Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File:                     8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier:          Q/scsQKWls/DEa/VxKeo05H+fzijaJAQvKE5kCy1hlI=
Subject key identifier:   5A:D7:93:49:1C:D6:EC:BD:98:EF:39:07:67:75:07:77:79:2B:D3:BC
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer:       /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial:       019EBEB5982288B40EB1DF0B312CF0DC23D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number:          0F23
Signing time:             Sat 13 Jun 2026 02:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:32 +0000
Files and hashes:         1: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: QOa0Rf/ztIvUvTwWHT3HJlPvbqL4eHlWS61MMZipZDI=)
                          2: gHzzrFjQIf1BnANrNt41xIyuTAI.roa (hash: gdosIj1Y84eNGwiRZ4XKtJBxF5aZNg2EDodOpabV+bc=)
                          3: qbcRyHpM1CjtLF8A8oEnsD79w1E.roa (hash: Z4p1smZj2qkNMUZ5G62ALv7SxS1dQGFfDFqEOgUC9rM=)
                          4: uV7OQJTuC4kYWor682k9f-C0_5I.roa (hash: q4UJtdgviUqdDZKlm/WdXXX7eWbJCWOwGJBJFpte8C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:98:22:88:b4:0e:b1:df:0b:31:2c:f0:dc:23:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
        Validity
            Not Before: Jun 13 02:00:32 2026 GMT
            Not After : Jun 14 02:00:32 2026 GMT
        Subject: CN=5ad793491cd6ecbd98ef390767750777792bd3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:1d:e2:3e:44:6f:33:45:bd:ac:c0:9b:53:
                    83:ab:3e:8f:7b:0e:3b:f0:08:bb:10:49:90:d3:94:
                    18:d8:8c:56:33:c1:b5:e2:68:96:d5:5e:7c:cb:16:
                    f8:65:47:c3:37:4b:e2:65:e3:6e:21:b7:54:f1:22:
                    41:92:9a:82:23:1f:2c:7d:ca:1b:4f:e7:9e:7c:09:
                    0a:71:60:4f:40:71:ab:0d:10:16:b7:a7:2d:0d:e8:
                    71:4a:b1:81:82:99:3a:fb:5c:47:ee:43:9b:87:89:
                    bb:f0:ad:0c:dc:52:32:56:7f:a5:64:92:03:fb:42:
                    10:52:1b:16:5a:ca:86:56:65:e3:c3:44:6a:6b:3a:
                    d2:2a:18:db:1a:11:e3:99:fd:32:7c:ec:35:25:04:
                    20:e5:c7:d4:18:0a:3a:a4:07:3e:9e:17:41:8f:b2:
                    2c:c4:02:75:d0:e2:7c:97:a5:ae:38:64:58:8c:78:
                    5c:23:cf:ed:e9:23:ef:66:32:3e:e4:1d:89:a9:78:
                    e8:6b:1e:b1:bd:96:4d:65:e3:39:20:02:68:6f:ba:
                    8a:4c:44:a1:7c:b5:76:e7:fc:02:06:a0:49:ab:65:
                    13:65:6c:00:32:94:e4:27:93:9c:d6:da:d3:e2:a7:
                    1f:1f:83:38:80:7d:b1:83:c6:95:5e:12:56:3d:d3:
                    3d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D7:93:49:1C:D6:EC:BD:98:EF:39:07:67:75:07:77:79:2B:D3:BC
            X509v3 Authority Key Identifier:
                keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:52:e6:01:4d:8d:f9:63:7e:c2:22:22:f7:29:f2:9b:a8:55:
         50:ba:2b:15:ae:df:d1:f2:22:7f:3f:fa:89:04:2e:57:f4:00:
         0b:e9:01:6c:9b:e6:97:02:94:c0:13:b0:42:49:72:6a:cf:cb:
         71:d0:0d:45:3a:00:1c:0b:45:f3:4e:ba:8a:20:2b:05:f7:81:
         cd:38:ae:47:69:33:12:c8:fa:24:19:ee:c6:fe:29:1e:a0:98:
         90:75:91:5b:ef:96:47:7f:ba:17:f5:93:54:fa:40:77:a2:e2:
         d7:06:a7:fb:08:8b:cf:4c:2a:4f:e6:ef:31:fd:82:86:b6:c7:
         9c:9e:d7:f0:59:c4:86:83:dd:c2:5d:6a:57:32:85:53:85:4c:
         0e:f5:ee:f0:9c:e8:26:8e:ad:f9:35:fa:a7:17:ca:3d:80:04:
         00:0b:3b:36:93:e8:79:f8:de:0f:21:cf:d6:2a:12:bd:23:5e:
         7e:e9:f2:6b:76:97:36:10:33:f6:3a:bf:af:ca:16:e3:ea:fa:
         cd:55:0e:25:1e:88:35:95:51:01:23:52:27:24:52:51:50:98:
         21:ec:2f:e3:09:5d:7a:fa:fa:e2:3a:03:d1:b5:ae:d3:e4:c6:
         69:08:02:a9:9a:bc:e4:88:8a:54:07:a7:ea:5a:0e:7c:d4:07:
         39:7f:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:24 2026 by rpki-client