Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
File:                     sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json)
Hash identifier:          oqYbfjeLMvhXqsOYJrElbRTjIdcWKjjoM3/FQpJ2x4Q=
Subject key identifier:   01:0C:04:FC:2D:EC:0E:70:17:98:29:26:39:F9:38:DE:D0:AA:EC:F1
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Certificate issuer:       /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial:       019EC36DF78645496B8A793F6EEAF9DA5727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
Manifest number:          032D
Signing time:             Sun 14 Jun 2026 00:00:24 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:24 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:24 +0000
Files and hashes:         1: Zv79TTxsf83wSa-br66v_0Kz3P0.roa (hash: PshdlsPP60SM0Q8DKrvKNK5rgHz5shKnndSXnKZ2nf8=)
                          2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: yXdRlHSMZNmD9iPcZ1+iHO9I7Ca2TsJ/XPKyXzPF7wU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6d:f7:86:45:49:6b:8a:79:3f:6e:ea:f9:da:57:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
        Validity
            Not Before: Jun 14 00:00:24 2026 GMT
            Not After : Jun 15 00:00:24 2026 GMT
        Subject: CN=010c04fc2dec0e701798292639f938ded0aaecf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:06:ff:b4:d6:52:3c:b1:55:fa:98:6b:8f:
                    13:73:8c:1f:1c:ea:22:a0:32:19:85:7d:50:1f:c5:
                    9b:f5:97:c3:e1:45:24:31:ce:f9:7d:0c:d8:bd:13:
                    84:cf:0b:f9:3c:bd:12:1c:85:b0:e5:d3:4b:79:d3:
                    ef:a4:f5:1f:09:5a:ef:0f:96:6f:26:bd:d6:97:fb:
                    81:7c:17:36:b8:ae:bf:aa:0b:b4:6d:c2:4f:d9:02:
                    f7:a7:43:d3:c6:4a:29:a8:77:24:d8:d9:43:33:79:
                    8b:e3:0d:3b:6c:41:4f:d8:97:db:c6:64:42:41:ed:
                    41:04:6f:f8:f8:fd:1b:c9:b9:d6:8c:3c:c3:ca:51:
                    9b:c5:d0:9b:b5:ec:ff:b1:ef:e8:be:46:4e:ab:2b:
                    24:c2:e6:74:db:d1:77:20:9d:43:b4:6b:ff:58:e8:
                    f7:26:2e:44:20:d8:e7:2d:3a:71:89:3d:70:bf:3e:
                    e6:09:d1:c7:62:37:0b:5e:c8:e5:d3:c8:56:f6:c5:
                    2e:93:f4:2e:dc:df:8a:aa:50:f2:fe:ba:56:c0:4a:
                    bf:d6:32:17:ef:50:b1:8c:e8:d4:ef:03:d4:b7:25:
                    4a:cc:38:21:10:80:df:ff:dd:ac:b7:6e:e3:e7:f0:
                    fc:d2:fe:0f:3b:fb:ba:2f:de:25:e9:4b:61:91:15:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0C:04:FC:2D:EC:0E:70:17:98:29:26:39:F9:38:DE:D0:AA:EC:F1
            X509v3 Authority Key Identifier:
                keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6c:cd:e7:40:79:b1:b0:2d:17:16:e1:98:3f:f8:a0:0f:b3:
         50:c3:f5:12:22:6c:08:4f:87:11:62:38:ac:48:15:e5:7f:ca:
         75:0b:2f:fd:37:d1:45:b1:18:e2:76:c1:06:d3:74:f2:8d:26:
         5a:b2:0d:66:62:46:fd:4a:20:5a:61:b0:25:bb:f9:96:36:f3:
         b3:31:09:c2:b4:92:80:c9:60:b9:80:7d:9f:67:1c:48:aa:87:
         71:bc:a6:32:90:e4:78:46:e5:83:5d:bf:d4:52:75:c3:cd:86:
         5e:08:81:16:13:37:00:86:3e:08:b1:63:dd:40:04:1d:24:50:
         61:34:d2:39:37:55:ac:9c:c9:44:63:0b:ad:75:11:d0:47:ad:
         0f:47:97:8c:d0:2b:47:35:63:21:ff:26:0f:d2:c1:92:c6:ed:
         29:32:2d:f2:b8:e4:93:1c:f8:2e:ad:4b:c7:4c:5a:6f:fa:46:
         c1:90:69:54:67:fd:6e:f9:b4:3d:57:6e:02:5c:23:38:c2:81:
         c4:18:fe:47:c2:14:dd:4d:4e:a3:30:d1:e5:44:3e:d5:6f:61:
         4b:e6:4f:d8:03:1d:ec:85:0d:35:1f:b8:e4:22:55:56:5e:57:
         fe:7c:70:2b:9a:6d:75:cb:f4:07:75:33:03:fa:e4:a1:9f:df:
         6a:b2:96:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:12 2026 by rpki-client