Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
File:                     v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft (raw, json)
Hash identifier:          s3zPKeM6662F4vkjQ8e30+rDfZLeRKUwVhDsqa2d4/A=
Subject key identifier:   33:AC:CA:E1:2F:98:8C:FE:13:46:FB:01:7F:29:9B:20:67:F1:1F:44
Authority key identifier: BF:C1:E6:D5:9E:8E:0F:12:FC:33:61:B1:71:30:AD:F5:3C:E2:68:72
Certificate issuer:       /CN=bfc1e6d59e8e0f12fc3361b17130adf53ce26872
Certificate serial:       019EC2243E4689599509447F3104625E1039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
Manifest number:          0126
Signing time:             Sat 13 Jun 2026 18:00:15 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:15 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:15 +0000
Files and hashes:         1: V9AvU1-J1GEKPmtrDYXycfLN7Wk.roa (hash: uu21sXMMMyhfsxDU3zzrtXgihjX3PJKzctA9l0OnNNk=)
                          2: v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl (hash: EFkAeEPfY+aMbK7JevTdlO97vOAw1mpJYVF/TJqEZQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:3e:46:89:59:95:09:44:7f:31:04:62:5e:10:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc1e6d59e8e0f12fc3361b17130adf53ce26872
        Validity
            Not Before: Jun 13 18:00:15 2026 GMT
            Not After : Jun 14 18:00:15 2026 GMT
        Subject: CN=33accae12f988cfe1346fb017f299b2067f11f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:b2:49:d3:fc:17:2e:97:33:54:ed:61:bb:
                    f7:d2:70:14:bc:dd:bd:b4:49:a0:09:b7:50:4d:7b:
                    52:31:13:51:51:2b:af:3a:0d:75:33:82:68:ab:b2:
                    49:b6:31:ed:b4:9e:26:65:65:cc:4f:bb:0e:b1:ae:
                    f7:7f:91:fa:1c:2f:b6:a7:a9:c7:bf:04:17:6f:6a:
                    db:54:9d:5c:40:e3:a8:57:68:92:f4:d9:85:47:78:
                    aa:36:df:ac:ff:e2:55:17:c3:b1:15:b3:f3:9e:1d:
                    9b:64:4d:2f:95:05:aa:14:a2:7f:1c:da:d5:eb:5f:
                    5f:74:ad:dc:52:e9:05:7e:f4:b7:59:54:d0:4b:dc:
                    96:fd:ee:71:e0:7c:e9:d3:bb:25:ed:f7:5b:21:aa:
                    28:f5:e5:d0:6f:4a:c5:64:51:c9:a9:d4:13:6d:a0:
                    cd:72:f2:35:2e:36:91:06:9c:31:10:34:8e:22:c3:
                    88:a7:03:bf:11:00:c0:c4:5f:0c:55:0a:61:f1:ca:
                    6f:c2:25:34:51:83:88:93:d2:38:63:4b:ed:92:7c:
                    a5:a5:99:65:40:80:a8:ee:f7:a0:23:65:27:3a:dd:
                    6b:e9:19:e9:f0:20:de:47:02:f1:7a:40:8e:50:90:
                    4a:4d:31:31:ac:cd:cf:4c:76:e8:4c:38:ea:d7:94:
                    72:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AC:CA:E1:2F:98:8C:FE:13:46:FB:01:7F:29:9B:20:67:F1:1F:44
            X509v3 Authority Key Identifier:
                keyid:BF:C1:E6:D5:9E:8E:0F:12:FC:33:61:B1:71:30:AD:F5:3C:E2:68:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a0:24:ce:cd:52:0b:4d:80:15:d7:63:5b:11:f1:8a:5b:90:
         1a:17:23:a5:8e:07:00:19:5e:e2:d9:c7:3e:eb:f2:f7:52:a5:
         ac:35:4f:67:d5:f2:b1:50:d9:29:ea:27:eb:32:a0:1a:f3:90:
         13:6f:a6:5b:0f:39:9d:3f:23:97:ee:6e:a9:85:a1:8a:15:59:
         b6:64:7b:d3:32:5f:45:75:99:a0:b4:f5:07:dc:27:02:cf:82:
         68:e0:ca:0b:47:27:c5:8a:27:d6:36:52:61:d8:9d:6e:f8:63:
         f9:cd:7d:47:fb:82:08:9e:fa:11:04:0f:84:64:62:b0:f6:37:
         8a:fb:91:1a:8e:ad:50:e5:0d:2d:0c:3b:84:74:92:6c:b0:48:
         85:9f:f3:4d:e5:01:7f:7d:e8:5e:20:d8:b0:18:a3:67:08:56:
         21:b7:5f:6b:d9:0a:12:5c:54:a7:02:46:b6:d8:c7:e8:f2:c6:
         d1:07:ca:56:fd:c9:a4:46:48:d6:38:22:28:e6:72:36:05:01:
         0e:6b:49:72:b9:39:39:4d:56:80:06:65:8a:4f:13:f6:79:35:
         18:8f:82:ae:46:6c:9a:7f:50:89:1c:f3:4e:e2:2c:6f:f7:e6:
         e9:89:ca:0f:a1:c2:ad:b3:06:49:0b:d7:07:4f:45:af:79:4f:
         08:f6:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:18:17 2026 by rpki-client