Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
File:                     IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft (raw, json)
Hash identifier:          P+Bv4vV+8CeCSXESsPq0y42z3RGC74IwajTwkco5CYk=
Subject key identifier:   C0:52:FF:B7:06:19:75:A9:83:F0:94:93:77:23:7B:1E:1D:CB:D5:6D
Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
Certificate issuer:       /CN=2101b6388d6435f54990905382b41dc9675fd490
Certificate serial:       019EBF5B20F4EBE99471D9C57C88148350A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
Manifest number:          07EA
Signing time:             Sat 13 Jun 2026 05:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:20 +0000
Files and hashes:         1: Bb0AlX7LVs8xu9FbBxHR7jZ41sc.roa (hash: 1RAeUNL+1NswFK++fmlLXs7tYc2gvuypR/zGLkI4pFk=)
                          2: IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl (hash: 8rbFZArh933VEwfq7lnKVoKhUd9UUYwUYSTAHnOJ3p8=)
                          3: wuwvCCyqsgM8AhmBamIU1CDvuC4.roa (hash: 7kzHmkdddwIql7JhhvogOzHNgfL2sl/BzbMljE2+YF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:20:f4:eb:e9:94:71:d9:c5:7c:88:14:83:50:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490
        Validity
            Not Before: Jun 13 05:01:20 2026 GMT
            Not After : Jun 14 05:01:20 2026 GMT
        Subject: CN=c052ffb7061975a983f0949377237b1e1dcbd56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:08:8f:9f:da:ad:78:db:b0:30:b3:a2:5f:
                    b6:11:e7:2a:db:84:9f:91:ca:8e:a5:88:2b:aa:32:
                    9f:b0:e9:ea:88:32:84:79:3d:1f:11:6d:cc:2d:cd:
                    1c:da:15:8c:aa:51:fb:aa:d0:10:0b:e6:41:99:24:
                    d2:44:84:4e:75:1f:59:82:68:72:a4:f5:93:30:40:
                    dc:46:33:9d:c3:df:ba:98:1b:8b:d8:39:8b:66:02:
                    d6:05:bc:64:ab:df:84:2e:a0:cb:22:d2:6d:63:e3:
                    67:8d:4f:a3:fe:ea:7b:fd:72:c4:cf:6d:69:1a:a1:
                    3a:c6:ba:33:8a:b1:17:b7:24:ef:c2:1f:69:d4:5a:
                    b9:6a:4c:b7:64:7a:1e:96:96:f3:7d:78:21:a2:dc:
                    0f:8f:63:a7:c5:ca:9d:41:15:87:c3:cf:3d:cf:7d:
                    37:fc:7a:ee:01:7d:41:07:40:b2:d7:a7:f7:8c:30:
                    67:12:de:66:30:d5:87:d2:0c:7f:2e:71:26:f5:14:
                    d8:0b:a1:55:3a:7c:e1:1f:db:5a:b2:d7:fd:6e:41:
                    98:d8:2e:52:61:68:75:58:8a:06:74:84:54:c7:24:
                    b8:d7:99:b8:e4:f7:4e:78:dc:43:a3:cd:0f:7f:4d:
                    11:40:a5:c3:cf:55:b2:e5:ea:0c:6d:ef:40:a8:3d:
                    6b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:52:FF:B7:06:19:75:A9:83:F0:94:93:77:23:7B:1E:1D:CB:D5:6D
            X509v3 Authority Key Identifier:
                keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a6:dd:a4:98:44:fc:b5:74:e1:d7:eb:2a:9c:0e:a9:8c:1f:
         55:92:b4:31:5b:fa:f0:93:94:58:08:95:da:f5:42:4c:35:cb:
         ac:85:d0:7c:85:7c:58:d7:a6:5b:05:d7:31:7b:84:37:90:eb:
         dc:ee:09:19:fd:f8:77:fd:e4:52:24:ee:3c:46:47:7a:c3:86:
         9b:c6:65:d6:f8:3d:c1:6f:92:69:08:03:f8:11:19:81:76:75:
         d6:8b:9c:14:bc:53:5b:5c:fa:74:09:ae:94:3d:5e:3c:64:25:
         c2:fb:f8:99:e4:26:59:6e:54:91:1b:3f:d8:a7:8d:be:25:40:
         00:4c:fd:98:71:d8:6c:dc:c0:2e:b8:e0:c4:3b:95:74:f3:27:
         35:c7:eb:b3:74:0a:72:54:1f:b5:e1:55:76:33:f2:78:06:04:
         a7:d2:62:fc:84:ea:25:22:84:96:51:3f:ec:c4:e3:fd:34:38:
         9e:13:4e:c6:44:fc:67:34:19:80:ff:e5:0c:a6:d1:85:7d:37:
         47:f9:35:ea:e2:a9:d7:f0:55:25:ae:c1:51:7a:54:b8:b6:9e:
         90:f3:53:75:97:8f:70:8e:8c:11:e6:53:79:21:e6:73:05:42:
         90:c9:6d:97:2a:aa:c8:f9:93:bc:57:fb:fa:bf:1f:7c:0b:9c:
         1b:a0:6f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:20:09 2026 by rpki-client