Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
File:                     hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json)
Hash identifier:          eJ0umgSOlHZW9kz4KqNJgEk3/r+AJR+F5sPJA6F0fMQ=
Subject key identifier:   4A:9D:1F:A4:FB:8C:9B:F7:B1:1E:96:1E:61:CC:AD:9E:B3:A8:57:12
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Certificate issuer:       /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial:       019EC2244E426CAD4CDECB088CDA6F137C64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
Manifest number:          157C
Signing time:             Sat 13 Jun 2026 18:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:19 +0000
Files and hashes:         1: 4xaEdixeinTNAew5f36B5ogFapc.roa (hash: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY=)
                          2: 6bp5_uY1eTTE0FRpgy0dJ0tGIWA.roa (hash: JQ6e3y/UZad8zx3alMXWmLY2Cs0ywtM7PcyjG1jGvp0=)
                          3: 8rDvMkxptJnltjzzUCN1e7h2mu0.roa (hash: bN6iyJOU8RYfCqW0mfWStueUrIARdx585ED2RX3ioso=)
                          4: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (hash: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI=)
                          5: IrFs_aYDL98DrBmqXNeImOXYqVs.roa (hash: /du+UzfxF5Oy69bwitaws2QcGuPpQ2q/PzP+2+rlKmc=)
                          6: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (hash: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI=)
                          7: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (hash: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w=)
                          8: W-auLweCazJVGZa2RWm9KCu-wKE.roa (hash: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s=)
                          9: ZNVLkE0Hncpo1bsQ8SqkvCmjNMs.roa (hash: ckctwOhfUle+O6fK0mnv5ZMxRNGqbUG5lJdOX3nwnlo=)
                          10: djAPpFOBLqUtxJOa9UwBPjNac1E.roa (hash: 7Rj31INl1FIcMdN33laOh9K9+J+bHShe/BZUzyt8PUg=)
                          11: ggV7rBXwprR59jciPQhDDTZxxmQ.roa (hash: I4MtXY7ClGvNcIjMAoHA2mKMcNbnijfTuvNa/n/j6Xw=)
                          12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: QmqSo1mxUCow4Sk0CJr/3AS3aSiU4DNG7oMbrAV3+fo=)
                          13: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (hash: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4=)
                          14: pnn2LDubyB-s2_PbTNDUNt7JA_8.roa (hash: vW3hxl2FPzWH44KmHJKXNpZV557F5Hczl/NZRDVCKlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:4e:42:6c:ad:4c:de:cb:08:8c:da:6f:13:7c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
        Validity
            Not Before: Jun 13 18:00:19 2026 GMT
            Not After : Jun 14 18:00:19 2026 GMT
        Subject: CN=4a9d1fa4fb8c9bf7b11e961e61ccad9eb3a85712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:af:76:28:9a:79:46:d4:dc:9d:8c:bc:1b:
                    55:9d:df:da:42:db:0e:4f:9a:61:b9:20:ac:c6:7d:
                    33:a4:3b:15:e6:81:d7:9c:46:47:ed:0d:05:d4:46:
                    81:3f:02:51:8f:86:d8:df:1c:ef:3c:bc:96:ef:3f:
                    c5:d8:c4:27:ad:50:37:a4:5c:4c:dd:18:43:cf:73:
                    88:62:25:44:fb:6a:f8:4d:b0:4c:92:48:83:2d:d1:
                    37:9b:31:1f:d0:39:75:b6:bc:e6:8b:4c:2b:0c:bd:
                    38:02:9b:58:8f:28:64:a1:8f:23:ef:2d:ee:62:40:
                    88:3f:a4:ce:f2:18:55:82:43:92:5a:bb:26:04:5a:
                    ae:62:6c:43:c0:bb:e0:6b:12:5c:bd:af:60:95:46:
                    2f:cc:6f:20:26:88:32:80:30:f2:43:f3:2f:91:9d:
                    ff:54:c5:6e:4f:ed:d8:7b:8a:4e:67:e3:a4:8c:9e:
                    b0:a3:11:9e:3f:f6:04:4a:dd:f6:27:7d:35:1a:44:
                    5e:8b:a4:06:19:bb:cc:d8:a6:c6:46:a2:4a:01:fb:
                    42:ca:a9:0f:af:05:a5:61:cf:57:94:55:2b:90:19:
                    bb:03:04:e8:00:77:a0:29:f8:43:61:c4:08:18:92:
                    65:cf:ae:71:3e:15:c6:16:7a:c5:92:b4:e2:38:8a:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9D:1F:A4:FB:8C:9B:F7:B1:1E:96:1E:61:CC:AD:9E:B3:A8:57:12
            X509v3 Authority Key Identifier:
                keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c6:16:31:4b:9c:85:5f:6f:29:81:b2:4a:ef:9e:b4:4d:ea:
         0e:02:5f:2b:5f:f8:64:7f:92:fe:b3:54:e1:1a:6b:78:3e:86:
         c8:67:13:62:85:4a:ef:be:d1:c2:49:c6:40:50:8c:d1:92:08:
         99:8e:0d:0e:20:5e:f0:18:d9:3b:04:33:00:c3:9d:1b:61:0c:
         e2:e9:74:bf:52:8a:ae:da:df:95:8a:cd:bd:a2:6c:48:fa:20:
         43:1e:c9:c8:c0:06:5d:6f:9a:55:74:4e:5d:72:9a:2c:ec:c1:
         0b:78:5a:ee:e0:25:9b:de:75:4a:4a:47:ee:81:b0:2c:92:84:
         98:41:32:47:1d:70:10:23:78:6c:b7:0c:71:53:57:dd:d3:09:
         f8:80:01:75:19:4e:d4:c6:48:c3:da:79:ee:34:2f:ea:08:27:
         5e:91:3b:13:0b:65:05:62:f5:59:c6:aa:d6:90:70:56:d6:48:
         30:51:9a:af:7b:05:af:60:c4:a2:a0:37:11:dc:6e:0d:b2:d5:
         8c:7a:0d:03:d9:68:f1:e8:fe:fb:b0:e1:67:94:3e:34:50:ce:
         24:0b:ad:de:34:f3:05:38:35:0b:9f:c8:a8:8c:6f:7c:5f:97:
         39:fd:a6:15:25:cf:12:42:1a:2c:4f:bb:63:26:ac:82:e4:0a:
         ab:d9:b4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:47:08 2026 by rpki-client