Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File:                     0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier:          2OCaYLwoVoo08RyxAjESmBNaMT4ciW2wvg/Kp8Fmpwg=
Subject key identifier:   EE:9A:2E:7E:40:10:C9:6C:36:9E:B9:D7:8C:A5:7B:48:8F:37:E6:C2
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer:       /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial:       019EBF23D5E76E68788791240F05BD473195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number:          1459
Signing time:             Sat 13 Jun 2026 04:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:57 +0000
Files and hashes:         1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: AlCZeH/A2Z0/TBFcO6YRZxoK7sqo1Ximk4ME1ghwhSs=)
                          2: 1pCvkt2PpE0ZPUQ0xcRpclm4Vx4.asa (hash: DhYV1vMdkhq6+tjylyKNPB9YXFnru1L+V/7iVRsUG3M=)
                          3: 2xGqMqbFa646EMEXsukXriphVW8.roa (hash: odEL2M6BYLsF4njGikEkDGjtP1dJDgPaubWbiCHPAAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:d5:e7:6e:68:78:87:91:24:0f:05:bd:47:31:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
        Validity
            Not Before: Jun 13 04:00:57 2026 GMT
            Not After : Jun 14 04:00:57 2026 GMT
        Subject: CN=ee9a2e7e4010c96c369eb9d78ca57b488f37e6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:17:06:79:8b:13:ba:5d:52:2e:1b:e8:6d:
                    c5:67:c3:48:5c:36:4d:5e:75:f9:39:cc:dd:37:fe:
                    42:1a:10:a0:cb:0f:80:c8:d7:38:48:50:9a:97:03:
                    0f:7a:a1:bd:59:4d:b1:36:03:33:75:e3:25:bb:ab:
                    09:fb:c2:45:09:29:a9:b4:3c:00:a9:4c:6b:c7:3a:
                    7a:a0:b1:ca:ac:7e:32:c3:19:25:49:bf:f8:3a:cd:
                    2b:66:9e:de:e5:70:aa:51:04:df:9c:09:40:ab:3b:
                    18:17:d1:0b:6e:b4:e7:fc:3e:ca:a2:0a:ee:0d:2f:
                    92:75:bf:29:3e:95:61:9f:b7:9e:3f:6a:58:a3:1d:
                    79:2c:48:01:d4:46:44:cc:51:13:b6:96:01:12:6f:
                    fa:16:9d:d8:5a:ca:a0:fd:80:f5:45:1c:ff:ce:d8:
                    05:f3:c4:1a:61:d3:48:23:f8:e3:2a:a7:38:ec:fd:
                    0a:e4:de:55:26:97:b4:65:3e:91:81:7e:c3:95:02:
                    04:28:c2:a3:ba:1b:60:18:44:4c:f2:9a:13:39:5d:
                    07:ee:82:9e:16:9d:22:cd:96:0b:97:dc:7c:22:04:
                    0c:09:04:58:ec:5d:69:09:d5:9c:78:d5:bb:7f:cd:
                    0c:21:76:7d:e7:a1:2f:10:df:fe:73:1d:b4:16:7a:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9A:2E:7E:40:10:C9:6C:36:9E:B9:D7:8C:A5:7B:48:8F:37:E6:C2
            X509v3 Authority Key Identifier:
                keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a5:81:5f:0d:53:9d:ad:44:de:b6:66:a8:7d:b7:17:1a:3d:
         c7:a5:73:64:14:64:9f:99:88:5b:2b:bb:78:83:90:e0:fd:f2:
         07:40:54:74:58:c2:89:1d:f7:2f:64:e0:1f:66:17:ca:bc:6d:
         30:77:c0:f0:89:55:95:bf:5e:8d:a8:64:99:f7:1d:8b:b0:5c:
         b4:82:18:65:1b:94:fb:70:9c:ad:2c:e8:72:9c:ed:64:aa:fb:
         7c:a4:a9:d3:24:ca:51:e6:15:ec:93:87:38:87:72:bf:88:20:
         09:83:52:f3:15:b2:78:1d:3d:71:04:8a:81:e7:0d:22:4f:64:
         63:a6:11:5e:04:d0:9f:f1:2c:2b:9f:2b:c5:20:4b:4a:29:4a:
         0f:2d:e3:35:f0:d0:4d:0c:e7:35:b5:5c:b6:db:41:96:d5:fe:
         d9:01:90:9d:5a:8c:8b:75:da:84:7e:67:2a:64:54:d3:f1:40:
         c9:34:53:b1:6b:28:dc:65:07:fe:da:e1:46:61:f2:d0:89:19:
         59:73:7f:1e:1a:c0:22:41:b6:46:42:44:30:26:68:39:d0:f7:
         ca:ba:44:d0:5c:01:1f:51:a6:08:ba:e3:35:df:33:12:d3:50:
         d3:fe:9a:0a:c8:75:87:b1:30:4e:b9:0f:47:35:5c:0f:ed:df:
         53:d7:a8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:56 2026 by rpki-client