Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File:                     xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier:          SBcaPJxO9HKjJyRWeCooxFM030bnlSi6neg9cwYkBRw=
Subject key identifier:   52:42:39:B5:A4:C4:CA:F5:07:F5:B6:6C:C8:B6:73:48:3D:82:F0:B3
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer:       /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial:       019EC36E5CF4036FC74C419BA3CABE4B035D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number:          18F0
Signing time:             Sun 14 Jun 2026 00:00:50 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:50 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:50 +0000
Files and hashes:         1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
                          2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
                          3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: wSOZrDIDPKjbT34vGPvJ2vcHVxaKp3/H7ykTexGg8zE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:5c:f4:03:6f:c7:4c:41:9b:a3:ca:be:4b:03:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
        Validity
            Not Before: Jun 14 00:00:50 2026 GMT
            Not After : Jun 15 00:00:50 2026 GMT
        Subject: CN=524239b5a4c4caf507f5b66cc8b673483d82f0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:c7:e3:e0:d1:17:b9:ce:1a:52:f3:94:9e:
                    95:92:fb:8e:03:c5:8b:41:ad:89:88:a2:5e:db:58:
                    e8:65:c4:88:8e:de:29:74:cb:fe:38:91:19:44:8e:
                    78:98:09:b4:0d:56:74:a0:33:39:7b:67:57:7b:a4:
                    ea:c6:79:bb:b9:48:31:41:74:8e:99:c5:56:a4:77:
                    fe:ba:ff:fa:bb:90:19:5d:93:96:e2:36:79:b6:bb:
                    7b:9f:e7:dc:fa:0e:8d:9b:d0:03:64:ef:a4:d3:ac:
                    bf:cf:12:56:2e:a4:0b:9f:d8:18:82:d7:35:df:53:
                    d5:c5:2d:b4:78:7b:e6:f9:f0:fb:23:c6:a4:61:4a:
                    13:61:a1:43:70:b3:d6:a7:5c:1d:7c:2f:e3:8d:34:
                    be:be:96:32:0e:d3:1a:f0:b9:f1:c5:f4:af:94:91:
                    68:ae:52:10:e6:95:80:6f:15:46:84:51:12:46:5f:
                    b4:7e:11:1d:c6:aa:4c:ae:a8:0c:d4:cc:97:5d:5b:
                    2e:62:19:b4:a5:ec:cf:1d:f8:33:de:59:6a:b6:da:
                    12:e1:31:65:4b:25:c0:e2:cb:a9:84:b6:0a:75:95:
                    d5:7e:b2:72:b3:a7:bb:7a:c3:31:45:9c:07:ed:c2:
                    e2:41:66:c2:fb:8b:41:71:58:8c:d4:33:94:30:cf:
                    0d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:42:39:B5:A4:C4:CA:F5:07:F5:B6:6C:C8:B6:73:48:3D:82:F0:B3
            X509v3 Authority Key Identifier:
                keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f4:1e:bc:ed:d7:e9:36:a9:1c:5f:4a:b1:f7:49:a8:cc:e3:
         4a:8d:92:d9:d2:b8:64:54:63:a6:8e:d9:b7:33:0f:9a:d9:85:
         46:d2:6c:88:0d:00:d5:6a:c6:3d:fa:ab:b6:87:ee:5f:ee:41:
         5c:87:66:7f:64:2a:91:68:ad:d1:20:45:27:82:0c:c7:7e:f0:
         c7:39:8f:d5:67:b5:73:bc:23:6b:3e:45:49:c8:ea:36:d5:ea:
         37:36:43:1d:be:23:87:01:4a:11:8e:48:8e:d1:4d:37:9d:be:
         e1:f9:12:08:fc:ca:9b:03:e3:a2:08:41:c0:ad:e9:c8:5e:00:
         78:07:ee:d5:a0:6e:80:96:33:85:35:51:87:14:a0:65:d1:38:
         98:8a:dc:36:92:3a:79:91:41:6a:c6:ed:a5:c6:a6:20:2d:c2:
         57:06:83:c0:8b:5d:2e:47:78:a1:38:b2:5b:71:6b:e8:55:ac:
         12:66:13:f4:88:3c:c5:da:73:f8:aa:bf:a2:18:f0:69:ee:66:
         7d:ec:46:20:52:c7:40:55:2a:58:19:3c:c8:03:ae:8d:de:b0:
         1a:42:85:49:1d:43:9f:28:cc:83:27:d7:b2:49:8b:32:b1:ed:
         c3:80:d3:43:58:87:65:43:c8:22:da:43:8b:9a:f0:20:c5:18:
         cf:f1:3c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:25 2026 by rpki-client