Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File:                     D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier:          ggAEYYArp1U91iSkpp/XfVpKAwcCZwHFC8Bty7CB7u0=
Subject key identifier:   5C:F0:8A:4B:06:F8:7E:23:99:33:38:D2:81:84:A0:2E:8E:25:2E:7E
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer:       /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial:       019EBE7FA3947634915CEFFA742679BF4BD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number:          0FEF
Signing time:             Sat 13 Jun 2026 01:01:36 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:36 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:36 +0000
Files and hashes:         1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: PzUFFg7nSRRQN1YRuvd44S3jTyh5xVfHfPJe7UrtoBc=)
                          2: jK9vJkC-9INkg3kH606wmZpM3gY.roa (hash: pPtcnLjluAlTQa5sDa1ndB+L+idIHW8vl3l2EMrfHcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:a3:94:76:34:91:5c:ef:fa:74:26:79:bf:4b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
        Validity
            Not Before: Jun 13 01:01:36 2026 GMT
            Not After : Jun 14 01:01:36 2026 GMT
        Subject: CN=5cf08a4b06f87e23993338d28184a02e8e252e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:61:34:e2:f3:43:a8:22:81:74:6c:bd:66:
                    18:ab:12:0e:bd:c1:ac:a2:e2:b5:39:f2:30:08:03:
                    3a:5b:57:f3:57:0d:12:6b:50:6a:19:f2:80:95:2e:
                    2c:d4:23:d0:d4:b7:48:e3:ba:0f:49:24:1c:97:47:
                    fa:b4:a5:6a:91:be:68:6b:52:31:fe:76:71:2e:63:
                    78:ee:82:65:a8:c8:86:46:5e:92:a3:62:4b:ba:f2:
                    7d:35:74:64:8c:1e:7b:80:9d:d6:a8:de:4d:0a:e1:
                    8e:4a:01:27:26:40:75:58:4b:f5:f2:ac:86:68:3b:
                    3c:4c:07:26:4b:2c:aa:8d:fa:f7:03:11:88:01:bf:
                    c5:ca:c1:72:90:28:1e:83:bc:6e:f8:52:55:07:d5:
                    f9:8c:44:09:3c:a7:2e:f2:1e:01:a3:1e:e0:49:ee:
                    8c:c1:9a:6b:e2:06:a6:99:83:33:98:68:2b:c4:0c:
                    42:2a:65:ce:66:12:1e:eb:a7:54:ec:54:4f:62:bd:
                    ec:10:87:96:c0:12:d0:b5:c3:7d:62:15:dc:94:64:
                    97:b0:8f:3b:e7:42:55:83:0b:42:bf:b9:17:e9:e1:
                    fd:0a:61:13:06:ad:9e:7f:7d:5c:9a:7c:0e:0f:40:
                    68:58:ea:2d:8c:e9:1e:0e:83:05:9e:7d:6f:09:30:
                    95:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F0:8A:4B:06:F8:7E:23:99:33:38:D2:81:84:A0:2E:8E:25:2E:7E
            X509v3 Authority Key Identifier:
                keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5c:67:3e:6f:c9:d0:4d:01:85:52:da:fb:ba:fe:5f:8c:20:
         cd:b2:ac:45:07:ea:5f:ad:86:d9:be:39:6b:ae:73:58:92:82:
         2b:8c:db:b8:b6:85:92:15:80:c6:f1:e3:31:ca:26:6d:03:0d:
         6b:19:76:51:7e:c6:7e:e8:a2:be:92:22:43:38:7c:6f:84:80:
         ce:ec:de:b7:2e:e4:87:6c:99:84:a5:76:ca:a6:fa:0a:11:5e:
         fc:64:c1:12:55:2d:01:f0:c3:a0:08:49:fc:2f:b9:4e:d3:cd:
         38:c2:ba:e2:bd:4e:75:4d:0a:86:60:0c:f0:b5:4b:e6:fb:bc:
         0a:fa:fe:aa:07:3f:67:9b:ed:71:bd:d7:02:5c:b6:30:89:f4:
         27:49:4e:0e:b8:49:c4:44:3f:e5:e0:57:77:ac:90:4c:01:1c:
         cf:ef:a9:9c:0d:27:ee:c7:19:a0:00:53:99:52:64:1b:47:92:
         61:67:62:31:6d:ef:5d:aa:3f:57:e4:f3:f6:11:a3:f2:5f:28:
         fb:85:2d:ef:00:fb:2f:5e:cf:59:83:f3:68:43:dd:3e:7f:38:
         b6:41:9e:6f:d5:0a:77:51:fb:8e:8e:54:a4:4f:34:49:7f:9d:
         9b:33:5c:ab:16:66:98:cb:8a:ea:bd:d5:1e:7b:24:c9:0e:1b:
         e3:05:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:50 2026 by rpki-client