Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File:                     iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier:          o8i0pvQAisfmzLVt2IksE6iJwO3NVpeEExvqVE911qI=
Subject key identifier:   E0:7A:3F:EB:42:8E:CB:7F:2A:85:D5:9E:0A:C0:00:03:E9:A4:B4:80
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer:       /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial:       019EBF5B25C282FFAF65414972595D6BE980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number:          069F
Signing time:             Sat 13 Jun 2026 05:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:22 +0000
Files and hashes:         1: 8GQama4kGymnU_xje0Yvb2zQH-o.roa (hash: NKYIKebNipUgc9YPaLXeciFwdApi4ubVtrOcZFCvldo=)
                          2: EdRGRNAOunRYG7-_JByQf_-npzI.roa (hash: hCZ1ruXMfJaNp5NsNXemKDBnVae+viS5ZTIr51GpNRQ=)
                          3: On2nk-aByUGs4ZA6emj31XEJdso.roa (hash: DD3HadfYy5dPFXQsNsDN3ezTTc4+paMyIyZQDpChk8M=)
                          4: QmnB2CMIfe5umcxczxRujV0wYEk.roa (hash: lwZAzq1D6hmN+6U+dqklR1EjzUoOQPeBNTMLHAdXkGQ=)
                          5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: ANAMJNaMdxGVFH6s6L1s9GMIAJEvJCAu+XV4Dk1a3Js=)
                          6: tsHmi25vrKfns5kPGhl6myHWaVw.roa (hash: 8MIMAYAM0/jsI9v0uOOSYvki5uUrLoYRmY+NS2ZIDRg=)
                          7: vX_8fXaxigdlWpe1tG-xpUdtIoQ.roa (hash: XxkJj1YMXQmGGy2zQBCP59NASJ3xuWotiNT/aTYNmvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:25:c2:82:ff:af:65:41:49:72:59:5d:6b:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
        Validity
            Not Before: Jun 13 05:01:22 2026 GMT
            Not After : Jun 14 05:01:22 2026 GMT
        Subject: CN=e07a3feb428ecb7f2a85d59e0ac00003e9a4b480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:dc:df:84:26:44:cc:26:af:1f:3e:84:9d:
                    a7:93:5b:31:99:c3:ba:54:ce:a0:da:f6:46:58:94:
                    41:7e:49:31:07:b3:53:b2:df:5f:2f:e7:d6:f2:da:
                    77:8d:7b:98:4c:07:63:95:33:8b:68:50:10:0e:cf:
                    f8:50:21:8d:a6:fd:4b:22:a4:6f:2a:25:63:bc:d2:
                    39:7c:13:16:f8:0e:d3:b2:31:23:89:09:89:1a:07:
                    42:c8:0e:13:86:f1:a9:04:75:f3:25:95:bb:a4:15:
                    94:ac:f2:de:4e:bb:43:f9:09:28:6d:74:a5:7d:bc:
                    22:f2:60:e8:78:12:e4:8f:ee:a7:17:1f:dc:71:09:
                    df:bd:92:2a:95:5c:cf:ba:85:10:7c:b0:7c:d3:ff:
                    10:43:9e:03:38:16:35:f8:06:9c:5e:1d:72:6b:de:
                    f2:8c:ad:fd:6f:b5:48:c3:4a:01:55:df:a6:fe:73:
                    ea:55:6e:e5:08:4c:f7:d7:f3:85:58:c6:55:71:5f:
                    d0:70:da:f3:52:f6:c2:9f:dd:77:b5:d6:98:1f:f4:
                    40:8b:40:ca:b7:e7:a2:38:6e:0f:69:e3:31:1b:96:
                    88:3f:34:13:eb:16:56:7d:42:28:16:f7:cb:5a:b5:
                    99:2e:c3:8a:67:69:e3:b9:9a:2b:21:43:b8:22:3b:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7A:3F:EB:42:8E:CB:7F:2A:85:D5:9E:0A:C0:00:03:E9:A4:B4:80
            X509v3 Authority Key Identifier:
                keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e6:b8:0e:6f:a5:ae:cb:c7:9f:d9:5d:6e:ae:13:5b:b6:52:
         67:9b:19:7e:e6:e2:f1:51:9c:4a:84:9c:18:b9:f1:1c:00:09:
         c2:80:49:45:b6:30:53:3a:7f:61:5d:b3:23:a2:7d:6c:ea:28:
         cd:46:f8:0a:39:8b:c4:a2:45:77:17:c7:80:1f:02:5c:95:2c:
         cf:c1:4c:8d:6f:e5:ee:bb:bc:e5:1f:fc:05:b7:31:61:3d:3d:
         93:a9:9b:62:5e:0b:28:5a:f1:4b:4d:91:16:33:db:83:d9:67:
         72:9b:1a:e7:3f:7b:cb:cb:db:9e:93:0c:40:25:63:03:da:6a:
         2e:8d:5d:bf:f3:4d:b2:da:5d:ee:43:7a:c6:6f:35:f5:42:e9:
         70:7c:1f:d8:1c:52:ef:f1:e3:e4:24:41:6f:c8:e1:38:4e:60:
         1d:96:2a:3d:44:74:0e:99:71:13:dc:1a:10:21:8e:94:c4:6e:
         a1:d4:f6:e7:83:ee:c6:66:70:73:31:7f:a8:7e:0b:65:9f:0e:
         31:3f:6c:03:58:53:80:26:82:bc:90:d7:91:be:e1:13:08:20:
         b3:16:89:2a:ab:db:0e:3f:30:ba:03:85:df:ad:a7:73:49:57:
         e5:a3:9c:6c:f3:bd:55:b8:f5:f9:92:ad:60:1c:24:e4:f4:0f:
         a0:ab:51:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:09 2026 by rpki-client