Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File:                     xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier:          yXHdr7ASrfA8OSBgCmvnGxVQIxLRMHO6TDucqyI7teA=
Subject key identifier:   5A:9B:21:23:0E:9E:3C:70:CC:A2:74:D0:32:94:D6:D1:30:6B:EF:DD
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer:       /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial:       019EC292922345A5C832C81597F9A3E739BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 20:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:45 +0000
Files and hashes:         1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
                          2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
                          3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
                          4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
                          5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: bB290WJGb3t1CieVYp0GuQ4vIyRrqjhlgfPftHE2ybk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:92:23:45:a5:c8:32:c8:15:97:f9:a3:e7:39:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
        Validity
            Not Before: Jun 13 20:00:45 2026 GMT
            Not After : Jun 14 20:00:45 2026 GMT
        Subject: CN=5a9b21230e9e3c70cca274d03294d6d1306befdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:69:84:df:ac:c1:60:cb:18:79:4a:a7:95:
                    05:64:65:36:25:f6:73:ce:85:d9:9c:82:e2:bf:94:
                    2e:6a:d6:82:df:f8:c0:f2:68:d7:13:8a:ea:db:98:
                    9b:e3:16:a6:91:6f:33:5c:b6:a8:cf:cc:13:76:7b:
                    85:6a:40:a4:f3:e4:0e:41:c2:97:dd:26:40:59:70:
                    5d:15:02:c5:61:d4:ea:30:55:f6:2c:e8:ef:33:2f:
                    cb:dd:37:64:7f:96:42:bf:2a:7c:28:15:89:77:68:
                    e7:47:43:e4:c9:e9:3c:b8:1d:24:f8:67:21:61:06:
                    bb:e5:f3:fc:43:99:9d:c5:e8:0c:e9:30:1c:0b:de:
                    db:1e:bc:48:3c:68:93:80:03:f7:a4:f3:d2:4f:b4:
                    33:5f:f4:66:7d:c7:9e:bf:f0:23:6e:dd:81:98:da:
                    63:5f:9f:76:d4:c0:e4:fe:08:87:4b:6f:97:b3:53:
                    29:15:3a:f2:0b:97:1b:18:87:ac:d5:9f:51:c3:73:
                    b2:60:64:dc:ae:b5:05:ee:78:fe:97:dc:17:27:f2:
                    cc:9a:3d:39:83:b4:0c:e8:5d:83:b6:e9:14:20:1c:
                    d2:91:f7:0a:a1:b7:83:fe:d3:42:04:1f:55:c4:cd:
                    f0:42:73:79:a6:26:68:2a:00:37:87:d9:3b:de:b9:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9B:21:23:0E:9E:3C:70:CC:A2:74:D0:32:94:D6:D1:30:6B:EF:DD
            X509v3 Authority Key Identifier:
                keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:61:ff:33:41:75:60:62:6d:b0:19:94:e2:80:85:4e:b7:e4:
         c1:25:a8:b9:20:b8:37:5e:ca:e9:ac:e9:57:7a:e7:cc:af:d7:
         ef:c9:27:6d:7b:2f:a4:b5:7e:3b:d1:39:48:15:ab:cf:1e:07:
         5c:8e:00:68:70:6b:bc:d0:78:b8:0a:b9:c4:ec:4e:f5:58:77:
         e8:21:fc:39:d2:a0:e8:89:31:a6:d4:e0:5f:af:6f:02:23:23:
         f1:1f:0d:c7:aa:5a:17:e7:b8:e2:a8:5a:24:fe:7c:1e:ee:ea:
         6d:6f:8c:c0:d8:44:60:d5:a0:4a:15:53:5a:c6:22:a1:83:b6:
         a5:06:8a:b6:ef:8c:14:a5:d4:0f:30:8a:74:e7:7b:9e:15:95:
         2c:db:bc:64:27:3d:28:63:2c:3c:ad:f0:d8:f8:6b:65:91:a8:
         43:28:6d:23:80:20:b8:af:81:bf:c0:69:56:52:e2:8a:fe:79:
         c7:64:4f:47:53:58:95:fc:57:0b:31:ae:95:61:4d:12:1a:81:
         82:ff:f3:65:57:c6:e0:c6:48:5a:84:85:e5:4a:04:be:3b:e4:
         91:88:52:60:b6:16:18:34:90:1f:e1:d3:96:c4:47:8c:cb:8f:
         4f:8c:06:1c:b0:43:72:43:69:b5:d0:49:00:29:20:6f:3c:e1:
         cd:df:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:06:59 2026 by rpki-client