Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          hUklSRQ+3g/jEM9v1yGc+peiY1TLEU/BBJVgPif8ngM=
Subject key identifier:   1B:B8:A9:B1:B3:A5:40:AA:AA:CA:3F:CF:34:27:71:65:CC:AE:76:12
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       019EC036610430FB867E6C874C020E1CDD1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          16A4
Signing time:             Sat 13 Jun 2026 09:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:49 +0000
Files and hashes:         1: 9GgBHYY6IQ5bLuxDhfnwDkKcCp8.roa (hash: 3BRepv5Zv9EHU3V6O2OMNP8hqSTNe1ZH0MSVN1g871U=)
                          2: FO34XpplAW7QlRa_nhaWh0bzK1M.roa (hash: OY8jMW/Q0/vSfJsf4E0K4jOzUbbQOka6dbLisQTbUTM=)
                          3: OUBXBk7uM8clkpPuDWm8B29LkK0.roa (hash: pImjUWu6gOSXuba4xU+/2hzuFLuVC5OZXuTBsyPCp6g=)
                          4: VDzTMSvfBKqHEPkPZy5QxtuwU4Q.roa (hash: nbe4oKw1dzzL8XTpfLmk2OwowG5rknPjlUlPj/nEWbw=)
                          5: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: 0EmKSGY4HdO6G7bkQsnBaQh3k1FIz4IITfk4gLEW8Gk=)
                          6: q1z9wEUZ-3q2dVe1kVMgwooEueU.roa (hash: 0i6Usfk5Np9doym2lgfbGxDGei4jmouvH6UyKjL5l/k=)
                          7: z7PU2MzlVVAvlrQw6iVcszWYAXo.roa (hash: 9X6Zea/pUy8vlr4IvEYXZRJ/+mqoqTxPdepT8vjAq6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:61:04:30:fb:86:7e:6c:87:4c:02:0e:1c:dd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Jun 13 09:00:49 2026 GMT
            Not After : Jun 14 09:00:49 2026 GMT
        Subject: CN=1bb8a9b1b3a540aaaaca3fcf34277165ccae7612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:77:b2:fe:15:09:3e:70:51:cf:6b:05:54:
                    d5:e6:34:43:c5:6d:66:e1:ab:d8:c0:6d:5c:1f:26:
                    6b:38:a0:3e:d7:4e:fc:cf:36:c1:c8:b6:c4:6a:9f:
                    2f:42:6d:72:17:dd:75:02:b0:8a:61:7f:49:65:d0:
                    af:54:a4:4d:84:54:a5:21:77:19:1a:90:01:1d:46:
                    c8:91:8f:b6:3c:db:42:36:6b:ad:a9:fd:cb:65:8a:
                    09:4f:72:5f:0e:f5:8e:a9:76:16:9a:04:f8:22:ef:
                    a3:c4:11:ce:4b:98:eb:84:48:02:9b:e2:ac:ab:84:
                    00:38:21:33:bb:b7:d5:59:0d:43:b5:7f:5f:74:cc:
                    e1:c8:fb:ce:6c:04:d8:1b:e9:2c:34:90:bf:63:fe:
                    ba:74:01:f6:6f:2c:15:f2:3e:50:05:7d:bf:e7:ea:
                    96:f2:bc:19:47:4a:d9:f0:28:80:db:e7:74:a1:af:
                    6f:7a:8d:17:7d:70:f3:da:d5:8a:b0:7b:37:46:52:
                    94:c6:e0:b9:c1:9c:19:c4:43:78:59:1f:d5:3c:41:
                    e1:46:a8:9e:a5:dd:55:aa:5a:87:82:b1:ea:8d:ac:
                    38:4a:cf:59:83:37:16:a3:d7:1b:da:68:35:14:dd:
                    64:fd:92:e9:27:68:29:3c:ba:fe:78:b1:5e:a0:cd:
                    e2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B8:A9:B1:B3:A5:40:AA:AA:CA:3F:CF:34:27:71:65:CC:AE:76:12
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e5:23:af:9a:0d:36:18:e6:71:39:b8:80:35:a2:49:74:ca:
         5f:37:ea:2c:d2:e9:bc:04:0d:64:f0:2e:90:31:cb:46:be:37:
         3e:51:ab:86:82:e1:f5:17:c2:a4:2b:9a:88:01:0f:59:44:ab:
         f2:4a:2c:84:d2:11:3e:ad:54:83:cc:22:21:bc:36:fb:d2:91:
         a5:3e:c8:78:a2:b6:38:bf:5c:48:e1:59:93:e7:8f:a5:5e:3f:
         2b:29:57:2c:09:b9:c3:5b:2d:a1:d7:9f:67:57:23:4f:d1:77:
         92:a0:f5:a6:af:17:98:ba:19:26:01:57:22:14:b1:b8:53:9a:
         71:28:91:13:c7:cb:ee:88:31:c8:70:98:72:b9:c7:49:40:5a:
         44:d7:52:b1:ce:00:36:9e:37:f4:86:54:d1:be:8a:c1:d1:c6:
         0e:b7:4f:d8:ff:bb:87:fb:91:a5:8c:7f:fd:ef:d5:49:44:23:
         f0:d4:25:7b:52:93:a6:65:b0:4c:84:d7:a4:44:21:f0:6e:18:
         a2:19:8d:94:c4:a4:73:c2:eb:b0:8d:c2:bb:01:4b:18:c6:ed:
         82:f8:2d:cc:6b:d4:3b:79:5d:c7:f6:2a:96:4c:4f:2c:cc:43:
         bb:ef:e8:ad:4d:ce:ce:d2:26:c2:76:4e:93:48:97:10:25:31:
         5f:94:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:47:42 2026 by rpki-client