Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File:                     dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier:          3DPYktTE59gv/7DB5461Fi3yfoVmoc2yg3Ozy4G1q5w=
Subject key identifier:   78:DD:39:B7:C4:C9:F0:C6:53:AC:46:66:4C:2C:9D:AA:18:E0:D3:4A
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer:       /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial:       019EBD6CA5545041006DE814E51E5C71CE36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number:          0D82
Signing time:             Fri 12 Jun 2026 20:01:14 +0000
Manifest this update:     Fri 12 Jun 2026 20:01:14 +0000
Manifest next update:     Sat 13 Jun 2026 20:01:14 +0000
Files and hashes:         1: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (hash: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc=)
                          2: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: 7DNUWkM+whdUnk34bvRjmpmeNlZ6Sk53xKGRNFRwIMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6c:a5:54:50:41:00:6d:e8:14:e5:1e:5c:71:ce:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
        Validity
            Not Before: Jun 12 20:01:14 2026 GMT
            Not After : Jun 13 20:01:14 2026 GMT
        Subject: CN=78dd39b7c4c9f0c653ac46664c2c9daa18e0d34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cf:25:81:fd:2b:c4:a3:f3:bb:75:e6:01:00:
                    66:09:db:bf:7d:5b:2b:28:78:94:79:12:80:62:ed:
                    eb:1d:76:a9:b0:73:ec:c2:7d:0b:07:f7:ec:72:b8:
                    5b:56:5b:b1:d3:68:56:22:69:40:a2:05:c0:17:6c:
                    9c:63:7c:a1:4f:ab:e6:48:3f:a7:07:86:e6:5a:9d:
                    6a:fd:25:ba:61:e1:68:ff:39:75:c7:88:08:7c:71:
                    af:1f:e9:a0:80:af:b4:97:d3:0d:c2:40:36:92:01:
                    6b:be:f0:29:32:93:3c:e1:2a:66:7a:48:ef:c0:aa:
                    59:e0:b0:b9:eb:d5:0d:a3:c9:a8:cb:01:05:57:72:
                    d6:0a:3d:1d:20:ee:fd:4c:cd:11:8d:d3:8c:0b:e0:
                    d6:ae:2c:e8:07:4b:05:23:d6:d9:0d:a1:9f:a2:59:
                    ea:b3:17:d7:7e:de:a7:d1:22:98:d9:f8:2d:2f:c8:
                    c0:63:9a:9e:21:26:f4:f0:05:c5:5d:b7:47:17:72:
                    d9:e9:f7:ce:a1:d9:48:2e:17:e3:13:ab:5a:6c:1e:
                    1e:2a:1a:a8:c1:69:74:ac:25:96:f0:b6:5d:ee:3d:
                    72:a5:6b:ef:7e:fe:b1:c9:53:b8:d9:26:ac:e5:e6:
                    0a:f1:47:b9:f1:30:5b:26:e9:a3:03:bf:72:99:e4:
                    cf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DD:39:B7:C4:C9:F0:C6:53:AC:46:66:4C:2C:9D:AA:18:E0:D3:4A
            X509v3 Authority Key Identifier:
                keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:99:53:51:30:18:ec:15:a9:ac:13:6c:0a:a3:37:60:82:9e:
         79:0a:af:79:87:12:57:ad:26:97:0d:49:6b:20:d3:c6:af:54:
         8a:23:99:fe:85:69:6a:c6:df:a1:fd:27:67:f8:f7:bf:9f:f1:
         c7:ec:70:49:79:f4:ef:85:86:e1:df:78:69:d8:3b:9a:8c:80:
         be:a4:e1:8e:21:d2:34:52:b3:1e:5e:43:32:29:9b:3c:d5:e5:
         9d:83:ac:1c:ee:ae:14:73:88:de:d0:7e:9a:1f:50:b6:cc:4f:
         bd:cf:1a:d6:a3:37:5a:b9:20:cd:3d:ca:2f:66:69:02:8d:c9:
         52:08:54:60:b0:89:af:69:a7:a7:90:17:16:85:5e:e7:c3:66:
         a3:4b:4a:60:eb:34:d8:04:47:2f:02:d8:fc:5a:e0:36:dd:8b:
         11:a0:84:4a:d5:21:29:e4:8f:49:57:1b:69:71:b9:3c:9b:68:
         26:76:39:4d:54:4e:04:24:e4:bb:47:9f:01:bd:b4:e7:b9:2d:
         13:61:5a:b4:f8:e7:02:3b:50:b7:0c:36:0e:9b:cb:d2:19:16:
         77:e9:70:ba:5e:43:b3:aa:42:4c:ec:d6:46:1a:a6:d1:28:30:
         7c:27:f4:23:8b:65:02:22:45:3b:64:25:a1:2c:e2:02:2d:c4:
         fe:69:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:54:16 2026 by rpki-client