Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
File:                     2783kJzhe6U62QqGMjd6XZOHQ-U.mft (raw, json)
Hash identifier:          SS5mYHIusRVaojsDGyvaQ8nLGUMCuLzFQZhlFSEbreQ=
Subject key identifier:   24:2A:B8:6A:4C:38:FA:3D:E6:49:E6:D4:7F:F9:67:6B:66:FA:DA:53
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       019EC1EDB9360927A90B536F3184CF5BAA04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
Manifest number:          0F31
Signing time:             Sat 13 Jun 2026 17:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:42 +0000
Files and hashes:         1: 2783kJzhe6U62QqGMjd6XZOHQ-U.crl (hash: H2kb6tqzP9hvtHDz8wXHF/ERduh5REoBuX/rKEz/S+Y=)
                          2: TTwK20SxDSqzIyzV0QGO0SmjawA.roa (hash: x2Tzuet+mqmVtk1cFs2lJv6NLw6VZlQyasN9WGmhONs=)
                          3: XnoeLIkYNpYQWVse-yX5iRjTc1s.roa (hash: ptKlPyES08hICN66dmlPtZNxNra0j4is1IcwHdPzbr4=)
                          4: lEbAfouHoMhTrs36FwPLKCH2I7w.roa (hash: ccDJaCoETUQjCTdcoNlWxXPIM6P7uFIKkfsOSoduMMA=)
                          5: xu7t96CgIHN3hwNmggXTcfk-UpA.roa (hash: iRBThFuWjKJSamtnuVG+6/kq+wDEj0e0hvd45FkbUb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:b9:36:09:27:a9:0b:53:6f:31:84:cf:5b:aa:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Jun 13 17:00:42 2026 GMT
            Not After : Jun 14 17:00:42 2026 GMT
        Subject: CN=242ab86a4c38fa3de649e6d47ff9676b66fada53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:80:90:40:ec:4b:4e:47:b8:d6:1a:8e:02:4b:
                    78:b2:54:01:8f:56:fe:26:87:7c:3d:d1:b7:db:bf:
                    7d:6c:f2:20:3b:b9:f7:96:71:fc:21:cc:31:dc:a9:
                    9b:f4:6d:82:9b:d0:e8:53:35:6d:fb:d6:56:b7:3e:
                    0a:b4:45:87:c4:e6:40:5c:52:6c:ab:e2:cd:b4:0b:
                    b3:e5:f3:71:e1:b6:17:4f:36:08:ef:90:e9:09:df:
                    73:62:92:9b:c7:b4:be:b9:db:5c:07:eb:66:40:7f:
                    71:82:91:79:e1:be:1c:88:41:e5:cd:93:fd:be:fd:
                    4c:33:60:4d:db:6a:c2:9e:8f:93:bc:c7:cc:2a:d4:
                    70:a1:1c:1c:ba:4a:4f:d0:4e:68:ce:79:13:af:e3:
                    57:a1:61:77:b9:c2:79:47:1c:56:d7:e7:cf:b3:0e:
                    4e:1a:3d:78:d5:f8:8c:43:cb:70:bf:c0:47:f1:34:
                    3c:1f:cb:f3:3f:b1:4c:38:7e:9d:01:34:e6:18:d3:
                    f8:cf:9c:a5:45:bd:a7:47:34:9a:8c:ed:fb:dd:7c:
                    a5:c9:87:a7:34:fb:ae:0f:86:f7:84:d2:85:a1:cc:
                    ac:c1:18:06:9b:31:0a:e7:53:9f:1b:c0:f8:64:b3:
                    e0:6f:9b:03:92:d8:4d:b1:a7:99:c1:04:d9:28:17:
                    5c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2A:B8:6A:4C:38:FA:3D:E6:49:E6:D4:7F:F9:67:6B:66:FA:DA:53
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e4:14:c9:44:3e:50:41:78:58:4a:4f:05:72:a7:43:f7:e8:
         ea:56:a3:fd:01:ba:ca:a2:91:48:22:fe:6d:ae:4b:41:0b:8b:
         60:08:e6:06:ce:68:7c:97:04:24:bb:0d:6e:4d:8a:f3:c3:a1:
         42:73:ca:77:ac:de:8a:14:e7:b5:53:0f:1a:0d:c5:2a:64:72:
         71:45:a5:98:27:a7:0d:69:30:95:a8:a0:7c:93:13:37:87:ed:
         79:4e:35:0c:64:67:a6:47:83:da:e7:86:c8:63:35:bc:81:14:
         d2:86:98:19:54:00:66:06:59:0a:cc:63:5c:bf:76:0d:95:bb:
         12:b1:44:6b:0b:5c:28:45:15:24:45:25:04:4c:86:30:41:8c:
         ee:4c:10:0b:c8:69:ea:e3:76:d3:90:ae:63:7a:3a:fe:54:0e:
         4a:c8:10:b4:4f:c7:3d:2d:0f:13:89:f3:69:03:63:84:81:94:
         69:10:15:e6:c5:ef:76:04:35:a9:32:76:49:de:d6:be:3a:2c:
         16:3b:b8:85:8f:a9:88:a4:80:e1:3c:d2:24:a3:3a:0b:02:82:
         ca:c1:b7:1d:84:e4:86:69:aa:0f:08:65:db:4f:58:57:42:3c:
         c3:ef:89:00:51:d5:fa:02:6e:12:49:2e:21:ce:2d:3e:e5:d1:
         59:c8:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:57:54 2026 by rpki-client