Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
File:                     I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft (raw, json)
Hash identifier:          kFvU+WQ34nMt3SYsDwYFzX4Iby7iIb9g0/7j9K/gnuk=
Subject key identifier:   D1:66:53:64:1D:09:F7:93:1B:8E:52:6A:94:4C:46:5C:7D:86:DC:CA
Authority key identifier: 23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
Certificate issuer:       /CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Certificate serial:       019EBFFF11A2072A39BBC239D18089ABE66D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
Manifest number:          FB
Signing time:             Sat 13 Jun 2026 08:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:24 +0000
Files and hashes:         1: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl (hash: he85j9MF3qvDGAfuJjzJwULSkADC/zQ0+9qSJ3DYtlc=)
                          2: M_CYpRI8SqN2pbVtKePdOnYWUSE.asa (hash: M0fsFeA37g+aMXBHQ8+8jEtPr1DuQjy82Sio4c1x2i4=)
                          3: b1swFPJJREwO7cx297uALIQsAqo.roa (hash: OKc3LjMWMxGzGg+rjr90PHIdb2q9ia63zVSKKzhRN5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:11:a2:07:2a:39:bb:c2:39:d1:80:89:ab:e6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
        Validity
            Not Before: Jun 13 08:00:24 2026 GMT
            Not After : Jun 14 08:00:24 2026 GMT
        Subject: CN=d16653641d09f7931b8e526a944c465c7d86dcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a1:e7:fe:ad:e0:c4:de:32:b2:54:ce:10:22:
                    c3:00:0b:9c:80:13:fa:1e:b4:8f:be:ac:21:27:a0:
                    ef:fb:2b:b0:0a:3f:f6:78:17:ad:91:8e:18:c5:29:
                    56:4d:5b:b2:ba:c9:93:d0:45:46:03:9b:b0:b8:03:
                    6c:c3:51:7d:9e:da:3a:75:b8:04:f4:60:98:d8:6d:
                    91:d5:88:11:4d:16:20:31:0b:16:c5:fc:57:bd:e6:
                    7d:8a:9b:81:3a:c1:6c:ef:bb:6a:be:ce:c8:3e:9e:
                    21:e3:29:2c:8b:ec:94:31:64:ee:a0:46:2f:07:10:
                    04:89:1c:57:3b:d5:56:b7:82:e2:aa:69:b5:b5:1b:
                    13:c4:84:ce:f3:f2:3e:8a:65:3d:15:a5:00:9e:b6:
                    df:07:ad:22:e9:8d:53:7f:cd:ac:04:c9:e9:a5:ed:
                    e2:3c:c5:8b:15:22:36:94:31:17:d1:1a:b4:52:2c:
                    f6:ce:5d:d2:ab:33:62:76:dd:55:76:3b:0c:33:89:
                    80:9a:b5:39:28:57:02:6f:6a:28:0a:64:ca:34:50:
                    3f:7f:c7:e2:26:08:2b:fb:6f:c9:c4:a0:ae:20:a1:
                    72:ec:3b:7a:81:45:69:4e:9f:98:2f:a3:5c:b8:42:
                    4d:67:9a:e4:89:20:37:32:09:81:62:57:7e:26:de:
                    5c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:66:53:64:1D:09:F7:93:1B:8E:52:6A:94:4C:46:5C:7D:86:DC:CA
            X509v3 Authority Key Identifier:
                keyid:23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6a:82:50:02:96:41:14:11:3f:b3:ea:1a:7c:5e:c4:e1:37:
         e2:e7:ab:76:4d:f2:ec:07:ed:cb:a9:8a:1f:ab:fc:ed:ff:17:
         31:e6:2c:d5:82:c7:4b:92:11:db:b6:7e:4a:b4:f4:9c:46:bd:
         f2:3a:8f:58:13:c9:73:8c:94:ec:f1:f1:71:0e:91:ab:c1:0e:
         0b:c4:ad:1b:6b:26:dd:00:a4:9a:4e:fb:d3:2c:dd:3a:8e:a7:
         d3:9c:d5:8c:da:94:69:a6:a1:a6:4c:08:82:69:6c:6e:9e:0b:
         db:88:28:da:47:e3:36:ac:49:1c:dd:4b:dd:31:52:bd:98:ff:
         87:71:fd:13:82:6b:8f:e3:99:32:f1:4c:6a:0d:f9:80:7f:f7:
         d0:74:cf:8a:4d:5f:97:99:40:a7:91:3f:0b:52:da:d0:e0:e5:
         f9:05:eb:a4:51:ce:14:fd:0c:3a:d1:8d:d7:5f:88:35:cd:97:
         56:d1:dc:9f:ff:89:d6:ae:b3:73:35:8f:a0:96:a4:9d:0f:74:
         22:32:2c:71:6f:f1:af:89:7b:f6:9e:18:75:5d:fe:3f:4a:2a:
         c3:71:40:b0:8a:0c:71:a3:c0:ec:7e:24:a0:f2:77:a8:7d:17:
         5e:82:b5:ed:21:bd:ef:09:fd:0b:c4:6b:bb:e8:45:12:3a:1f:
         45:2d:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:16 2026 by rpki-client