Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File:                     DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier:          bBX6YoZAEwUS9e1NWWlECx6XboIJfbAtn8Ai266yUik=
Subject key identifier:   AB:A3:2B:D9:E0:62:C5:08:1F:93:60:72:6F:7F:74:4F:60:F3:54:2E
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer:       /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial:       019EC06E266153450E2BEC0C55E1F3A18489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number:          18F0
Signing time:             Sat 13 Jun 2026 10:01:44 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:44 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:44 +0000
Files and hashes:         1: CbfPnzkIg630GLdNxKGZc9evepo.roa (hash: OlSSfeY+x6XajlxSO7XTBJeyZDwUAJ2psAjSHgtLxx8=)
                          2: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: Q7THqqhKCCNOudoU/8qi1EzNJT5JGQdyOOtXDNA9SvE=)
                          3: KaCfEz66BVobYaD4JAQbgoR-gKg.roa (hash: y8noCaUxD0ZZ36hzHL6X++bGHmSgDwDhVDPA3PlLSas=)
                          4: e48dFNX7wc3SQhgi8G26wWhECzY.roa (hash: XEOD2QcK006EDHPh16ax+CiiGNzK5DlFCvCqDs8JPY8=)
                          5: gQm12kL8qC8G8fld0ndxKWB7Le4.roa (hash: DZyw6qHuuDne2cu+Q2hXVAXkBqKQX9CgYl0ktuHs/9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:26:61:53:45:0e:2b:ec:0c:55:e1:f3:a1:84:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
        Validity
            Not Before: Jun 13 10:01:44 2026 GMT
            Not After : Jun 14 10:01:44 2026 GMT
        Subject: CN=aba32bd9e062c5081f9360726f7f744f60f3542e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:27:8d:d3:f1:36:37:65:a7:7f:4d:08:fa:
                    b6:53:d2:4d:4c:da:e8:a9:a7:63:a7:e4:51:25:b9:
                    94:b5:96:e9:61:d2:9c:c1:68:63:ab:8c:80:ec:28:
                    43:73:1d:e6:5a:a3:d8:63:e8:20:27:f8:c9:32:98:
                    df:15:c6:25:06:00:a2:82:05:6b:95:3e:19:ee:0b:
                    d5:cc:36:8d:3a:7b:a4:42:2a:79:5c:8a:4c:a6:ea:
                    a0:1f:6b:1f:99:50:09:f8:71:fe:17:b1:ce:8c:40:
                    55:e5:c0:05:fd:99:e6:7f:75:e3:1e:5b:27:4a:b0:
                    6b:8a:92:de:4a:55:40:81:8d:5d:14:6b:ca:93:65:
                    be:28:de:d2:6c:72:4a:1a:b6:27:1d:c1:e3:50:24:
                    bf:60:e4:65:02:cc:f3:0c:bf:a0:cd:85:95:fd:4f:
                    a4:45:e0:75:44:89:a7:36:f0:f6:c0:63:52:2b:e6:
                    25:63:45:01:54:cc:23:39:45:80:ad:0a:34:7b:85:
                    75:a5:e3:08:65:70:0b:3e:04:2d:a7:52:44:14:71:
                    d2:d0:4d:2f:62:16:f7:f8:ff:e5:47:73:99:20:9e:
                    ca:50:85:0f:8d:8b:24:ab:c4:fe:75:aa:bc:70:9c:
                    0b:10:99:be:24:3b:09:b6:25:b1:01:a1:ea:ec:1f:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A3:2B:D9:E0:62:C5:08:1F:93:60:72:6F:7F:74:4F:60:F3:54:2E
            X509v3 Authority Key Identifier:
                keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cd:ef:c3:9a:23:fe:54:30:f7:8c:2b:6f:a9:e3:a0:87:19:
         d4:6f:05:b3:60:cd:8e:74:f8:16:e0:a6:12:31:aa:11:90:f4:
         31:28:64:5f:7b:0a:3f:04:0c:9d:6a:5c:b3:cb:9f:a6:3b:d5:
         2e:e9:2b:a0:46:ef:b6:62:49:a1:aa:bb:89:2c:c1:82:ae:9d:
         6c:56:60:17:6f:14:3f:8a:15:02:7c:7c:e7:d9:87:96:d3:ba:
         60:25:f8:df:ce:45:0b:90:d8:77:16:68:4b:ee:9f:36:4e:f5:
         70:83:b5:7c:92:63:09:15:14:e6:9f:66:63:c0:37:27:23:38:
         2d:57:92:cd:79:c7:20:c0:7f:76:4c:af:18:d0:7c:3d:d5:8c:
         13:ff:e7:bd:b1:a6:21:8b:a8:73:f4:b2:4a:bf:45:5a:c6:e9:
         1a:8d:78:72:a2:55:da:1b:de:d7:a2:79:4f:22:7a:b7:80:82:
         24:66:97:f8:d5:31:3b:20:c6:d1:7e:42:12:35:e9:13:43:81:
         01:b4:58:16:d5:c1:64:7f:2d:d3:27:64:ce:c5:4b:72:f5:bf:
         d6:67:c6:56:66:6a:bc:75:3c:38:d3:d1:d7:5e:6c:9f:e2:58:
         90:e3:ea:cc:e6:40:61:eb:07:a8:bf:ed:0e:94:a1:da:95:ca:
         31:0f:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:40:22 2026 by rpki-client