Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File:                     I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier:          qrUU6kM1cIJg7j/EoVT66H+skjO1d6coSFSAOZciLcw=
Subject key identifier:   7B:FC:25:3B:A0:5D:D5:B2:9F:69:66:D9:B8:B1:10:F2:D5:03:63:B4
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer:       /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial:       019EBF5A5BED81F45876A13364B8DB97258B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number:          07E6
Signing time:             Sat 13 Jun 2026 05:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:30 +0000
Files and hashes:         1: 2MeX37cZHGHHuxJtj1E28ddzIsI.roa (hash: LZd2fssCxVZOERqVCoqkBsBn4xYtLG5cKZGv8FiTdNw=)
                          2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: ROqQYU9YRm6O9dGvjFAHixNRP+/m3va4e2ItX6ELeiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:5b:ed:81:f4:58:76:a1:33:64:b8:db:97:25:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
        Validity
            Not Before: Jun 13 05:00:30 2026 GMT
            Not After : Jun 14 05:00:30 2026 GMT
        Subject: CN=7bfc253ba05dd5b29f6966d9b8b110f2d50363b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:89:ad:ad:df:82:f4:35:77:11:7d:2b:69:df:
                    5b:91:ec:1b:51:81:bf:6f:24:1f:bc:1f:23:64:01:
                    12:9f:b9:a5:0e:6e:3a:80:52:38:57:ef:0a:1f:03:
                    a4:79:80:7e:e9:5d:b6:b0:69:64:44:f4:07:07:54:
                    f6:11:00:f3:aa:00:e8:95:46:9e:0b:14:3a:24:f9:
                    ca:27:02:97:f1:20:0a:09:06:5b:3d:0f:44:a2:cf:
                    be:a4:22:76:ed:84:1b:36:e6:7a:91:8e:e9:ae:a8:
                    2c:83:36:3a:68:96:4e:da:42:87:a5:df:49:c2:82:
                    26:94:61:2e:bb:88:a7:da:22:77:96:f4:8a:ce:c6:
                    66:e9:cf:87:7f:fb:f5:15:3b:fa:92:94:c6:02:8a:
                    ff:49:17:fb:cd:81:16:86:79:cb:e7:0c:d4:f5:62:
                    3f:27:aa:c0:21:de:05:c3:82:00:4c:d5:78:b1:6e:
                    be:f6:aa:a4:5c:08:92:da:33:28:d8:0e:db:2e:ed:
                    1b:6f:f3:30:83:f7:6c:e5:41:fd:57:85:fe:e5:7a:
                    b1:61:5f:65:03:3c:fb:71:ea:b2:68:e5:47:37:1e:
                    ac:32:4c:20:eb:03:6e:82:56:ed:a4:0d:5f:e0:ab:
                    7c:3f:08:aa:4c:40:66:c6:20:e9:6e:d2:3b:2b:88:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FC:25:3B:A0:5D:D5:B2:9F:69:66:D9:B8:B1:10:F2:D5:03:63:B4
            X509v3 Authority Key Identifier:
                keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5b:5c:81:0d:29:d6:04:fa:30:f6:50:e8:24:21:97:c1:4e:
         16:87:c2:92:af:ce:6a:0b:d1:c8:2f:67:98:a7:bb:5b:22:49:
         29:c9:5d:34:8f:2f:78:f3:5f:ae:95:2e:f5:81:c5:fd:f0:86:
         b0:31:16:f4:3d:94:61:ab:f1:a8:49:50:d0:f8:85:46:f9:5e:
         78:e4:23:65:1a:75:af:e9:5b:5c:9d:14:35:ce:50:f3:90:63:
         69:d9:ac:1f:b8:d3:c3:30:1a:3b:54:04:15:3a:21:fe:63:c2:
         9b:d4:e1:f5:4a:7b:ab:72:bf:77:5b:1c:96:fc:89:20:36:42:
         6e:00:1d:e2:ea:d3:da:8e:0d:a9:e8:c6:5e:cf:f9:df:9e:b0:
         ec:12:0e:2b:09:24:cb:2b:a0:bb:9c:94:ce:7b:bc:a6:be:b4:
         29:be:81:35:5d:fd:bb:a9:8f:73:a0:27:84:2c:9d:4c:b4:f5:
         2f:5e:fc:2b:00:42:c2:9f:19:d2:2f:de:f3:e7:c5:45:7a:b9:
         d7:59:93:c5:26:17:2e:52:a6:6e:03:3b:2b:67:d1:f6:3e:b5:
         5f:da:8d:02:e1:98:d7:f8:e9:96:18:9a:71:db:65:ed:58:f5:
         b3:fa:9a:3b:b3:ac:da:21:2b:6f:98:8d:e8:27:a3:39:05:bf:
         94:bd:19:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:50:59 2026 by rpki-client