Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File:                     7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier:          vTtCDfWBvkfdDkNQOaN2PtkknE5hlVXM5oMe7rwK7Vk=
Subject key identifier:   DF:7B:28:DA:7B:FF:B2:FB:BF:1A:66:A2:FA:63:5A:7C:8E:63:0F:E5
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer:       /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial:       019EC111A54702C6A21EEA263FF1E9518A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number:          0D69
Signing time:             Sat 13 Jun 2026 13:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:19 +0000
Files and hashes:         1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: pY/ES1eB2tnswR3Rbgxl3r6b+67Qg5eN8kx1fS0ykjQ=)
                          2: BLLh5nNCz1s5if2pHYByIfYWqoE.roa (hash: EPJ+RLaqu85xGvwiEKDRnHSjYD9ruTYxv3tR7VjbDJs=)
                          3: E7Yzs4RQ5PAWanrzJaRetL_vIW4.roa (hash: ZfDaAmo4Ze/Cj58O8IkcEHyg6puoaRdc7XWQV2TfV6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:a5:47:02:c6:a2:1e:ea:26:3f:f1:e9:51:8a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
        Validity
            Not Before: Jun 13 13:00:19 2026 GMT
            Not After : Jun 14 13:00:19 2026 GMT
        Subject: CN=df7b28da7bffb2fbbf1a66a2fa635a7c8e630fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:46:10:66:59:6f:d7:aa:3b:87:54:da:68:
                    56:99:92:cb:4f:c0:0b:3a:63:99:78:40:12:b9:01:
                    c2:6d:25:aa:9a:a2:0a:bd:6c:2d:35:66:9c:8e:62:
                    df:4a:2d:95:da:7b:ca:ed:f4:b5:26:07:9b:b9:79:
                    96:ca:c4:4e:f5:3e:61:17:49:ca:16:3b:41:31:27:
                    27:ed:6f:7b:dd:85:90:6b:81:31:8e:c0:00:14:c1:
                    6d:80:2d:ab:7f:da:80:d3:23:79:10:3b:aa:65:b6:
                    37:67:c6:ff:0e:bf:6a:b6:1f:ac:5b:86:ee:1d:95:
                    b1:9b:9e:53:1d:b5:6d:5a:b4:93:67:8f:40:de:31:
                    fd:02:46:b4:6a:d4:69:a3:8b:8f:da:94:1c:57:73:
                    6c:c9:67:23:1e:5d:2e:2e:8f:19:d1:dd:0c:1b:da:
                    6b:3b:89:8f:9d:9d:d0:96:a3:f5:dc:1d:0f:bd:9c:
                    5e:8e:c9:b0:3c:cd:56:b8:73:33:67:4b:ff:48:21:
                    8c:4a:a0:00:e8:2f:23:d3:26:ae:59:03:8e:71:41:
                    88:19:b2:c4:6c:b7:b7:d1:87:97:e5:e2:d4:5c:8a:
                    d1:37:0c:75:29:85:17:97:9a:af:7b:65:35:7a:c8:
                    59:94:c0:37:e1:2c:72:bd:e5:26:91:c8:76:cb:0f:
                    3c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7B:28:DA:7B:FF:B2:FB:BF:1A:66:A2:FA:63:5A:7C:8E:63:0F:E5
            X509v3 Authority Key Identifier:
                keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:87:39:8f:c6:b8:8f:2c:68:69:ec:70:38:35:03:87:0d:
         e9:de:75:ea:3a:31:19:9a:42:cd:d0:3e:65:a5:7e:c9:22:f5:
         d4:55:e4:b8:c6:02:7b:43:6a:27:74:a3:52:21:71:c3:dc:97:
         8d:cd:2d:7b:b3:3a:53:71:b5:f4:f5:23:30:31:e5:95:05:8b:
         d9:5e:e6:88:62:cc:31:64:2d:ca:6b:87:1b:59:77:5c:14:ff:
         6f:4c:ec:9f:fc:08:40:b4:5c:fd:11:6b:ac:f2:0d:3b:78:00:
         af:16:9c:bc:09:e3:78:a5:53:e9:1b:df:bd:41:04:fc:5b:f2:
         51:b7:7b:09:e4:72:31:4c:c3:2b:40:2a:93:ba:c5:e9:c8:6e:
         7a:dc:e6:91:cf:22:a9:46:11:7b:db:a5:b8:d2:af:16:d4:7e:
         cc:0b:d8:1a:33:33:fe:68:69:8b:af:65:6e:b2:11:dc:94:19:
         01:0c:b3:c5:50:ff:69:fb:ce:0f:27:f7:12:2f:d6:9c:cc:9b:
         e4:3f:27:28:a1:c6:98:8e:29:2e:1b:4e:6d:1e:01:12:12:35:
         9c:28:9b:98:d8:0c:90:fa:47:01:a2:69:44:01:fc:e9:e4:54:
         7a:82:c4:a7:e4:0c:ab:da:fd:f5:2e:09:43:47:f8:a5:61:ac:
         24:8c:fe:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:56:29 2026 by rpki-client