Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File:                     Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier:          8Gq1io2Uyz5Mkuf01p+FXOM4Ph9iDb6VJ1YOK8ejU6M=
Subject key identifier:   0C:43:7D:43:D1:83:46:10:B9:F9:2E:17:DC:71:AC:CF:64:73:EF:2F
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer:       /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial:       019EBEEC77E8A78C99060B7E753C0D37C3B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number:          161F
Signing time:             Sat 13 Jun 2026 03:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:28 +0000
Files and hashes:         1: 1-PTdsM_AGC5XNTFED_Bd1lKJUrY.roa (hash: t/bF8BVKmcIucBirQ4iHEKuh8d9LX26p0NPMDv8nEak=)
                          2: 6PInJ2tbRTip0fDT1jftw8w7R7I.roa (hash: JDGvPisnEK8vyfb4vuVlQuoioDUHeR2I2cF0Dy3S3VU=)
                          3: B3ZEk8Cap2g9KplZIsoRlruoyZE.roa (hash: g43dat6xdrbXP10ocqQ6N9VTX+6RhA4yXEtNgHAbATA=)
                          4: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: 3oRTFMJkI6TBc21F19+WDjapJSCXUcnkTS6VrOrZ6Ws=)
                          5: hxyFg93cyoODusD3h3L8hfc5HG0.roa (hash: BPNhbAxVULf2vc9aGDatTvAGnPVmpDD0d77IZ2F/Ui8=)
                          6: nj4mvFqfvEUyr5giiKwR4BVZQno.roa (hash: 9KFIbmVJvCtQC4dokjtpRH9fFECm3xNQnDEDkj0ZLgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:77:e8:a7:8c:99:06:0b:7e:75:3c:0d:37:c3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
        Validity
            Not Before: Jun 13 03:00:28 2026 GMT
            Not After : Jun 14 03:00:28 2026 GMT
        Subject: CN=0c437d43d1834610b9f92e17dc71accf6473ef2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:0d:73:90:ca:90:51:ca:43:d8:7a:77:68:
                    df:b2:13:7c:a0:3f:8c:98:3d:41:74:50:98:b6:da:
                    39:1e:b1:d5:ac:00:4a:48:d2:d0:c5:21:35:c7:40:
                    92:07:55:89:f1:b7:4c:97:52:73:cb:a5:80:fa:3c:
                    02:74:e8:b2:a2:68:34:4b:aa:0d:01:e3:82:58:62:
                    e0:1e:82:40:e4:ee:cd:db:fd:1b:c7:e9:5c:98:be:
                    4e:a8:32:00:6d:4e:8a:22:63:1a:ca:e1:42:fa:5b:
                    af:e7:56:fc:e5:8a:95:fa:73:c2:f3:e6:be:aa:6d:
                    91:52:1c:11:29:49:00:43:85:39:0b:ca:41:4c:8d:
                    38:a2:04:99:1e:87:90:ff:d6:2a:3e:a4:24:da:3c:
                    19:ce:c9:de:a0:35:92:5b:7a:66:a3:7e:6c:11:65:
                    b7:74:1b:0b:09:4b:0f:dd:d1:c3:33:23:c7:6f:1e:
                    e5:63:6d:45:5c:75:4a:d5:f4:52:14:58:39:36:af:
                    17:32:07:15:78:0e:31:56:9c:29:3d:7b:f1:33:50:
                    42:f8:77:bf:a6:93:d4:37:ed:9d:7e:47:5c:03:34:
                    0d:aa:92:b3:4b:31:01:47:bd:d7:cd:e9:60:01:66:
                    66:9d:89:12:4a:1f:d2:a6:78:39:7a:2e:5e:57:b9:
                    f5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:43:7D:43:D1:83:46:10:B9:F9:2E:17:DC:71:AC:CF:64:73:EF:2F
            X509v3 Authority Key Identifier:
                keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:32:ba:76:b2:fb:13:dd:24:32:26:ee:85:ef:cc:77:43:63:
         d2:75:c6:e7:c8:54:a3:da:6a:02:eb:42:5e:9d:da:3d:74:91:
         20:a1:59:9d:36:c7:be:12:1e:43:39:12:92:c1:60:ec:af:89:
         5e:7c:87:51:d8:d9:a0:92:5e:ef:ec:75:c6:50:c9:ad:2b:f6:
         2b:aa:66:79:9e:d1:ba:ab:07:5f:57:d5:d9:3e:84:c5:68:50:
         11:58:51:0b:00:ec:c1:81:0e:92:37:92:33:52:9d:82:2d:18:
         c1:f9:6d:d4:b6:76:cc:3f:b5:07:41:87:79:67:a9:b7:fb:90:
         cc:b1:cf:01:73:43:46:5c:c3:1f:32:47:3c:f3:fc:65:4a:33:
         00:fd:d4:aa:e4:a9:4c:a6:6e:76:23:89:74:e0:d3:cd:4a:2a:
         16:9f:dc:53:db:d6:0c:a1:a8:95:e1:4f:cb:e8:3a:28:fd:48:
         21:92:0b:d3:c9:98:97:1a:f4:b3:b7:63:50:5f:c2:5b:8d:bb:
         9b:ac:8a:e8:c6:87:dd:5e:8d:97:ed:9e:7d:11:62:8f:ac:30:
         10:37:be:49:09:3d:be:9b:72:f5:c5:c5:87:bb:04:0f:8a:60:
         50:53:a2:0b:f0:9b:c9:b7:f5:15:5b:82:9a:cd:9b:a0:b9:62:
         35:8b:5c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:36:05 2026 by rpki-client