Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File:                     mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier:          TlR6QeZtgJFhweTnr4icYl7l6de6VWc+1eh/+sD/Vro=
Subject key identifier:   DE:E2:39:31:28:BE:D3:6D:88:DA:E2:28:92:14:CA:FF:1D:D4:0B:81
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer:       /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial:       019EC44A0E526F0F52EB08D6E897481ADD40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number:          10DF
Signing time:             Sun 14 Jun 2026 04:00:48 +0000
Manifest this update:     Sun 14 Jun 2026 04:00:48 +0000
Manifest next update:     Mon 15 Jun 2026 04:00:48 +0000
Files and hashes:         1: G8esPcMzQ9AFE_Fw8xl_QXTlOTU.roa (hash: 3RDVfSY7ZJX5UewWPelwEVlTR7B8w1TOwr419YQ9XiI=)
                          2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: mYPOUJRG7Dzii+Wod5lXuZDt3nd/VdNkosLHdd+w1as=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:4a:0e:52:6f:0f:52:eb:08:d6:e8:97:48:1a:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
        Validity
            Not Before: Jun 14 04:00:48 2026 GMT
            Not After : Jun 15 04:00:48 2026 GMT
        Subject: CN=dee2393128bed36d88dae2289214caff1dd40b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:4c:a3:ee:2a:03:e7:a9:76:c8:cf:c7:1f:
                    42:36:f6:26:e5:b9:16:a8:c3:6c:03:a5:50:65:3a:
                    3d:22:1c:4f:64:58:9c:43:a5:07:f4:d1:9a:29:8b:
                    1d:b3:56:b1:f4:d5:a9:d6:96:40:02:0a:42:b5:4f:
                    34:ec:84:69:82:24:d6:da:0e:fa:ac:b5:f1:b3:1e:
                    01:a3:77:06:8e:2c:1b:8a:ba:06:85:e3:09:12:9c:
                    8e:22:05:2d:13:bb:fa:6a:92:84:06:9b:85:ca:1b:
                    f4:a1:65:b5:c2:78:30:21:d1:d8:98:1f:71:2a:b5:
                    48:98:5a:1a:8b:84:65:bc:fa:27:43:dd:b9:52:26:
                    23:16:e4:7b:67:cc:45:f0:5e:44:ea:0f:d1:ad:b2:
                    d7:f6:99:8c:0b:af:f5:6b:86:88:43:46:09:87:8f:
                    4a:9e:23:44:eb:00:25:3e:f0:df:00:f6:51:fe:c6:
                    a5:72:ec:7f:7c:18:2f:1c:3d:22:83:46:64:af:ce:
                    ef:08:7c:2a:94:8f:cf:3b:a7:0d:a5:0a:83:88:c0:
                    81:8f:96:9b:82:e0:d8:2c:fc:30:ef:ae:b9:01:42:
                    49:35:7d:fa:5a:ec:87:db:ec:77:11:b2:d4:77:65:
                    9e:ac:68:e0:df:d4:ae:b2:65:2b:2f:34:af:e5:0f:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E2:39:31:28:BE:D3:6D:88:DA:E2:28:92:14:CA:FF:1D:D4:0B:81
            X509v3 Authority Key Identifier:
                keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8b:cd:18:ab:c7:a2:11:66:17:a3:a6:cc:b6:c0:d7:79:4d:
         16:9c:64:ac:6b:20:c1:67:4d:d8:a2:f8:3d:7d:04:96:54:ce:
         16:f7:d3:a6:db:5b:07:d4:4c:ed:ba:b6:41:88:dd:0d:4a:10:
         cb:a6:41:63:cd:b2:91:92:be:ac:8c:53:94:7c:4a:0f:4b:2b:
         96:94:dc:59:b2:e8:54:73:25:f9:d4:26:5c:2c:db:5e:ae:05:
         a7:db:34:55:23:dd:ee:7a:0a:7f:ac:89:cb:97:87:b8:ab:00:
         f4:94:ea:72:20:3a:c2:b8:d5:d0:44:9b:7d:49:49:22:ca:db:
         a6:cc:9a:2e:59:81:b9:11:08:7b:0a:96:f5:56:a3:1b:f6:31:
         42:2b:c0:67:91:7a:3a:93:65:76:49:93:0c:ee:b0:fe:53:a0:
         62:20:d5:f3:2e:d6:b0:58:66:10:a2:25:ef:93:bc:fe:05:a9:
         0e:21:1f:4b:45:a6:77:34:e5:ad:b7:80:d1:aa:eb:b9:0c:b6:
         f1:06:7f:89:db:6b:a9:e2:19:a0:77:8d:29:bd:e0:04:ee:a1:
         db:a2:3f:50:df:10:37:31:9f:f5:12:06:28:b0:a3:87:2a:f2:
         80:c6:43:8b:6d:b9:d9:fe:a8:4e:19:11:fc:55:b5:66:77:81:
         b7:2a:13:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:18:52 2026 by rpki-client