Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File:                     ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier:          ILpfIXpA/8rAmckrlSCExVxv8BKOrljnSakcZs/p8os=
Subject key identifier:   9B:02:92:AB:10:C0:A3:92:7B:1E:06:21:E4:CC:D1:F8:19:65:CF:D6
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer:       /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial:       019EBFC8515477E91A393F3577495EB0D765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number:          065C
Signing time:             Sat 13 Jun 2026 07:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:36 +0000
Files and hashes:         1: LUonv2RCWvu1zL14QrHsu9P2rS4.roa (hash: sYEwbsM2ctHv6cNHrCxgkHRsQW+if3GIsRAYyp3V97Y=)
                          2: S8keSl8NDHVc6KPmbXVZh56DkMo.roa (hash: gehjFU9x+RbJrI179PzTfPP1zreMHK8V8b0riuey5sI=)
                          3: dXBxqg2WRY0bNZSrjzenz8d7Y10.roa (hash: bonkDkqWKImRRfgE/vT3fEawIKDM/g7JC3uJ3coEEKE=)
                          4: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: 2ARJ3JvEjVhzdDQ1RkuKO+hMnQvEcHtu8XATdVYq6C8=)
                          5: rNttweQh2PLctodsZ8mGF8Xdou4.roa (hash: RnrUAyBZsGmfOkyGXTt4MMRoQ1xT0nGSE3thOB+UT3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:51:54:77:e9:1a:39:3f:35:77:49:5e:b0:d7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
        Validity
            Not Before: Jun 13 07:00:36 2026 GMT
            Not After : Jun 14 07:00:36 2026 GMT
        Subject: CN=9b0292ab10c0a3927b1e0621e4ccd1f81965cfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:0b:98:6a:39:ec:e2:bb:fb:db:f4:b3:f5:
                    5e:54:98:14:20:4b:df:8b:f5:07:fa:69:44:e3:03:
                    7c:fd:4d:4c:03:ec:35:dd:34:ea:fa:1b:dc:19:09:
                    b4:81:91:ef:fd:8a:f5:36:0c:d9:32:e5:b7:12:ac:
                    57:c8:b3:e0:df:35:62:5e:72:b8:9f:90:53:2e:bb:
                    2b:97:f8:d7:2d:cf:b4:ce:7b:21:52:a7:1e:2f:92:
                    9a:7f:5e:fb:77:1c:1f:91:0a:a2:87:c3:c5:25:ff:
                    03:3a:c3:73:4b:cf:a1:2c:c3:8d:fb:94:c1:30:9f:
                    58:bd:7e:00:2e:ce:d6:d9:60:09:a8:d9:5b:8b:ee:
                    a0:3d:b1:3f:9d:69:e2:bf:28:5b:d4:38:37:61:38:
                    23:3e:e7:d6:18:1e:9e:b5:ff:3a:99:69:99:f0:8a:
                    14:04:55:d5:33:11:52:1a:b4:50:e5:a4:fd:cd:17:
                    16:47:4e:37:e9:62:c6:d7:87:67:46:e0:9a:db:25:
                    f7:47:3a:0c:27:26:df:1f:b1:e5:35:4b:dd:fa:88:
                    77:57:a6:b5:60:3d:47:25:73:fd:c0:e7:90:eb:ad:
                    4f:56:1e:57:50:03:a8:6a:65:fc:74:c1:74:45:84:
                    08:59:5b:ff:9b:64:2a:4d:37:a8:4e:9a:a7:63:3d:
                    e1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:02:92:AB:10:C0:A3:92:7B:1E:06:21:E4:CC:D1:F8:19:65:CF:D6
            X509v3 Authority Key Identifier:
                keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:fb:bd:98:40:04:39:72:c6:85:ce:cb:57:d4:bc:5e:6f:
         ff:4e:6f:3d:42:20:b3:0a:e7:2b:3e:11:8b:25:b3:4a:6f:a6:
         94:99:76:23:63:56:16:34:14:ff:f1:f3:e7:4a:c3:00:e0:10:
         86:08:4f:1a:45:cb:dd:56:a0:ef:0d:21:5a:7a:2e:31:46:d4:
         fc:4d:bd:c9:83:c0:d6:5c:e8:4d:a3:66:2a:03:49:e2:af:73:
         a9:9b:fd:c4:ed:a2:46:76:55:46:2f:4a:30:ad:ee:72:fe:d3:
         73:5a:19:c3:02:a2:d9:68:51:b6:d2:05:17:f4:11:d8:15:12:
         39:46:80:d6:8b:b7:2c:d1:b9:66:be:c9:96:91:c8:f5:99:40:
         22:2f:47:c3:69:17:a4:9c:4b:3d:1a:96:f5:9f:c4:c7:49:85:
         ed:b8:75:09:96:90:c3:29:6d:d7:c6:35:02:97:7f:e1:cf:2f:
         68:6b:dd:13:01:2f:c7:f1:47:66:04:dd:22:e4:da:68:fa:2b:
         66:c3:fb:00:01:91:ff:8f:24:0e:6d:28:a5:25:fa:db:75:26:
         1d:a6:aa:4d:db:d0:88:ba:8a:0f:14:dc:8a:98:63:df:fe:77:
         25:2b:81:8a:1f:b0:7a:32:f0:ae:6d:e3:a4:bf:97:6b:ae:53:
         09:17:14:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:01:46 2026 by rpki-client