Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File:                     dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier:          cSOd8H6eRTEUfGRyfq4QHBNhlL6p/35NinKxj1Vw0Mc=
Subject key identifier:   68:38:56:CD:42:71:0F:67:A7:DD:4E:7B:E2:DC:6F:1B:93:F2:07:AB
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer:       /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial:       019EC06DAD45F22E30FE2FAB1DB359FE1231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number:          0B84
Signing time:             Sat 13 Jun 2026 10:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:13 +0000
Files and hashes:         1: Vqb24fiotLZOBuA1uv8cf7EHAOs.asa (hash: kL0LJuS+v//eRSQwWEOD6aFsJj9u86Nma+Ehm7jeQWc=)
                          2: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: WxgJqX09jOQGl81n/J2UmLi5BaulZ3JACEkrg/7w7hE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:ad:45:f2:2e:30:fe:2f:ab:1d:b3:59:fe:12:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
        Validity
            Not Before: Jun 13 10:01:13 2026 GMT
            Not After : Jun 14 10:01:13 2026 GMT
        Subject: CN=683856cd42710f67a7dd4e7be2dc6f1b93f207ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3e:36:42:eb:85:2f:2e:4b:6b:be:66:72:c0:
                    47:b4:a7:06:21:77:f5:0d:bc:22:db:fd:77:e3:9d:
                    44:b1:1f:61:01:bb:3e:2d:e0:18:71:2c:28:07:30:
                    74:36:3f:4d:27:0f:1d:4a:ae:f3:c1:dc:a3:24:fd:
                    1f:e8:2d:44:09:6c:13:ac:d7:87:5b:77:08:ed:03:
                    4b:c5:7d:31:e8:eb:1c:2c:78:bf:13:62:f7:47:5f:
                    c2:09:51:a8:2e:28:9e:be:e9:75:dc:62:4c:14:02:
                    c9:2c:78:08:04:37:44:26:aa:bb:8e:8f:8c:46:e2:
                    ed:16:3b:93:11:05:6d:45:37:5f:a3:e5:01:f4:5a:
                    60:09:b3:7f:f7:fc:cd:fa:3a:b6:d3:2d:62:46:ab:
                    f6:79:ca:b0:22:08:31:f0:1a:d6:d0:5b:99:45:ce:
                    4d:75:cd:7b:82:3f:05:71:4d:83:1b:86:81:fa:80:
                    38:a7:77:dd:de:df:23:36:ee:45:a4:47:00:74:54:
                    51:ae:4e:b8:0a:26:d2:3e:50:78:a3:81:7b:f2:36:
                    10:91:de:f5:12:1f:3a:f2:6e:63:8e:5c:19:74:f5:
                    68:5e:2c:65:23:8a:8e:26:bb:bf:f4:e4:c7:0a:15:
                    32:bf:63:ef:eb:b3:a3:52:e0:f7:88:be:5c:88:91:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:38:56:CD:42:71:0F:67:A7:DD:4E:7B:E2:DC:6F:1B:93:F2:07:AB
            X509v3 Authority Key Identifier:
                keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b4:8b:2c:c6:6d:ca:49:32:ad:95:48:2b:6b:0e:ec:e2:5d:
         0a:41:d7:47:c7:85:3a:ff:f9:65:65:c2:b5:fb:a2:e0:e0:1e:
         6a:50:3e:e6:a2:5e:8b:bd:38:8a:1d:f9:e4:7f:44:cc:8b:88:
         f7:57:95:bc:cd:d5:64:91:72:9a:0f:b3:56:21:75:e0:50:35:
         a7:86:d5:24:a7:60:14:e0:53:02:e5:6f:ec:2a:6c:9d:0d:17:
         72:be:24:6a:6b:99:83:0d:53:f8:e3:42:e5:8a:6e:f5:de:c6:
         9d:68:07:86:d8:1a:07:f9:48:7a:93:16:af:54:e2:a4:71:a5:
         72:40:90:99:2d:51:06:24:cc:e1:e2:7a:e9:43:d5:a6:f9:f5:
         89:39:13:52:8d:ab:fa:27:44:d7:34:18:ba:24:7f:2a:30:6e:
         72:43:69:44:86:41:71:3c:35:a0:48:cc:53:09:ed:f3:05:69:
         c3:19:1c:89:fd:64:3a:c1:b1:38:81:fd:82:ef:a8:2d:98:3d:
         6d:d0:0d:03:89:f8:97:ad:d4:d3:89:d5:2e:2e:45:aa:7b:b1:
         ee:b9:b1:5e:ad:a0:30:f1:42:94:3e:11:4e:52:6f:08:a9:fd:
         24:45:40:83:9b:2d:5d:38:da:c6:83:66:cf:c6:9a:88:26:42:
         ec:fa:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:13:57 2026 by rpki-client