Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
File:                     mY3mCoZ7SdsppifG99IjomajIqk.mft (raw, json)
Hash identifier:          lxCeZta7+b6F0MegGfM3Es3vCbu7qf+bZ1HE4KW8tRc=
Subject key identifier:   06:5E:EA:A6:5E:33:E9:33:27:8A:D7:FC:8C:C9:D5:79:C9:B5:F8:0A
Authority key identifier: 99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
Certificate issuer:       /CN=998de60a867b49db29a627c6f7d223a266a322a9
Certificate serial:       019EBF232A0F693F0BFE99D386D0CB7E1FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
Manifest number:          0214
Signing time:             Sat 13 Jun 2026 04:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:13 +0000
Files and hashes:         1: GhN1yKMoFu8y6eUgkMzzqDeEy_w.roa (hash: zyNIiHMxPOjGUgXy6RCPzfPzuqWlzRBZzmEpfhP+cR4=)
                          2: UXW4TwBbqAg2KVwromTqDGJrE20.roa (hash: iC2l8xQ6yq60AZmCDOxhtpG1B+XfVb2gALUB/AI2BAQ=)
                          3: mY3mCoZ7SdsppifG99IjomajIqk.crl (hash: Q5SGfRIK2CVuXnV9KbMBI8n9tbc/GK3qhYe3X0Gm4gQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:2a:0f:69:3f:0b:fe:99:d3:86:d0:cb:7e:1f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998de60a867b49db29a627c6f7d223a266a322a9
        Validity
            Not Before: Jun 13 04:00:13 2026 GMT
            Not After : Jun 14 04:00:13 2026 GMT
        Subject: CN=065eeaa65e33e933278ad7fc8cc9d579c9b5f80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:bd:52:eb:ce:de:e3:f3:55:54:5b:6b:29:
                    e5:00:dd:91:8d:3f:d4:0d:cb:5d:b1:34:bb:ca:7d:
                    0c:0f:9a:1d:52:d0:a7:4c:5c:2a:a7:63:ac:4f:7b:
                    bd:bf:80:b1:3d:0e:9a:e9:1b:52:c7:4d:e4:3c:ad:
                    4d:13:dc:16:8c:84:ce:f8:b9:fc:0e:03:29:91:ad:
                    46:1f:22:60:51:a1:5f:23:30:f3:61:39:d4:a7:e5:
                    b3:d8:a1:3f:ba:1d:57:bd:80:00:fd:0d:1b:08:d9:
                    47:cd:0c:8d:fd:ff:dd:2f:42:6c:e4:69:30:d9:58:
                    f3:21:05:a6:71:c4:47:1a:f7:ee:09:0a:c9:40:35:
                    00:47:e6:d5:ea:cc:09:ab:44:a9:f9:ba:22:31:e6:
                    7e:e1:47:6e:81:37:82:82:7a:9b:ee:fc:c1:44:17:
                    ac:fe:d1:20:75:f9:7a:b2:78:da:3e:f8:13:a0:c3:
                    db:a4:64:5a:a0:68:6d:e8:70:74:e0:6b:2a:77:35:
                    6f:87:71:8c:5d:1d:0a:69:d6:84:4a:67:f7:e2:a8:
                    5e:3d:18:6b:84:fb:2e:6f:44:67:63:3d:6f:af:18:
                    f3:64:95:e3:92:da:16:20:0c:77:bf:f8:0d:22:75:
                    e2:05:67:cd:8a:b5:a3:e6:7f:10:46:31:a5:d3:17:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5E:EA:A6:5E:33:E9:33:27:8A:D7:FC:8C:C9:D5:79:C9:B5:F8:0A
            X509v3 Authority Key Identifier:
                keyid:99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:e5:b3:3f:4f:b2:cc:c8:de:b3:a8:9c:98:27:36:58:5a:
         5a:7c:b9:e2:a2:38:07:01:65:fe:58:c7:22:20:63:8e:a8:2f:
         ad:d2:68:27:d1:f0:cc:39:1d:44:3e:33:1a:0e:1b:ac:a8:2b:
         b7:17:89:d1:1c:c8:da:ee:2f:72:0a:f5:da:00:52:35:35:34:
         31:92:6b:2b:13:29:13:a6:64:93:f3:b1:c4:43:c7:56:75:e7:
         20:f7:f6:92:b2:68:c2:d7:2f:da:ab:9a:ca:74:26:27:57:91:
         66:33:d9:fd:73:c2:d3:a2:a8:d2:79:52:be:2d:ac:18:f5:d6:
         b4:4d:30:90:c2:cf:1c:c7:83:ec:24:07:45:3c:30:4e:08:29:
         37:9d:75:21:e1:2e:4b:ab:25:28:42:4f:c3:c7:2b:dd:26:ba:
         d9:d9:e3:78:74:77:23:2a:5d:bc:f3:fe:b3:7e:92:4d:f0:32:
         ee:74:6b:ce:29:01:a8:60:46:ca:24:f0:f2:1c:c2:7d:71:4c:
         a1:e8:88:2c:c6:20:3f:e7:87:97:d6:6a:54:dc:56:50:59:7a:
         f2:c7:e1:0c:86:6e:87:f7:4f:83:a5:43:16:ac:38:be:0a:4a:
         54:c6:32:40:18:9c:da:35:e5:07:38:52:34:f0:15:80:d2:aa:
         82:e9:9e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:50 2026 by rpki-client