Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File:                     CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier:          4ynDoy1fb9yk0SjJAcTdd0+5FdggXYWU4TQ78dj1SeQ=
Subject key identifier:   4D:94:88:6F:F8:C4:86:4D:13:07:96:48:7D:62:A4:DE:CC:4B:26:B7
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer:       /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial:       019EC06DCBB6DAE2D418BE39B82013C5CC2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number:          143F
Signing time:             Sat 13 Jun 2026 10:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:21 +0000
Files and hashes:         1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: 940o8GqwWiovZKDAw+2HgfZXtvnrDou6TufYeSudws4=)
                          2: Kr82PzCvD4Fk7jNwoZ0-iCZtxTE.roa (hash: XM1J6jO/D+cqiYMXDlDXyv/SlFsPZ20nk+XVsCUihVk=)
                          3: YMptQVK4HH5vDul8RiYPM5BA3i4.roa (hash: 6IlPlDIrNnILGNV4XcoHgemdeW+kMLsTXUGyZB/VOA8=)
                          4: cENwAzhw60-ikgeBP0Wk-X-TPRQ.roa (hash: WKFy5CgMQiAy0y2WtEt+U7yH6EI/ABaKojXrx+8izJQ=)
                          5: n35REyNvGDkbhlXQDkgILr0DQJo.roa (hash: XOxfruBgBSVJzwCvp7t1Dh63tFF/2A3jPjy2stEx9vs=)
                          6: sLW9QUPl2doaDpkVMgscvJSFTPA.roa (hash: Gq/TJtCE6wPwEUtIEF1+84a/2wA7uiRfAtKneXSPPHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:cb:b6:da:e2:d4:18:be:39:b8:20:13:c5:cc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
        Validity
            Not Before: Jun 13 10:01:21 2026 GMT
            Not After : Jun 14 10:01:21 2026 GMT
        Subject: CN=4d94886ff8c4864d130796487d62a4decc4b26b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ed:22:99:22:71:6b:07:c0:4a:be:a5:95:3f:
                    1c:1b:76:74:ad:59:80:22:50:7c:f2:62:a9:27:f1:
                    01:1a:98:79:4d:6b:94:89:10:bc:d7:bd:aa:68:ba:
                    8c:e5:71:a6:fa:a0:22:f4:90:65:1e:fd:52:34:ce:
                    2b:1e:30:d0:2d:8a:91:ce:b5:3b:2d:be:c9:73:c2:
                    27:07:c5:78:ea:2d:65:56:d0:03:ea:51:81:97:b1:
                    b8:43:e6:71:f0:63:71:e7:f3:18:1b:4a:94:44:15:
                    9a:a6:d6:a8:c1:6d:9d:50:f0:3f:ff:b3:7f:76:aa:
                    b1:f6:69:90:f2:ad:c2:92:6d:49:de:43:5a:54:81:
                    29:c0:48:55:28:ec:f1:f4:61:52:cc:0b:6a:da:e9:
                    aa:eb:0d:a8:81:cf:97:73:93:ba:a7:1d:02:71:7c:
                    70:5a:b8:59:7b:0b:3b:b4:25:b9:79:43:92:5f:7e:
                    1e:03:a7:ef:80:c0:95:38:27:98:46:b7:42:64:7e:
                    f8:99:b0:71:1c:92:57:10:9d:d1:16:5e:2c:94:ed:
                    cd:78:f5:a7:38:d8:65:6a:79:55:6c:8b:1c:a5:6c:
                    4a:21:7d:be:15:dc:f9:db:a0:cb:9d:46:52:3a:ca:
                    58:eb:03:be:67:d0:5c:6c:32:78:50:f2:07:d7:e3:
                    6f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:94:88:6F:F8:C4:86:4D:13:07:96:48:7D:62:A4:DE:CC:4B:26:B7
            X509v3 Authority Key Identifier:
                keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ac:82:b7:d0:59:2c:d5:76:f4:e5:f0:94:94:4b:7f:56:e3:
         05:9c:80:f1:e3:8b:fc:f3:52:5c:68:f5:b2:c1:16:e7:c2:07:
         b1:2e:cf:7d:d5:e8:26:d7:ea:9d:d2:75:c3:69:f6:8f:85:d5:
         d8:ac:d4:a0:df:89:e8:06:d1:14:d7:15:20:c8:ec:41:48:d3:
         3e:cc:3a:42:e6:3c:12:ed:b3:fc:26:e3:32:f0:b8:88:c1:71:
         53:23:16:20:3c:f5:cf:8f:07:49:71:e0:7e:71:23:97:63:10:
         56:54:f9:04:ab:7c:2b:17:e7:8f:38:65:6e:5f:82:66:8e:a0:
         31:13:c1:19:6f:14:ad:10:c2:a3:5d:2a:96:e1:91:29:f9:07:
         41:02:63:17:fb:3a:b2:a3:e8:db:a5:0f:87:98:cb:2e:67:5a:
         1c:5e:38:f8:8f:c1:30:36:3d:a6:06:c5:b1:40:bc:84:e4:f9:
         b9:19:f5:eb:0a:4b:7f:7b:b1:93:42:1f:7a:a5:00:be:cb:9f:
         52:8b:e4:81:de:41:9c:d8:96:d5:b4:38:36:95:b2:d7:a5:fa:
         f4:9c:4a:dc:bd:3b:c1:4f:04:79:ce:da:d1:c4:ba:9a:e9:99:
         ea:cb:d7:45:63:bb:9d:74:4d:29:06:c4:fc:4b:71:83:e6:5f:
         09:39:98:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:22:07 2026 by rpki-client