Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File:                     ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier:          rmURvu8woOF8akKdDHuh8glZ/p6BI26/omYBP6Jw1LY=
Subject key identifier:   16:08:B6:33:CC:0B:5D:78:73:6A:78:26:38:C9:DA:B4:89:D9:B3:5D
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer:       /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial:       019ED42B47C6EA24A2BDAF2ACCBE6CC0FDDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number:          1965
Signing time:             Wed 17 Jun 2026 06:01:06 +0000
Manifest this update:     Wed 17 Jun 2026 06:01:06 +0000
Manifest next update:     Thu 18 Jun 2026 06:01:06 +0000
Files and hashes:         1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: xIPuZWGsnfTSFMNOY5Ag+GrmaE3g0KKzvjt6EiywjeY=)
                          2: l_5sj0n83h1j-KNddGTmHYrghYs.roa (hash: lWD+ja9YbtyG1MA96ufKgRHVHut4712gK2auViaR/PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:47:c6:ea:24:a2:bd:af:2a:cc:be:6c:c0:fd:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
        Validity
            Not Before: Jun 17 06:01:06 2026 GMT
            Not After : Jun 18 06:01:06 2026 GMT
        Subject: CN=1608b633cc0b5d78736a782638c9dab489d9b35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:45:29:5d:87:ca:56:74:ad:14:af:32:9f:
                    a0:78:74:c9:6a:8c:ed:2b:62:a8:e2:f5:96:e0:73:
                    84:af:30:cf:ee:3e:9a:34:12:27:b7:9a:13:52:e2:
                    6f:d8:7c:9a:50:38:6b:3f:d6:c0:6e:d3:56:26:e0:
                    71:c0:03:94:f7:7b:ff:3b:32:fb:25:25:52:60:40:
                    a9:62:cb:05:c7:79:7a:d3:bb:88:e9:de:7b:a4:ce:
                    d6:04:70:d7:1a:80:32:4b:4e:75:4b:a0:2c:17:b3:
                    ad:ee:09:29:ce:bf:22:cd:b7:0f:cd:79:53:35:90:
                    a1:b4:d9:f3:d8:08:13:46:30:bf:2f:4c:d9:e3:07:
                    85:5e:11:3e:45:0f:d3:c2:e9:bf:f3:f0:c6:41:7f:
                    a0:b1:f9:58:8f:f3:85:00:ea:9c:e3:e5:dc:85:a7:
                    d5:85:5a:6d:a3:25:ec:ed:67:1d:c5:2c:5d:cf:15:
                    86:65:d2:f7:25:88:12:62:78:2c:15:a2:c2:2b:d2:
                    af:c9:0b:54:8e:7b:41:ba:5f:6b:96:5c:02:19:90:
                    65:64:2c:08:2d:06:8b:78:de:9b:3c:3e:df:74:3f:
                    d0:ca:8b:61:24:3e:17:c4:19:46:7e:91:b3:97:82:
                    3f:de:fb:d9:74:91:fb:a3:67:e0:8a:d7:4d:db:ea:
                    eb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:08:B6:33:CC:0B:5D:78:73:6A:78:26:38:C9:DA:B4:89:D9:B3:5D
            X509v3 Authority Key Identifier:
                keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:fc:c8:9c:be:72:92:3c:5a:89:45:f4:f1:ff:d6:c9:34:
         c3:72:92:20:86:13:7f:0b:1d:c3:81:55:db:1c:e6:48:40:bf:
         9c:cd:2a:cf:f8:85:ff:ba:f4:93:d5:18:af:32:e5:83:7c:3f:
         f5:72:09:7f:42:01:fc:76:10:69:52:1d:39:de:9f:ae:48:11:
         17:d3:d7:9c:29:3f:6e:6b:46:17:67:b8:d5:05:25:0a:6f:23:
         0f:8d:3a:6d:7e:63:e7:8c:80:81:8b:ae:1e:ed:98:9f:ec:0b:
         55:92:b2:57:49:8b:17:dc:4d:3c:90:e4:66:c2:60:9a:ee:1f:
         d0:98:a2:a8:02:f9:bc:b6:1d:ae:8f:58:cd:02:34:8a:16:b4:
         a6:e5:71:8c:da:2d:e6:86:50:87:72:11:64:1f:b8:9a:c7:b2:
         c6:67:ab:95:d0:15:e0:4b:0c:ab:f7:63:34:66:64:b6:4f:00:
         30:d4:92:2b:e0:9f:91:36:64:56:d3:fc:79:d4:c6:97:ad:a7:
         88:2b:2d:cd:26:ca:0d:63:cc:43:76:ce:9a:c1:56:fb:5a:bf:
         f8:d3:72:79:91:78:65:7b:53:f7:5a:85:4c:c8:bf:a9:79:02:
         4b:1b:52:80:2f:86:e6:ff:a1:44:f6:a8:bc:95:d6:01:4b:d8:
         51:54:07:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:00 2026 by rpki-client