Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
File:                     obUnWAWCwH8MZ29bQj57p9A0mvM.mft (raw, json)
Hash identifier:          WphoCWAmT5Yp4KqfQct65Mvkyug+f8KIlRWBKg74V/o=
Subject key identifier:   76:E4:3B:A0:E0:6C:25:7D:50:9F:E8:DF:A0:06:EB:73:D9:95:A2:39
Authority key identifier: A1:B5:27:58:05:82:C0:7F:0C:67:6F:5B:42:3E:7B:A7:D0:34:9A:F3
Certificate issuer:       /CN=a1b527580582c07f0c676f5b423e7ba7d0349af3
Certificate serial:       019EBF91AED9D6F077926DFEF88711AC7356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
Manifest number:          FF
Signing time:             Sat 13 Jun 2026 06:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:56 +0000
Files and hashes:         1: obUnWAWCwH8MZ29bQj57p9A0mvM.crl (hash: 6usLoCmOwJ01GXBeT2dNpfUi37tXRIVdbZ7bgRcCxKQ=)
                          2: t_ByAeaBQNIrFb5bhmau53EuKWA.roa (hash: AwzAqExXrWOFnUsxmRE0E2eT/V7WcGMDYvuPQOqWltg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:ae:d9:d6:f0:77:92:6d:fe:f8:87:11:ac:73:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b527580582c07f0c676f5b423e7ba7d0349af3
        Validity
            Not Before: Jun 13 06:00:56 2026 GMT
            Not After : Jun 14 06:00:56 2026 GMT
        Subject: CN=76e43ba0e06c257d509fe8dfa006eb73d995a239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:6c:1a:29:6c:b2:cb:3e:3f:a2:35:5c:62:
                    fc:3f:8d:4f:ae:e8:50:ea:af:ef:57:d5:80:e8:35:
                    12:79:fc:71:26:e8:33:4d:89:58:00:0b:5c:3a:bb:
                    79:d1:cb:6c:39:57:e6:b8:94:60:b9:c0:f8:05:8f:
                    54:0f:d3:cf:4d:fa:69:74:c6:63:7c:3e:81:fc:33:
                    ff:22:ef:31:77:73:cf:c2:d7:30:cb:0e:aa:c6:4b:
                    7b:18:e3:69:c2:35:b0:96:c6:27:c0:e7:66:25:31:
                    ef:e5:83:41:a4:e9:ec:01:17:ab:fd:f1:a4:67:3a:
                    5f:06:b7:dc:97:9e:fc:67:5f:0d:04:b2:be:44:0e:
                    87:e1:10:96:09:aa:b5:83:85:5a:1f:28:a1:fc:53:
                    14:d1:da:e2:08:a8:ec:b1:b9:ed:8b:cd:82:9a:35:
                    df:a6:ee:99:f7:09:11:c3:22:99:d1:76:35:e6:79:
                    d2:b6:f5:48:2b:22:10:9b:ee:5b:70:93:61:58:9e:
                    4d:e5:30:4d:d9:06:b2:53:d1:d8:d7:5b:2e:ad:e4:
                    52:ef:ab:10:73:d3:5e:94:ed:e0:cd:48:67:f2:a5:
                    e1:8e:35:cd:00:e4:3e:a3:d0:cf:44:eb:b3:a0:e1:
                    6c:c1:fa:10:d9:53:dc:c0:c9:9d:83:4e:07:14:32:
                    db:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E4:3B:A0:E0:6C:25:7D:50:9F:E8:DF:A0:06:EB:73:D9:95:A2:39
            X509v3 Authority Key Identifier:
                keyid:A1:B5:27:58:05:82:C0:7F:0C:67:6F:5B:42:3E:7B:A7:D0:34:9A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:17:85:61:79:cb:29:91:8b:dd:8b:20:f0:79:f3:1e:06:7c:
         3f:8d:25:f7:7c:88:25:f6:e3:9a:4d:ec:16:90:55:8e:de:6d:
         54:4e:06:7d:84:ce:ff:f0:a0:ae:8f:00:77:59:3b:25:46:39:
         6f:ff:2a:75:9e:96:e1:ac:83:16:b9:49:b4:73:91:61:7c:63:
         88:93:7a:24:d6:97:44:87:e0:ef:4a:5c:c0:ee:49:79:93:57:
         ca:87:3a:b7:5a:f1:30:66:43:3a:0d:77:98:c6:93:74:4b:ca:
         19:a5:5a:c1:74:a9:a7:f5:c0:a9:c9:8a:9b:09:07:43:01:4f:
         44:de:ff:58:47:27:da:3d:b2:96:99:15:44:c3:fa:73:20:c4:
         45:b2:ca:ab:b0:8a:c0:ae:69:98:86:3a:42:31:c8:45:70:7a:
         2a:3d:1e:37:02:4b:2c:40:37:83:5a:f6:f0:32:53:dc:0f:90:
         a8:a2:a3:50:81:cf:c3:3a:aa:fc:4d:2b:58:cf:bc:f6:11:fb:
         fb:e0:ca:cc:9d:7f:e8:62:82:fb:3d:05:74:26:54:69:46:ac:
         48:9f:1b:d8:22:8b:02:12:fb:44:0f:b8:b3:6c:51:29:df:22:
         3f:dd:66:04:5a:69:29:c9:f3:9c:d4:8a:5f:f3:c3:63:3e:83:
         59:19:af:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:30:23 2026 by rpki-client