Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File:                     orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier:          LlVn4CR67CkWXjwyHKcetXvfmwLLeorGU7S8iA6HQHo=
Subject key identifier:   58:1D:D7:DA:26:6A:0B:B4:60:DA:45:4B:05:4E:2B:EC:75:E7:47:56
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer:       /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial:       019EC2C98F325D9C087C7E49D60D050C4C3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number:          0677
Signing time:             Sat 13 Jun 2026 21:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:49 +0000
Files and hashes:         1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
                          2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: Uh9r7qzu3EzNm3wKoKNPof7x8L9y3hLgaLPvdeDa6Zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:8f:32:5d:9c:08:7c:7e:49:d6:0d:05:0c:4c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
        Validity
            Not Before: Jun 13 21:00:49 2026 GMT
            Not After : Jun 14 21:00:49 2026 GMT
        Subject: CN=581dd7da266a0bb460da454b054e2bec75e74756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:2a:e7:e7:ce:71:8e:31:cc:0a:87:f3:50:
                    4e:06:ca:ac:c6:63:02:0e:12:7d:6f:96:ff:78:8f:
                    ce:df:45:b8:17:96:e2:23:b4:7b:e6:7a:4f:3b:b7:
                    57:1c:4d:40:de:e0:4e:8a:04:9d:5e:d6:00:d2:8c:
                    13:f7:6b:7b:5f:e0:57:0d:60:3d:13:84:6d:1c:83:
                    36:2a:38:9d:26:c7:04:5e:98:09:0a:90:f3:1e:2d:
                    70:33:0e:a0:2d:bd:c3:90:84:9e:90:c7:38:40:76:
                    df:1c:87:39:8a:98:1b:95:9b:2f:a3:83:24:f3:3b:
                    5e:12:90:9f:e3:ea:94:a3:5d:4c:61:0e:73:67:eb:
                    db:2f:c6:8b:a3:49:23:65:4d:bf:21:d2:d3:f6:fc:
                    ba:81:01:e8:8c:41:a7:cd:86:6b:c3:28:4e:46:49:
                    0b:39:00:c8:06:26:ce:26:0e:4e:5b:09:e5:79:b5:
                    47:79:6a:4b:bc:c8:27:1f:c2:d4:9a:2c:ed:0c:05:
                    0b:c1:4e:9f:09:c4:5c:a1:f0:bb:4b:25:47:ee:77:
                    41:00:35:dd:ed:05:5a:44:bd:08:f5:fa:c1:32:e3:
                    6a:07:6e:ca:88:33:43:5d:73:37:3d:c2:84:74:14:
                    6d:10:33:13:97:b9:b3:dc:60:e5:ea:5a:96:99:9f:
                    4a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1D:D7:DA:26:6A:0B:B4:60:DA:45:4B:05:4E:2B:EC:75:E7:47:56
            X509v3 Authority Key Identifier:
                keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:de:a7:bd:45:5a:28:16:db:04:4c:f3:2f:e9:35:fc:b7:d9:
         0b:0c:84:57:d2:88:17:8a:c7:de:ab:e7:28:99:e8:e3:d8:32:
         2b:5b:67:c9:d2:87:23:2a:b0:e4:ce:a9:6b:1e:09:15:a1:cc:
         cb:d3:41:59:0f:49:ed:8e:bd:3d:de:9c:93:d5:cc:60:2e:9a:
         d9:90:f2:58:90:48:66:94:08:45:5d:7e:50:70:cf:68:e2:92:
         be:a1:94:f5:55:d4:30:ec:09:e4:8f:48:8d:81:85:5b:38:9d:
         5b:fa:91:a5:e7:3e:c3:78:05:60:52:d0:76:34:89:b4:6f:0a:
         79:f5:59:be:d6:5c:be:40:19:c7:66:c6:d8:a4:89:8e:ad:01:
         1e:44:d4:43:a3:11:a7:17:6e:11:89:15:d1:20:14:80:9b:58:
         48:5d:90:de:81:0e:89:cf:87:37:a8:be:42:c5:d7:41:94:8f:
         55:54:83:a7:93:2a:02:e4:74:9e:07:a5:5d:3e:3c:bf:d6:39:
         a7:02:b3:ad:48:ff:24:c5:36:54:bd:22:31:1f:ed:64:51:05:
         65:82:62:f2:89:f2:fa:17:14:4d:b4:2e:8a:5f:1e:27:c5:9b:
         5f:34:07:05:58:dc:16:bc:56:f8:d4:b5:85:78:b5:39:d0:50:
         ee:9f:1b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:44 2026 by rpki-client