Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
File:                     I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json)
Hash identifier:          TKuQdaI8Oh1gQmTetl8/6A5akUvyF57foFMWabh26NI=
Subject key identifier:   31:CE:DB:CB:42:0F:C2:8F:A6:DB:08:CE:03:3D:54:84:B6:13:5F:10
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Certificate issuer:       /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial:       019EBFC7F6D579B8851E35456DBB6A916AFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
Manifest number:          171A
Signing time:             Sat 13 Jun 2026 07:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:13 +0000
Files and hashes:         1: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=)
                          2: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=)
                          3: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=)
                          4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: 0ipywXDeBi4TNtpuYIeJ7LfnZ2l830/h9EF19rjdaik=)
                          5: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=)
                          6: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=)
                          7: ew5GxWmNdi8APxJ7DnyuV397vVY.roa (hash: scbuflEbcOaCfZ8YsAmmUBvMpXLhScUEwCDFhgE24W8=)
                          8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=)
                          9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=)
                          10: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=)
                          11: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=)
                          12: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=)
                          13: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c7:f6:d5:79:b8:85:1e:35:45:6d:bb:6a:91:6a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
        Validity
            Not Before: Jun 13 07:00:13 2026 GMT
            Not After : Jun 14 07:00:13 2026 GMT
        Subject: CN=31cedbcb420fc28fa6db08ce033d5484b6135f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d1:6d:bd:bb:2f:e2:f8:91:98:8a:ba:f3:e0:
                    23:ab:54:59:48:bd:e5:9b:42:7c:1b:6a:c4:cb:27:
                    88:0a:0b:a9:e3:dc:84:6b:5f:76:c7:5d:4c:d5:48:
                    a3:5e:0e:ca:b2:49:cd:8a:60:68:6c:6b:36:cb:78:
                    c6:72:ef:53:66:45:26:89:25:b7:8f:b9:07:1b:1a:
                    9b:bb:a7:6c:a3:9d:09:8a:09:26:37:40:87:18:70:
                    64:f4:85:39:6e:74:c1:7c:c1:ea:fe:67:f5:92:0d:
                    3d:b8:0d:aa:88:31:2d:60:8f:70:e1:6a:8e:41:d5:
                    51:bc:3d:20:b1:ad:22:1f:5c:10:c9:a0:58:26:00:
                    e7:31:3f:3b:0e:4b:27:ce:4f:bd:18:b2:45:e9:45:
                    e6:64:62:b4:be:d5:32:a4:bf:b6:db:fd:98:77:d0:
                    09:f8:96:f5:57:89:8f:17:8b:9a:68:de:95:60:21:
                    0d:26:b6:df:b9:35:6d:4f:db:08:9e:08:72:4f:ab:
                    35:10:f1:e8:37:27:28:64:90:d9:68:51:ef:ed:8e:
                    3d:a6:98:b8:aa:6a:f3:01:81:4f:10:aa:84:16:49:
                    4e:6a:e9:e6:57:2c:c8:5c:9b:0d:3b:7d:8e:b6:ee:
                    d0:54:d1:f0:a5:5e:10:0f:66:28:b9:18:07:cc:ba:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CE:DB:CB:42:0F:C2:8F:A6:DB:08:CE:03:3D:54:84:B6:13:5F:10
            X509v3 Authority Key Identifier:
                keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:87:05:17:9a:ae:c7:3a:d7:93:e9:15:6e:2f:4f:6d:da:a5:
         bd:e1:f0:0f:64:bd:ce:04:e1:77:9d:ab:e9:54:49:a0:d8:75:
         41:12:96:51:9b:f6:df:60:89:e6:05:6f:a4:68:8c:1b:dc:8d:
         28:a7:72:c9:08:e2:25:11:72:a8:34:bc:d8:5b:7d:f8:9a:16:
         5d:42:16:c4:f8:65:fc:53:c0:65:65:14:e2:d6:e9:b3:55:8a:
         39:90:4c:1f:b2:08:ec:b3:82:ea:f9:35:35:50:55:27:19:7f:
         0f:7e:8e:20:00:63:65:bf:4f:0d:1d:92:54:3f:8d:dc:df:fa:
         95:c6:77:30:60:53:26:14:16:ec:c7:b4:20:9e:8a:f7:05:5b:
         62:2a:5d:da:81:84:ad:01:97:17:0a:03:eb:7d:98:24:0f:2e:
         c2:90:95:de:23:fe:dc:28:33:ee:a7:57:ef:ad:15:38:3b:d0:
         1a:f1:ea:0e:12:a6:b7:43:76:3c:67:51:cb:aa:51:ae:3f:08:
         28:84:0d:ed:86:92:50:8e:5c:bd:39:86:fb:61:30:47:de:70:
         5c:ad:63:34:50:ee:db:62:f8:ae:2a:3a:c3:bd:87:7b:66:84:
         d4:c7:74:2d:6a:49:97:d5:0b:95:17:52:68:76:3f:ba:35:7e:
         0b:6e:85:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:32 2026 by rpki-client