Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File:                     g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier:          fIGk6Y/p4irBunAamATjZTGOQQ5O4zNpx4rek8u9Gw4=
Subject key identifier:   D8:AF:3D:E2:65:A9:AB:4F:1D:C3:53:A5:C6:B2:0D:9C:43:7F:A1:A4
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer:       /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial:       019EC111F7F66327C682AB09F2F03EB5E3EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number:          18EF
Signing time:             Sat 13 Jun 2026 13:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:40 +0000
Files and hashes:         1: 4otQnggN5_uQC9wKi00qa0eySrY.roa (hash: mMnLCC58FrEpo9AcseP6Ttc1YSWB7rt8x7N2xaBJU6E=)
                          2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: DEZ5/kMSNf8Tr8BL7kXmCf4C5Snk+lBA6GnXD7r/8KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:f7:f6:63:27:c6:82:ab:09:f2:f0:3e:b5:e3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
        Validity
            Not Before: Jun 13 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=d8af3de265a9ab4f1dc353a5c6b20d9c437fa1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:7d:ae:8e:ae:d5:83:7f:a4:2b:a2:3d:24:
                    61:31:ce:b3:58:f8:39:da:0b:30:b3:fc:42:06:d5:
                    3d:6d:08:21:4e:b3:a7:2a:2d:52:ef:80:66:25:94:
                    dc:1a:15:0f:c8:36:f4:23:91:28:b6:12:f3:2f:80:
                    29:5e:14:ca:dd:f5:ba:44:98:ed:d5:14:65:46:56:
                    fd:2a:6e:4e:56:9d:24:fb:17:db:35:d6:6b:51:39:
                    18:80:69:1e:7f:12:f7:c7:29:74:ed:89:89:89:a4:
                    2f:0a:04:51:8c:42:98:b7:3c:5e:ea:85:f2:38:90:
                    11:46:47:89:d5:fc:30:6f:44:ec:cc:87:fc:45:23:
                    09:2d:30:1b:e2:62:6e:dd:82:9c:ae:6e:b9:46:a7:
                    64:91:a9:5b:13:ff:d6:69:fe:40:91:26:42:90:0e:
                    11:f0:b7:10:6f:26:e7:40:59:bf:bc:28:d0:49:cf:
                    73:8f:89:11:e7:4b:87:fc:f0:72:36:68:86:bf:d0:
                    83:36:ec:1c:29:6c:de:01:f0:49:a9:f5:45:83:c1:
                    f9:bf:b4:b9:8a:fc:f9:b5:78:af:2a:eb:8e:29:40:
                    d5:0f:79:0c:ba:c4:cb:19:74:7c:a0:bb:09:81:4f:
                    2b:1e:f6:ec:30:35:02:89:a5:ca:59:05:09:b8:c3:
                    9a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AF:3D:E2:65:A9:AB:4F:1D:C3:53:A5:C6:B2:0D:9C:43:7F:A1:A4
            X509v3 Authority Key Identifier:
                keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:79:3d:09:05:07:93:32:7d:38:e7:79:bc:c4:5e:98:41:4b:
         a9:a2:90:ce:92:d9:67:3a:48:3a:35:27:36:2d:66:11:3c:e2:
         ee:f3:aa:24:0f:f1:99:87:2c:63:f4:0d:2e:86:6d:1d:a8:34:
         c7:e2:a7:a5:61:67:52:c0:8f:bb:9b:60:c6:f0:7d:16:83:78:
         0d:42:2e:68:e7:7c:3c:44:84:c0:42:8b:0d:e2:e3:2a:a4:63:
         e3:72:5f:a7:60:56:26:c1:3c:2d:05:be:9d:5a:9e:3c:cf:c6:
         a1:0e:18:34:ca:2a:4f:ad:9a:08:1f:7d:19:74:17:e0:ce:76:
         69:52:82:d7:4d:f0:16:2b:32:84:14:c0:60:7e:a8:da:78:ec:
         eb:84:21:2d:76:09:ad:aa:25:3f:6c:df:26:7c:7b:4e:a5:f1:
         94:b0:db:b4:93:1c:36:63:b7:29:d3:cd:34:6d:92:af:ad:33:
         bc:d9:0b:5e:8f:cc:c7:b6:76:ce:f5:a4:6b:ed:cc:b6:d1:e6:
         05:c5:75:04:f3:32:91:fc:ff:83:7a:e7:c9:06:b7:eb:56:ec:
         16:77:2a:27:e8:13:3f:18:f1:a0:c2:7e:15:19:34:98:78:22:
         c3:97:38:7d:a1:ce:65:55:23:72:e5:33:2a:b9:51:5d:56:01:
         08:e7:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:11:22 2026 by rpki-client