Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File:                     p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier:          GcRNLdijVmZd/GPjJkKg0cajoXUXrSKwW9o7QVMlEKI=
Subject key identifier:   8C:4A:E3:B5:3E:E0:87:34:42:53:6C:2F:CD:61:1E:6F:8D:47:4D:BD
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer:       /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial:       019EC3A58142E195F9586623903D50D32A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number:          09B0
Signing time:             Sun 14 Jun 2026 01:01:04 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:04 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:04 +0000
Files and hashes:         1: JWCAfjjh5zsM89EhT5JBBpHJm28.roa (hash: +D0zzkFTWspOvvhGzzd00EXqwAQzFC2yhaPbQUOWqZU=)
                          2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: 0qPIdZYSCFfdcwob/etfGP5y91cgIMLIc/g/KKQSTmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:81:42:e1:95:f9:58:66:23:90:3d:50:d3:2a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
        Validity
            Not Before: Jun 14 01:01:04 2026 GMT
            Not After : Jun 15 01:01:04 2026 GMT
        Subject: CN=8c4ae3b53ee0873442536c2fcd611e6f8d474dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:7c:c1:46:18:49:4a:60:ac:88:dc:25:6d:
                    8d:aa:df:d8:80:e2:ec:d3:6e:3a:b0:bf:db:6a:27:
                    df:3f:2c:7e:ae:1b:c9:b5:d0:3d:ac:e7:52:a3:bb:
                    a3:90:0e:29:3e:fa:09:a4:9c:23:06:16:ac:4a:ea:
                    7b:b0:d8:b7:a1:75:49:4a:3c:aa:6e:55:df:22:03:
                    76:07:6b:67:95:60:6e:0b:94:3b:a6:de:d5:20:97:
                    28:42:01:c4:1f:29:a5:82:32:bb:b9:e2:52:01:37:
                    65:49:48:7c:36:e7:97:e7:ab:5b:c4:ac:fd:7d:b4:
                    a3:94:66:d8:a6:6b:e0:e9:ed:d2:ef:7f:29:63:7b:
                    d5:04:f6:b8:ea:d9:e6:ce:24:fc:43:d4:4a:77:95:
                    6f:2f:d0:ea:db:1a:9d:1a:0c:2a:c4:eb:da:d3:12:
                    30:cb:35:8e:cf:54:32:4f:5e:5a:eb:29:c5:d7:4e:
                    ea:c3:a8:23:01:28:14:ac:46:88:fa:7e:91:33:1d:
                    a0:b0:0d:d3:d7:94:65:5a:52:81:30:c7:ff:e3:cb:
                    88:fa:58:65:c0:17:03:5a:45:5e:58:c3:1f:d3:f9:
                    2c:b6:97:89:65:a9:1a:64:5d:8c:0d:2e:91:01:15:
                    23:76:0a:6c:ee:08:55:f9:92:6c:91:4c:f1:c8:6e:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4A:E3:B5:3E:E0:87:34:42:53:6C:2F:CD:61:1E:6F:8D:47:4D:BD
            X509v3 Authority Key Identifier:
                keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:94:36:6d:cd:e2:6c:bd:5f:12:b4:eb:f7:96:4f:fd:6b:21:
         e7:84:d5:53:1b:f6:d3:40:e9:6d:0e:66:aa:97:fa:e4:d9:96:
         b3:de:8a:31:78:f6:f5:f2:55:04:62:23:00:02:0c:15:69:73:
         bc:65:85:1a:a5:54:6c:01:d2:1e:f2:6c:10:87:89:1c:ab:94:
         c8:d8:24:dc:5a:71:bf:1c:fb:2d:12:65:77:23:37:c5:43:b4:
         2d:d1:09:48:93:98:eb:7e:2c:26:11:63:f8:e1:33:2d:9b:1e:
         74:ae:7a:3b:01:1d:e8:89:06:4d:2d:27:76:05:8d:ae:01:7d:
         73:a0:36:9e:60:f1:53:ee:fe:27:4e:83:d4:e6:ac:e0:94:47:
         e7:b0:a2:f9:62:16:18:c6:98:20:be:de:10:45:05:2a:c3:53:
         c3:b8:4e:d5:0f:7d:fb:83:5e:c5:41:e4:57:9f:9e:2d:88:98:
         9d:8d:0a:6a:25:19:87:86:59:06:79:23:2c:13:a3:2f:6a:b2:
         8e:ad:8c:57:ef:08:c3:74:55:0a:ad:b3:73:4a:bb:b1:e5:a0:
         ea:58:f8:db:69:6a:8b:7b:64:bc:a2:ca:c4:14:ac:88:39:fd:
         73:55:6f:6f:c5:e7:ed:f9:89:6a:b6:3c:61:e5:03:04:b9:1d:
         56:99:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:34 2026 by rpki-client