Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          9bNjEuIUyx8W69pksbptvulOuic0SJEAHF2lpFAa7jo=
Subject key identifier:   E9:5B:A8:97:63:E3:F0:B1:AB:80:4D:74:2B:28:23:B6:54:7B:D5:3F
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       019EBE1142DDB9F4E0A9D14EE1AE79E6FB15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          1A3B
Signing time:             Fri 12 Jun 2026 23:01:02 +0000
Manifest this update:     Fri 12 Jun 2026 23:01:02 +0000
Manifest next update:     Sat 13 Jun 2026 23:01:02 +0000
Files and hashes:         1: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: RB8d9DPbmQC5D5kZkh2a3x21DdbBvYrRQPhDFBp7lYE=)
                          2: 9_qzaYR-EszIpBxI4ownqBBUFGw.roa (hash: VhzjhZWKdSpMHocreuG2Si0iTaWmN7K1sjii56hPLwc=)
                          3: KjzZQ3XHTR1E4K2w5QoidTvxCog.roa (hash: 0FtQ/w38a9SAPO2B+4vZGc9BxQRkeEmmddcJQ1zQ63s=)
                          4: PdBo5LYrW3mTEROFtgvAOtWJw7o.roa (hash: FthkQ7lp8mIcRsIs/VRf4z45qSoRaUz1xKUgBE6qdA4=)
                          5: QOp6ldZ4aq2zfMPYvuOeV0oKmeY.roa (hash: 8YOvlrB9urinWAqeR4fd1zgfcxdDnYVPoOrAJi9cHqo=)
                          6: REDwgNoSOq4uYbwxM_j4oxvQTM0.roa (hash: b8qs9WhizIcplQEtGxyEWxgFtt2HjxcL7Ti1GQ4s00Y=)
                          7: YuD6mYeegaW9d29Ci66BL3l4jWw.roa (hash: cYyPCH7nR9uMcm/IXKU1fKBDvQZmREUlYnB22XhXA1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:42:dd:b9:f4:e0:a9:d1:4e:e1:ae:79:e6:fb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: Jun 12 23:01:02 2026 GMT
            Not After : Jun 13 23:01:02 2026 GMT
        Subject: CN=e95ba89763e3f0b1ab804d742b2823b6547bd53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:1c:0a:1c:e5:d6:d1:d6:72:0a:be:16:54:
                    fc:29:ee:2b:34:ee:94:fd:63:41:3b:5b:4f:90:6e:
                    96:5c:e4:9b:04:02:32:3d:c3:c6:7d:b8:47:9d:ff:
                    2e:4f:75:0f:f4:0d:6f:18:d3:34:2f:ad:8d:db:97:
                    0b:46:39:aa:51:56:e0:bd:f9:a2:81:b4:8a:61:aa:
                    d2:74:70:08:0c:2f:7d:84:33:95:c5:0c:1c:56:2e:
                    0e:85:96:ca:6d:04:40:fd:b0:e6:7e:ac:7d:24:35:
                    e3:e5:e3:d1:c9:14:79:89:c4:a9:a3:f4:77:21:a2:
                    a6:4f:21:20:30:5e:30:54:76:18:e3:b1:6f:f3:c9:
                    cd:eb:13:bd:fd:46:d2:99:46:c7:4f:13:29:89:a3:
                    b7:a4:98:68:98:63:13:e2:e7:f3:37:a9:9d:df:2f:
                    45:49:a1:d3:be:49:63:a7:7f:89:36:ae:ca:9b:22:
                    6f:25:b1:9a:7a:5e:57:b2:a7:59:a9:09:88:a0:b0:
                    77:10:bf:b9:c0:09:15:73:0b:c4:1e:71:3a:b6:61:
                    34:0c:5b:07:f3:66:62:18:e5:4f:cc:fe:b7:e4:f4:
                    1a:65:af:14:e1:0b:05:e0:7b:6f:f4:a2:fe:24:60:
                    e8:3d:b4:a3:16:95:a0:20:b2:7f:66:4a:51:3c:f7:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5B:A8:97:63:E3:F0:B1:AB:80:4D:74:2B:28:23:B6:54:7B:D5:3F
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ef:30:91:f7:9c:ea:bf:e2:55:1b:92:19:1c:4f:7b:3b:63:
         09:5b:b5:29:18:cd:86:9e:eb:56:a5:76:a8:98:bc:aa:6f:4c:
         ac:11:cb:2a:30:3c:ab:4c:ac:69:49:97:3c:1a:28:53:3d:37:
         c2:ee:55:86:ae:af:ac:47:ec:b5:f9:13:51:9a:60:c1:c5:79:
         b6:5a:b8:2c:b2:b3:18:ff:3c:53:23:8f:9d:04:aa:3e:03:0e:
         58:d3:c3:3e:b1:0c:c2:ac:9d:0e:ab:5e:98:9b:6b:0e:49:b5:
         dc:d5:66:2a:de:47:c1:65:24:4e:cf:f7:3a:e6:9b:00:c7:19:
         06:c0:a4:b7:6a:40:5e:d2:d0:ae:fe:7d:e9:65:74:db:28:cd:
         2c:a3:c4:29:80:c1:c3:18:1c:7b:05:f1:28:fd:83:22:89:65:
         ae:c4:d4:55:d2:1a:dd:21:27:3d:c3:02:a7:92:a4:a7:21:e0:
         6a:09:f2:8b:23:6a:a4:a6:b0:79:27:b2:40:cc:4e:f8:91:de:
         ab:49:3a:bc:d6:1e:e1:0d:c7:1e:d0:9a:f4:f3:43:ee:d1:6a:
         8c:39:e6:bf:91:14:d8:84:e4:5f:ec:ba:4c:d7:01:11:c0:23:
         37:ff:dd:48:e5:de:30:e0:0e:6c:ee:c5:95:e2:a1:54:01:ad:
         1b:73:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:27 2026 by rpki-client