Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File:                     R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier:          7Vec/Q1NYrgEGxLCaQlOWP/GPhp5NacENZDoXfKy9Zg=
Subject key identifier:   AD:25:92:66:6C:D7:E3:62:65:4A:56:FC:52:0D:4A:E0:41:6D:B2:97
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer:       /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial:       019EC111D2D4215C19F3781390EB2BC1F16C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number:          0907
Signing time:             Sat 13 Jun 2026 13:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:31 +0000
Files and hashes:         1: EK0F93TMdb3mWGdibqrR_m6Xz-I.roa (hash: mx33ExzlOw54fpOREl279Ht7q+DRDKueDOMyUR0ZqEk=)
                          2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: repClQfsoEz4SyMTfVHU14YWII3M+DwD9JRmBOIju7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:d2:d4:21:5c:19:f3:78:13:90:eb:2b:c1:f1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
        Validity
            Not Before: Jun 13 13:00:31 2026 GMT
            Not After : Jun 14 13:00:31 2026 GMT
        Subject: CN=ad2592666cd7e362654a56fc520d4ae0416db297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2f:07:5f:fa:03:1e:a6:fb:76:dc:c2:08:0b:
                    47:d1:a9:11:f6:41:5d:ea:ce:9c:06:d1:32:88:53:
                    f1:92:20:11:9a:06:55:e3:e5:df:e8:56:68:2d:c1:
                    6c:8a:d4:ce:d0:bb:27:bf:72:40:c7:02:8d:72:82:
                    39:b2:9a:cd:67:92:7b:68:23:fb:c7:93:c9:60:77:
                    3c:de:08:01:85:1b:48:af:ef:11:46:d2:b8:d6:39:
                    23:28:71:fd:f3:dc:f6:a5:5f:bd:f3:27:9e:3b:25:
                    2d:48:ba:0b:6c:cb:a0:8b:12:4e:d8:14:0d:66:f1:
                    2d:66:9c:c0:c1:e7:62:78:48:63:b6:f2:d8:93:c1:
                    39:b1:f8:d1:e1:27:7d:89:e8:48:42:9c:b0:1b:c0:
                    6c:9b:e8:00:18:6e:9f:46:a0:67:76:5b:f5:8e:30:
                    09:8d:72:5f:30:5b:a9:ec:1f:1a:93:47:9e:f6:3c:
                    3f:3c:bc:80:44:07:d8:76:15:77:35:87:5f:bb:88:
                    8d:57:a3:d0:87:34:fa:69:d2:8f:4f:a0:e0:14:e9:
                    62:43:c2:29:eb:3d:a7:be:2a:10:95:d5:d1:5a:7f:
                    90:e9:0d:2f:7b:1c:d7:98:bc:3e:df:28:b6:43:90:
                    93:1d:7c:07:c2:c5:20:3a:c1:e9:ec:51:e8:56:85:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:25:92:66:6C:D7:E3:62:65:4A:56:FC:52:0D:4A:E0:41:6D:B2:97
            X509v3 Authority Key Identifier:
                keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ae:29:be:2e:9c:72:3f:ae:9f:97:7a:58:dc:78:28:58:8e:
         5f:30:d6:5c:0c:58:f5:65:d4:00:aa:3a:ed:d5:f0:f6:69:dd:
         0c:68:e5:a3:09:57:67:89:50:36:90:93:84:d4:61:c7:e3:87:
         e5:e1:75:40:65:f9:d8:af:f1:90:dc:e8:f1:85:98:05:b8:58:
         c0:d2:ce:49:ca:25:24:f3:06:e7:ca:16:8d:05:76:65:1d:2a:
         9a:4f:82:47:a3:75:3e:a9:e0:47:c7:23:a7:6f:6e:50:2c:a0:
         72:e6:4d:5c:ce:43:13:21:30:9e:9c:74:ac:cf:86:1a:ed:b7:
         cc:72:e8:eb:b0:ce:4b:12:bf:b0:3a:ce:89:2a:f0:3f:8a:e8:
         ab:f5:ce:8b:34:31:c5:22:c3:d2:36:c9:0c:05:33:14:45:69:
         1d:b9:82:e0:e7:68:54:c8:74:b2:d6:53:e5:88:52:cc:f1:56:
         8e:b0:2c:a9:01:37:c7:32:63:95:9a:2f:94:1b:dc:79:27:f4:
         cc:6d:24:ca:f6:73:cd:14:55:74:2e:c0:a1:19:e5:15:77:ec:
         26:85:5c:c1:ee:11:f3:fb:02:6a:0b:bb:d5:8f:d8:78:ec:cb:
         8d:ae:4e:a1:4a:9a:ed:7e:25:33:a6:97:8d:08:d2:fc:25:1b:
         b2:02:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:11 2026 by rpki-client