Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File:                     E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier:          gJjSqdKbDjmuwAMzAZfsbRuzqm2ZaDViUvhWzvGhaII=
Subject key identifier:   8A:B6:AC:17:C7:04:38:92:53:A1:A4:1C:74:84:B7:0E:BE:F1:A2:94
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer:       /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial:       019EBEECEA965538FF2EC3E5875D8357B08E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 03:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:57 +0000
Files and hashes:         1: 4H7cLZ6KiTbPw85TsPK0UjZTTGk.roa (hash: tVH6e7cYLN0f9K/raOQzGrbNIWG9CoxnIdfOseQ+WE0=)
                          2: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: JQ7iLFyxY/M/5Hs4GrZHTXP7fdI1l6TTHivbXzIRwrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:ea:96:55:38:ff:2e:c3:e5:87:5d:83:57:b0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
        Validity
            Not Before: Jun 13 03:00:57 2026 GMT
            Not After : Jun 14 03:00:57 2026 GMT
        Subject: CN=8ab6ac17c704389253a1a41c7484b70ebef1a294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:3b:f9:6e:b9:c3:62:55:90:06:08:28:58:
                    01:10:a3:1d:29:d5:c4:bf:4b:fd:5b:11:a7:a4:78:
                    33:8c:a7:89:87:7b:ea:37:7a:39:d9:d9:c0:80:a9:
                    7a:13:55:7c:dc:27:3e:bf:e2:4d:96:dc:79:08:3c:
                    22:42:b8:72:9a:82:8a:78:14:7d:60:e2:70:3b:30:
                    03:06:11:d6:51:9b:d9:21:de:d9:10:e4:ad:09:16:
                    20:fc:ff:75:cd:06:ff:05:49:c4:06:32:7b:e8:c0:
                    9d:9e:0a:90:b4:73:94:d3:11:09:61:d1:fd:12:09:
                    19:b8:9f:59:4d:44:5c:6c:a4:72:ce:ab:e8:35:42:
                    d3:4d:52:78:7e:88:da:cd:fd:a0:a8:6e:d8:7d:a7:
                    64:d3:a5:7d:39:8e:07:19:47:bb:d1:0e:78:99:b0:
                    f9:b0:65:b6:a6:5c:d7:f1:28:f8:90:6e:27:8a:aa:
                    f5:84:22:67:d6:08:42:b7:8d:91:ee:b6:f7:1b:8b:
                    68:0c:e7:8d:16:9a:c1:10:99:cf:ab:13:50:8a:f8:
                    70:3d:dc:a8:72:0b:0d:d7:c1:93:ad:36:01:5c:43:
                    43:01:3b:97:06:7f:1c:81:51:2f:c1:00:b5:8f:ff:
                    5b:b1:df:a8:5d:b6:49:67:9b:43:f0:be:fb:de:98:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B6:AC:17:C7:04:38:92:53:A1:A4:1C:74:84:B7:0E:BE:F1:A2:94
            X509v3 Authority Key Identifier:
                keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:65:f0:d8:0c:75:4a:25:8a:d9:d4:33:12:c7:e2:25:d5:67:
         9f:b4:1c:64:08:bd:32:30:d8:8d:6c:b9:ef:a9:ff:85:92:bc:
         f9:8f:bb:40:36:20:9c:ca:7e:05:5f:e6:29:05:9d:cc:eb:96:
         c9:89:ae:4e:57:b7:5c:42:bf:93:85:5d:f1:6d:70:fa:ac:2c:
         a8:89:90:33:42:2f:a8:6c:6d:47:81:ee:02:9d:1a:18:f4:8f:
         d8:cf:23:94:f1:58:8e:78:d9:86:be:4c:ee:0f:03:d7:60:bb:
         88:74:80:e0:70:a7:9b:99:75:a3:85:9c:b8:09:77:a7:1e:fc:
         86:43:77:a2:4a:2a:5a:37:d0:7a:4c:cc:3d:5a:a8:68:da:59:
         83:28:cd:bf:c4:04:50:3f:43:e7:6b:b3:81:e5:5c:c9:67:73:
         e7:1d:78:6f:d3:81:5b:46:c2:10:14:2a:a2:c7:f3:67:89:71:
         04:4b:b3:90:7e:81:ca:3b:a6:1d:ac:ce:db:fc:e6:4a:e8:61:
         ea:f7:29:38:bc:8f:bf:2e:16:e1:b6:e8:93:b1:4f:2e:67:07:
         1c:58:bc:3f:c7:fa:41:cb:48:9b:18:88:60:19:6e:34:f2:f3:
         47:07:ac:8b:0e:30:ce:d7:bb:b5:82:61:53:38:46:e4:c4:de:
         23:86:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:35:05 2026 by rpki-client