Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File:                     cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier:          rjVkZ/whpEtFzKecqgRz+Z38G1fJ011JsK9mDmQEQoI=
Subject key identifier:   88:0A:63:02:63:94:8B:73:4A:73:A1:FC:35:53:FF:FE:7C:67:53:5A
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer:       /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial:       019EBFC8D45FFFB7B69D83A1119590EF524E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 07:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:10 +0000
Files and hashes:         1: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (hash: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE=)
                          2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: dRbdLQvqCEaSvP0jqCyD59cjdoEYGWFTSt44oqBl/F8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:d4:5f:ff:b7:b6:9d:83:a1:11:95:90:ef:52:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
        Validity
            Not Before: Jun 13 07:01:10 2026 GMT
            Not After : Jun 14 07:01:10 2026 GMT
        Subject: CN=880a630263948b734a73a1fc3553fffe7c67535a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:06:24:0c:8e:a3:4a:c8:89:f9:66:9a:4c:
                    ab:09:7e:9d:d4:e3:b6:12:c1:2d:c6:61:d6:1f:7f:
                    40:ea:3e:d1:d1:3b:ab:bd:af:07:69:ea:d9:38:d1:
                    e6:bf:df:3a:d8:f9:04:cd:7e:81:ef:88:33:42:34:
                    98:d6:76:f8:d2:9c:63:11:25:bc:64:06:62:95:0e:
                    4e:2f:a6:75:c8:c2:1a:33:53:7b:72:19:5e:02:de:
                    75:e2:5c:1e:14:bc:10:07:ba:92:32:46:19:6d:ff:
                    8c:f6:5c:4f:54:f4:1f:71:a0:51:c0:e0:40:be:6d:
                    de:c4:2a:05:ae:a7:51:9e:d8:22:60:3e:c3:09:b4:
                    1e:c9:21:7a:22:9a:5d:2f:3d:66:d2:f3:a9:34:18:
                    0b:5b:10:ac:c6:2b:75:fa:3e:07:d6:c9:9a:2b:ec:
                    54:28:44:d7:2d:e5:31:9c:d8:12:ea:e7:e3:09:7b:
                    14:99:4e:c0:d3:93:8e:09:e9:6e:9e:32:ab:75:17:
                    cd:30:c3:49:cd:d6:c2:4f:ed:04:3c:34:ea:40:1f:
                    72:98:10:a0:5c:60:0b:af:aa:68:54:09:af:1e:01:
                    72:62:18:e7:54:54:ed:ac:3e:59:99:ef:27:67:c5:
                    4f:8e:ca:0a:82:bd:ae:20:d1:82:4c:6e:d0:ca:1c:
                    aa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0A:63:02:63:94:8B:73:4A:73:A1:FC:35:53:FF:FE:7C:67:53:5A
            X509v3 Authority Key Identifier:
                keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:38:13:79:04:92:cf:04:fa:e1:c3:f1:48:00:eb:5c:8f:2a:
         c2:3b:2e:a3:37:2e:5c:24:5a:15:d7:f6:85:02:28:96:be:62:
         8e:38:11:72:4a:5b:70:07:48:0e:a5:30:fd:24:df:cd:03:d0:
         e1:20:9a:15:48:e1:fd:88:4b:b5:99:24:8a:25:1e:9f:66:44:
         df:ec:a2:1a:d2:51:7e:83:08:e2:c3:27:99:75:2c:b7:80:d0:
         cc:e7:0a:68:c9:7c:f9:72:00:e5:53:ef:54:be:d9:47:01:ff:
         ed:ef:de:c7:64:16:a6:e7:f7:84:c8:16:17:e8:c9:e0:4c:54:
         f2:03:87:66:4c:9f:99:28:51:d2:49:77:cc:93:29:6a:e8:fd:
         f6:52:97:33:4c:3c:70:82:b8:42:3a:c5:dd:fd:58:46:2c:13:
         ca:90:bf:cf:7d:37:d0:0b:9d:21:84:60:3c:34:0c:e0:a0:9b:
         cf:c6:d2:b4:a2:67:e5:f9:72:a1:ed:68:49:76:45:a3:9f:31:
         34:4b:99:0d:ee:97:60:9f:0d:35:42:d4:c1:3c:9a:55:b8:58:
         2f:38:89:9e:72:28:3c:46:c2:b5:34:ad:f7:6f:72:44:72:37:
         5b:cf:82:74:1e:f7:aa:f5:17:00:8d:1c:a3:b5:58:50:5f:5f:
         3c:b1:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:57:53 2026 by rpki-client