Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File:                     p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier:          nfpOnPG/1BvtSFdSKE+3UQH1g0fEwRiQ+04k7wJFGqA=
Subject key identifier:   BE:CC:CC:D5:DF:00:C9:41:A9:18:2D:2B:9F:55:D7:39:4F:38:35:81
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer:       /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial:       019EBF5B1CF7A3A475F251B8C8473A36CEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number:          1829
Signing time:             Sat 13 Jun 2026 05:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:19 +0000
Files and hashes:         1: 5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa (hash: JIN7iifBaNIG0jSwJOMYaoCb6Od3dAZF5qeWgFbXbiY=)
                          2: meAessKCpmwe8fOAgZe9YU9MTiw.roa (hash: 50h4K5YSYsz32EpIZ2NW1nDqeDeoSpSQ6hoQmydaO20=)
                          3: nSbiFuonVVedtf1Mjw5hb4zONuc.roa (hash: J6+zjZkHNoFOiT1a2hQNHKdZUcl8pIjHWjIqVGiuISk=)
                          4: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: 1RhXpPmvPUEm1/WTAD4BLaverbVgUxcSHsvZB0N2tgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:1c:f7:a3:a4:75:f2:51:b8:c8:47:3a:36:ce:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
        Validity
            Not Before: Jun 13 05:01:19 2026 GMT
            Not After : Jun 14 05:01:19 2026 GMT
        Subject: CN=beccccd5df00c941a9182d2b9f55d7394f383581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:83:6f:15:98:55:74:39:08:31:ff:a7:6a:
                    88:31:0e:38:52:34:1c:c3:bd:9b:e3:f5:dd:c1:78:
                    2b:5c:6a:f4:f2:c5:ae:2e:0f:2f:ca:be:4c:fc:2e:
                    4e:ee:50:ea:25:9f:c1:93:69:46:11:36:d2:5f:9a:
                    d4:9b:51:fe:4b:9e:11:40:1d:7a:3e:52:de:69:85:
                    77:29:79:c2:cc:39:26:5b:60:3a:36:76:14:bb:b2:
                    9a:30:45:b1:f3:2a:5d:9a:db:12:c9:7c:37:92:c0:
                    a9:8a:ac:a7:93:dc:9f:bd:3b:2b:c0:40:f2:c9:3d:
                    26:0c:86:05:1f:a3:95:50:1a:c9:b3:ba:66:80:42:
                    64:a3:98:77:00:48:ce:a3:2b:dd:27:e5:c4:a0:22:
                    5d:33:fd:77:1c:ef:37:73:67:ba:f5:df:47:c7:05:
                    87:48:dc:0f:4d:02:cd:44:97:d8:ca:18:2f:e2:8b:
                    9f:6a:b1:0c:ae:ef:a5:40:0f:3d:36:50:24:8d:33:
                    e2:7f:20:48:82:01:47:21:46:dd:3d:d6:5a:ad:43:
                    35:29:66:b2:1c:7b:9c:c1:44:22:98:cd:1d:81:15:
                    97:a8:f5:93:84:6b:d0:ed:60:2a:9b:20:db:40:80:
                    31:22:1c:91:46:c4:4f:e3:2b:b9:c8:51:56:ce:8c:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CC:CC:D5:DF:00:C9:41:A9:18:2D:2B:9F:55:D7:39:4F:38:35:81
            X509v3 Authority Key Identifier:
                keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:73:47:fc:11:1d:ee:af:37:7d:9f:ea:74:1e:b3:a6:c6:1a:
         83:21:2e:d0:28:f9:03:b6:91:31:4d:20:4d:10:9b:6a:ad:56:
         4f:6e:fd:de:ef:ee:1c:6c:18:1d:ab:e6:93:03:2d:eb:3f:dd:
         18:66:ab:ed:b2:20:a2:e9:92:a9:27:b5:25:c1:1b:65:a4:8a:
         2f:55:75:e6:fe:e0:b1:63:37:69:ca:ca:82:d4:f2:ce:45:c5:
         d1:c7:f6:e2:7c:1f:28:d6:6c:7e:5b:91:c4:cc:73:31:25:ce:
         46:9d:b6:ac:45:83:74:27:b2:91:28:e5:1f:a8:53:60:f7:78:
         18:5c:11:a8:9b:76:0f:1a:15:69:90:30:60:00:9c:66:ed:e0:
         45:d9:7e:1f:3b:59:61:c6:f3:3b:ed:a1:a0:4b:8d:80:3e:12:
         22:ff:3b:36:3a:e8:a8:bf:88:f9:30:73:8c:bb:a3:f7:14:d2:
         1b:e5:dc:fd:eb:74:4c:2e:03:46:87:ca:c9:42:63:ab:89:d7:
         db:34:2d:90:99:15:d0:c0:28:0f:66:aa:7c:f5:44:5c:b0:4e:
         a5:7f:d8:82:2b:7c:db:f3:fe:f3:9e:75:20:e8:ee:28:73:48:
         37:78:8a:46:de:e9:25:32:ec:94:4e:d7:5e:17:b1:29:32:94:
         fa:d4:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:17 2026 by rpki-client