Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File:                     v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier:          y/BMr2VMsYEsAXO/QxgWH8+SiER4osRaqh7czT03UqM=
Subject key identifier:   2A:C4:80:EB:72:A9:99:D3:B0:8D:C9:75:E0:F2:5A:33:D3:28:AE:C5
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer:       /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial:       019EC2C96548F8096F789E2DFC5A0C95C66F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number:          09F4
Signing time:             Sat 13 Jun 2026 21:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:39 +0000
Files and hashes:         1: bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa (hash: Y3ICHbrh8hnLCQzZOKLQPyzkmRXdU5pC06Mn07MxiU0=)
                          2: lfMrkwLp7hAwWVEeABAkFyae20g.roa (hash: /+dZbciWTAdNljkvx7xP06l/dJfOWpz054ogX8e4mqs=)
                          3: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: u+VAoP/RNDnjLfZGCgbrXPfgpksKGakgm+KLvpNKlv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:65:48:f8:09:6f:78:9e:2d:fc:5a:0c:95:c6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
        Validity
            Not Before: Jun 13 21:00:39 2026 GMT
            Not After : Jun 14 21:00:39 2026 GMT
        Subject: CN=2ac480eb72a999d3b08dc975e0f25a33d328aec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:10:32:00:70:fd:0f:a4:3f:5a:c2:8d:f0:fb:
                    55:98:47:fa:21:78:6d:53:b3:b9:2e:02:c7:3d:38:
                    a7:77:09:5f:92:df:85:75:cb:47:f4:69:8e:af:64:
                    49:d8:9e:7f:a0:bd:8c:6f:65:f7:c3:11:50:04:ba:
                    37:3e:14:bb:33:12:23:7f:56:84:60:2d:80:20:7d:
                    8d:8b:02:fb:58:29:0a:06:e1:d9:e7:73:9f:be:71:
                    4e:e2:04:58:ae:57:85:31:a8:95:a9:b4:a9:15:4e:
                    96:f8:74:86:f2:7a:9e:21:43:8f:cf:ca:29:eb:ea:
                    2e:31:d7:f1:2d:22:8f:e4:fa:f0:f2:d6:08:79:2e:
                    a9:26:db:01:0c:02:fb:f3:71:dd:11:8f:d8:03:d8:
                    44:44:f0:57:35:d9:33:8d:04:ea:70:14:ef:26:62:
                    c7:2c:c8:77:b0:c6:56:3e:b1:0e:3c:c8:e1:78:15:
                    28:64:11:d7:9d:ff:8c:ec:f6:3f:a7:b6:7a:13:25:
                    4b:ae:7d:3d:a7:5a:67:37:d8:06:d6:f1:6b:09:c9:
                    ee:cf:63:6d:7c:27:da:0d:4c:1d:dd:aa:9a:b7:32:
                    eb:b8:36:2e:7d:ee:ca:8e:21:00:c0:9f:51:06:26:
                    07:36:77:cf:1d:76:01:7c:ae:aa:69:15:5e:60:b8:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C4:80:EB:72:A9:99:D3:B0:8D:C9:75:E0:F2:5A:33:D3:28:AE:C5
            X509v3 Authority Key Identifier:
                keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d3:fc:35:0e:29:6f:f8:b0:4d:69:28:4e:ef:04:2c:7a:e4:
         9a:66:7b:7a:d3:fb:22:17:8d:d0:80:df:76:f4:d8:c2:aa:c9:
         ae:47:d4:62:1b:91:21:43:5e:66:c2:bd:fe:64:e3:8a:6f:78:
         a8:a2:49:5b:e1:08:62:76:29:d3:29:d2:e6:f3:a2:43:88:32:
         c0:e5:27:a0:da:56:be:87:cf:59:8e:93:4a:4c:7e:f1:b6:d7:
         c0:1f:77:c1:69:6b:9b:fa:ca:3b:1c:28:71:8f:0d:1c:29:14:
         93:e7:1a:7a:4c:40:86:70:3f:c9:b4:f9:2e:a1:45:3d:7f:b4:
         41:d2:7e:7f:99:0a:41:5e:70:34:6c:67:d8:d6:c4:db:25:49:
         60:63:de:f6:c3:2b:e7:6b:bd:3f:f0:76:94:8d:a2:0d:43:9c:
         06:3f:64:b4:82:f2:67:e1:71:df:f7:48:0e:56:4a:5a:1d:bf:
         ae:7e:c3:fc:ec:a6:67:00:c0:dc:d7:83:6a:ad:6c:58:ef:e9:
         5d:2d:80:e6:ed:ca:06:a4:da:d6:58:eb:72:ef:32:05:02:78:
         f6:be:d0:d9:01:28:5b:7e:bc:68:7c:9c:7f:91:ce:e6:6b:ea:
         f5:a3:90:10:3a:63:7a:dd:e0:5d:65:88:f5:c1:fa:1e:0c:ed:
         ed:fb:e4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:40:31 2026 by rpki-client