Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File:                     epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier:          RljKSY7mg35gtYi0vhWEyJxeCg8wfOxxJv5FqFSXv+A=
Subject key identifier:   60:4C:3F:71:03:0C:16:01:D0:0A:22:A2:EB:46:C0:92:DC:8B:49:11
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer:       /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial:       019EBFC92314CDBABEDA05F5ED7D274A1070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 07:01:30 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:30 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:30 +0000
Files and hashes:         1: BEwSGx2LrGrF0sGwEj968AwEhBQ.roa (hash: FOuyYaW0tTl+dteUWOtoA2lUPrG6Wb17DxcFxBecsSA=)
                          2: O1kpwtflKFENDMxtFw4AMwXy_Eg.roa (hash: bFGH8x7w1VMHVR7CRYJvYNDIa0FPd2nWUvLigwhxhc4=)
                          3: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (hash: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws=)
                          4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: 1Yf4VEl1U4eyLVf3Y6MBi9fqWJW1yJcUNUlpdgUxcyc=)
                          5: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (hash: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:23:14:cd:ba:be:da:05:f5:ed:7d:27:4a:10:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
        Validity
            Not Before: Jun 13 07:01:30 2026 GMT
            Not After : Jun 14 07:01:30 2026 GMT
        Subject: CN=604c3f71030c1601d00a22a2eb46c092dc8b4911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ba:0a:90:91:a8:57:f9:92:7e:37:28:c6:7f:
                    cf:f1:06:eb:76:9c:b9:30:8f:79:ec:aa:c0:32:0d:
                    6b:d5:80:11:cf:4e:5c:b4:2d:bd:a1:f3:56:98:ee:
                    ca:80:71:61:e5:5e:63:15:11:d2:75:77:6a:27:de:
                    ff:39:61:bd:aa:e2:bd:91:13:d5:31:ac:7c:06:72:
                    2e:ac:5f:4e:67:e4:46:da:13:d7:67:50:a0:df:7f:
                    f1:a2:98:1e:ae:a9:d9:fe:91:b5:00:86:99:9d:66:
                    fb:83:f3:14:c1:87:7f:b1:1d:34:f2:06:0e:8a:82:
                    e8:2c:91:72:f6:94:2e:22:43:a3:ae:df:4d:2e:6e:
                    ab:bc:de:68:5f:9e:e4:eb:67:ef:26:f6:c6:4b:38:
                    31:bf:ad:d9:9b:99:ad:4b:d1:6c:a8:54:ed:f3:1b:
                    a0:8c:a8:3a:cb:b0:9e:0e:89:2c:b5:7f:27:13:f2:
                    a4:d9:14:3b:6e:90:8b:d3:ad:05:f9:f7:4b:53:9d:
                    79:26:a7:aa:c5:e2:a5:c6:3d:26:c2:d9:be:45:31:
                    e2:85:7b:b1:f8:c4:e1:42:82:96:1c:11:87:2d:47:
                    b8:cb:67:88:e6:ae:41:4d:ba:7d:7b:c4:88:91:a1:
                    11:31:a2:8a:69:3a:51:53:7e:20:91:bc:19:81:1b:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4C:3F:71:03:0C:16:01:D0:0A:22:A2:EB:46:C0:92:DC:8B:49:11
            X509v3 Authority Key Identifier:
                keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:aa:c1:d5:3c:8d:d0:f2:d3:a0:97:f1:15:79:1e:7e:48:d2:
         d7:0e:5f:e6:77:06:65:9b:a3:dc:7b:39:ed:cf:8b:5b:c7:e8:
         a9:17:06:59:43:60:8d:ec:6d:b0:49:f4:64:80:97:e7:ad:95:
         f3:06:99:f5:b5:b1:fb:71:b2:8d:3c:8e:ee:4c:b7:b2:57:f4:
         d9:55:a8:e1:e4:6c:39:40:9c:83:c8:4b:37:f0:d9:c6:42:61:
         27:92:4d:b6:6e:5b:77:8c:2b:6c:ed:a4:3a:91:51:35:0b:3c:
         62:0a:cf:85:31:bb:f8:a9:f1:57:78:a9:49:d6:92:4b:5c:92:
         e7:1f:d8:1c:75:47:4a:30:ba:94:c4:a6:f8:3a:69:83:2f:78:
         c0:ae:79:91:07:6d:4e:e9:7e:03:3b:68:45:f0:fd:55:84:ac:
         6d:b5:bf:06:43:8b:68:28:a6:cb:ff:af:69:54:92:7b:83:39:
         b3:eb:66:8f:5d:d4:2e:d9:58:3e:22:73:11:fe:7a:a5:8b:31:
         57:b9:b8:fa:61:06:d9:5a:0b:e2:1b:3e:f6:f7:28:b5:a7:f3:
         5c:8e:f8:62:0c:ce:91:b8:88:74:e7:12:37:9a:45:57:7a:3d:
         6c:0c:84:fc:f3:9d:dc:f8:a7:92:b2:9a:5a:69:42:f2:25:d0:
         56:d8:2c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:37:27 2026 by rpki-client