Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File:                     etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier:          DQiUEVoUQMoA/sBnM4C77v2rarONPWdOQwX9zDC8dxw=
Subject key identifier:   59:7F:67:43:AC:62:A7:FA:BD:63:F3:B7:A4:2E:EC:45:EA:5C:C7:27
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer:       /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial:       019EBF23A07488833880786E864094F48021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number:          076E
Signing time:             Sat 13 Jun 2026 04:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:43 +0000
Files and hashes:         1: eCo9qXRcDZLgJlgoHLS9NExTbx4.roa (hash: BYg8Ba7NDfA7mgNndMx+S8c/mZhCBPail+1jI3QYxnk=)
                          2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: Uq/zeAR1sZleXoBQhFC1smH7/uy2202ep/6nyixOyfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:a0:74:88:83:38:80:78:6e:86:40:94:f4:80:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
        Validity
            Not Before: Jun 13 04:00:43 2026 GMT
            Not After : Jun 14 04:00:43 2026 GMT
        Subject: CN=597f6743ac62a7fabd63f3b7a42eec45ea5cc727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c4:94:ab:8d:04:b7:7d:23:a1:c0:21:ef:ec:
                    02:33:cb:35:16:81:96:41:c0:7c:2f:d4:9f:af:67:
                    11:16:81:2e:63:1c:9a:14:8e:7a:5d:b6:8d:c1:a2:
                    9d:d7:93:df:41:a1:ff:31:af:97:d3:dc:5b:45:66:
                    a2:c5:ee:28:0c:4b:bc:ff:b4:a3:34:a7:9c:df:7f:
                    1a:9f:48:b3:bc:f0:c3:91:0f:e5:e4:b9:66:ee:9b:
                    db:22:99:dc:88:ef:6c:7b:17:7e:f3:8a:42:a2:e2:
                    06:f6:20:74:f0:c7:5a:3b:78:e1:3a:73:8f:2e:84:
                    35:35:df:07:4e:8d:b4:dd:86:19:a7:44:86:70:55:
                    4c:4b:b7:92:c6:29:fc:a7:21:94:0a:94:6a:1b:50:
                    db:73:55:0c:58:64:f1:15:ce:b5:e4:c0:16:10:9d:
                    18:b3:66:ac:7c:4f:c1:7e:2d:db:2a:e0:46:f2:f2:
                    78:e2:e4:de:5c:e6:f7:39:87:fd:0a:5e:f1:31:5c:
                    1c:39:8d:7d:ae:45:df:fd:1d:4f:3d:23:2f:90:ff:
                    67:43:3f:e1:96:69:88:4b:1a:4f:1f:e6:3d:33:2d:
                    db:b3:da:a3:2f:6c:79:5e:a4:83:58:a0:0c:89:86:
                    6b:72:f1:4a:3a:cb:bd:65:fe:90:d9:d2:43:89:31:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7F:67:43:AC:62:A7:FA:BD:63:F3:B7:A4:2E:EC:45:EA:5C:C7:27
            X509v3 Authority Key Identifier:
                keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6f:9b:ae:88:c9:19:a4:cd:25:68:e6:d5:ef:6f:dd:65:34:
         61:12:f5:fc:74:96:d8:87:45:5b:e0:6c:44:3e:71:c9:44:7d:
         a0:cf:de:72:13:f3:76:e0:ef:57:8f:a3:6a:f9:20:97:d9:d0:
         e5:ac:e6:6c:32:ba:bf:cd:68:fe:b2:7b:43:44:14:4b:99:71:
         fd:bc:ec:3f:51:b1:e4:65:6d:c0:ba:c9:c8:1b:02:74:3f:42:
         a8:31:3c:35:7f:bd:35:7c:71:17:11:3f:0c:7a:3d:3b:3a:ee:
         b5:43:c1:d1:7a:47:3b:3e:d4:ed:60:f9:ea:f6:0f:27:99:bc:
         d1:25:5a:c8:38:15:e9:3e:7c:d7:07:86:c8:84:45:12:69:5a:
         c8:71:41:4d:fd:73:2d:a1:35:fc:5e:56:fc:2c:c2:60:25:84:
         83:2c:25:c2:b3:12:db:d0:7f:6e:72:24:f9:27:91:87:0c:a2:
         c4:74:b1:6a:ac:67:bc:9a:3a:4c:7c:78:ef:46:10:76:97:c0:
         46:d5:43:8f:02:27:90:90:c7:76:5c:58:6f:0e:68:47:e5:49:
         ba:2f:e2:ce:7c:6d:20:ae:e8:89:86:d0:cb:c8:25:26:c7:4f:
         3e:e2:10:e3:1e:9a:77:5c:cf:f6:18:33:58:2c:61:8c:b6:8b:
         80:a5:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:20 2026 by rpki-client