Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File:                     ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier:          JOjT+fsEVOBiNgDYoOPC8YkgxJF1JnlmSylkhyR6dbs=
Subject key identifier:   CC:85:AC:78:35:7F:F8:87:3A:E7:BF:70:A2:B1:82:B8:C0:AF:1F:46
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer:       /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial:       019EC300A3F6BA2776B5D12022A3A8E074E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number:          1916
Signing time:             Sat 13 Jun 2026 22:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:59 +0000
Files and hashes:         1: FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa (hash: arAr0Lk0kEre21H8drvKyvd7aUFHvFqu0QRUk2zIk0Y=)
                          2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: CyuuZ1o8hZQxLFwlkpAnuaPzVs7nLcq9LQVC346HFb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:a3:f6:ba:27:76:b5:d1:20:22:a3:a8:e0:74:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
        Validity
            Not Before: Jun 13 22:00:59 2026 GMT
            Not After : Jun 14 22:00:59 2026 GMT
        Subject: CN=cc85ac78357ff8873ae7bf70a2b182b8c0af1f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:2a:2e:8e:f2:05:91:39:5f:4e:d8:de:3a:
                    b5:67:2d:51:27:5f:43:99:c8:56:60:bc:ce:0d:8b:
                    80:14:b3:9b:2e:d9:e3:cb:89:48:b0:99:7a:aa:fb:
                    c6:6a:61:e0:12:a3:51:68:60:8f:84:48:05:a4:f0:
                    ca:31:76:42:10:59:f9:d3:48:11:c0:82:82:a8:b8:
                    d7:7a:be:59:38:fd:13:9d:af:81:31:36:b3:cf:42:
                    f3:a2:2f:2e:78:3d:dd:36:00:e5:a1:6a:ad:a0:1e:
                    4e:2e:03:c1:8f:ea:b8:86:67:91:d6:92:d8:53:f0:
                    63:10:8d:aa:cb:92:ee:f4:ab:ca:8b:4f:1c:4b:cd:
                    d9:b5:c9:81:c5:52:ca:17:8b:f2:28:36:7f:e8:e5:
                    2a:68:50:12:33:a4:31:f1:b6:dc:22:0c:f4:ad:1b:
                    ba:81:2b:11:e2:7d:8e:15:d2:e2:1e:b0:cf:66:0f:
                    71:42:db:52:24:35:9c:1f:82:e3:95:50:30:5c:5a:
                    b2:47:b1:14:78:4e:a3:c4:62:4f:e8:4b:a7:7a:bb:
                    cd:b7:7d:7c:c3:86:d6:88:9e:a1:e6:35:b8:2b:86:
                    84:42:23:47:12:ca:25:58:93:bb:9e:05:6b:0d:61:
                    81:64:d2:0d:58:10:ed:69:08:bb:38:49:06:5a:0c:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:85:AC:78:35:7F:F8:87:3A:E7:BF:70:A2:B1:82:B8:C0:AF:1F:46
            X509v3 Authority Key Identifier:
                keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:02:67:81:7b:10:9e:2b:aa:ae:4a:92:31:e7:d9:00:ff:ef:
         af:1c:c3:23:87:5f:0e:a1:8c:f7:3d:39:72:74:cd:8b:97:34:
         7e:bd:49:36:03:d7:66:3d:56:10:f5:4c:f0:1c:d6:a0:3b:f8:
         ea:3b:3f:53:3c:ad:ce:f8:7c:58:18:36:a2:03:69:c3:0d:44:
         3d:40:fa:82:52:9d:6d:b8:31:f0:fd:14:9c:86:df:7f:8a:4a:
         64:3d:0d:d8:c4:9f:53:dd:b3:06:1a:a1:db:8a:e2:11:76:38:
         f0:13:b7:74:3c:2b:e1:76:01:a3:79:6c:15:b9:24:5d:fa:06:
         64:70:40:1f:fd:54:62:3d:6f:d6:97:5f:2c:38:6b:9e:62:09:
         29:3b:fe:46:43:7d:a9:da:8a:a2:70:78:bf:20:6e:ac:43:d2:
         5f:08:e3:25:26:45:a4:24:ce:a2:be:aa:ec:f3:27:1f:2d:5b:
         a3:19:ba:3a:41:66:42:07:b4:78:27:fe:71:71:6b:00:98:94:
         76:3d:a6:74:c8:44:fa:8b:5b:de:04:b9:36:56:86:8e:d8:a1:
         7f:29:20:f6:3c:06:78:5c:ca:16:c9:00:5c:1c:04:9f:eb:81:
         57:08:72:f7:b3:bb:ff:28:4f:ab:65:de:8b:84:6e:8c:33:b7:
         58:4a:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:20 2026 by rpki-client