Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File:                     718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier:          JVZl9z/D2ttI1YFiqhXVqgSRKav/zIJveDCRxb/wzfI=
Subject key identifier:   C8:C2:6B:AD:0A:F9:EB:DC:D2:1D:AE:FB:F1:E4:DD:FA:99:B2:DE:67
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer:       /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial:       019EBFFEE0F364D34DB1B19136FD3008F62C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number:          1353
Signing time:             Sat 13 Jun 2026 08:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:12 +0000
Files and hashes:         1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: VVqd8WSVFzyMymXb84AE5FBYmhQGEIdd5KL74RG8wmc=)
                          2: eqWOG9zATDE6vua6nCdpCj8d9tU.roa (hash: c/ceJ8EEg4SDQlrPP9l4Ag70f5QrPY73Z9EWNEH2NF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:fe:e0:f3:64:d3:4d:b1:b1:91:36:fd:30:08:f6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
        Validity
            Not Before: Jun 13 08:00:12 2026 GMT
            Not After : Jun 14 08:00:12 2026 GMT
        Subject: CN=c8c26bad0af9ebdcd21daefbf1e4ddfa99b2de67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:30:60:b2:44:0e:8f:b6:b2:86:97:5b:ad:d3:
                    10:9f:64:5d:95:55:0c:55:3e:b1:65:5b:34:f7:2c:
                    a4:71:22:31:01:67:bf:17:cd:cb:8b:2e:f4:5a:e9:
                    4c:c5:6e:06:7a:74:97:15:18:c7:1b:44:19:83:64:
                    51:b2:a9:a2:2c:1b:a1:85:03:16:63:6b:f8:28:77:
                    fb:c3:0c:ef:82:24:47:c8:e3:40:a1:c4:93:e3:c8:
                    16:6f:be:86:9d:ce:89:3d:27:19:3c:2b:a7:df:04:
                    28:8f:6a:07:34:7c:14:47:45:9b:42:bc:6e:24:d4:
                    60:e7:58:52:e8:ee:a9:4f:e3:f4:4e:29:2d:9d:c8:
                    84:80:d4:3d:15:92:4a:bb:5f:f0:e5:ed:59:cb:b5:
                    c6:80:d9:89:7e:ff:ef:bf:f2:20:b5:a6:f4:ae:61:
                    0e:23:6e:e9:89:23:63:61:08:2c:be:06:91:e4:42:
                    7c:2e:8b:57:3a:b5:70:60:8f:00:10:2a:ff:35:4d:
                    b6:34:99:8e:7a:77:ad:06:ab:b1:9d:ed:ac:1f:b5:
                    9e:5f:7e:4a:12:c3:37:25:6d:9d:94:50:f8:72:b1:
                    75:0d:ed:3f:2b:fe:fd:1a:8b:cb:16:b2:38:2e:12:
                    83:90:a8:87:3f:df:55:3d:bf:cd:2d:b9:9c:08:64:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C2:6B:AD:0A:F9:EB:DC:D2:1D:AE:FB:F1:E4:DD:FA:99:B2:DE:67
            X509v3 Authority Key Identifier:
                keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0d:8b:c6:5c:60:39:23:b2:f2:e6:a2:0b:f3:e4:3b:04:0c:
         18:82:0c:73:fe:53:7c:e1:2d:6a:11:5d:82:73:1a:c8:49:ea:
         4a:f4:c6:a8:5d:c3:cd:71:02:e9:2b:ad:4e:fd:05:a2:e8:3b:
         e0:6b:05:02:a0:38:af:37:a9:42:2b:f5:52:b1:c2:78:fc:eb:
         90:75:c8:a2:77:8e:75:ef:f9:24:11:1e:18:02:93:3f:a5:d5:
         93:fc:69:33:36:4e:b4:e3:91:e1:bc:7f:2e:c2:0c:c0:73:a7:
         95:bb:eb:71:73:f2:48:e2:3f:34:b8:96:7b:ce:fd:b4:63:f2:
         83:cf:c6:74:25:73:ae:8e:61:c5:a6:ed:63:17:96:73:c5:55:
         29:2d:8a:34:fb:c4:e5:68:d5:d4:dd:9f:2f:8e:dd:09:95:a7:
         ed:0b:0f:e9:b0:49:c6:70:e1:0e:e1:9a:f1:3c:ba:e9:29:5c:
         fe:fa:d0:d9:42:5e:d4:29:6a:0a:70:f5:71:98:3b:8e:ce:1d:
         ed:f5:e0:6e:74:9e:8e:8a:c5:89:23:cb:7e:53:fd:d8:64:44:
         13:3c:a5:74:bd:1c:e4:30:46:b5:19:f2:19:50:ea:ca:c0:e4:
         80:f9:d8:05:5e:61:76:39:88:a5:ce:a8:71:69:93:ad:de:11:
         4f:6b:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:51 2026 by rpki-client