8:7b:52:49:2e:93:b6:58:84:c4:48:c4:83:e1:ca:46:87:ba:
         fe:e4:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:19 2026 by rpki-client