Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File:                     86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier:          aRLyz6PrgOuD+9zqLFopmX/oT7FpJaR8US670nEjtyo=
Subject key identifier:   A7:8D:93:15:3F:1C:56:A8:3A:C8:73:94:31:FF:8E:40:25:C4:A7:5E
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer:       /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial:       019EC0A45FFE6AD057FFC2488C9AC78BB7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number:          069D
Signing time:             Sat 13 Jun 2026 11:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:58 +0000
Files and hashes:         1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: 6EF4GoQ7He5W8vN0f0kgLtFEcTCosFaJa2SxZ4OTUJk=)
                          2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:5f:fe:6a:d0:57:ff:c2:48:8c:9a:c7:8b:b7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
        Validity
            Not Before: Jun 13 11:00:58 2026 GMT
            Not After : Jun 14 11:00:58 2026 GMT
        Subject: CN=a78d93153f1c56a83ac8739431ff8e4025c4a75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:65:66:53:eb:46:c5:18:f0:00:a4:49:ab:
                    75:e7:c0:00:01:05:2a:94:44:36:f2:ce:70:4b:d2:
                    2f:5e:cd:c8:1e:78:1d:5e:d2:01:23:7f:58:e9:43:
                    5c:61:7c:c2:1b:0a:f0:bf:52:01:78:67:90:9a:9c:
                    5f:b2:45:39:77:c1:11:d3:f5:9f:a6:91:3d:24:9c:
                    13:5e:ea:36:30:52:53:ca:27:08:3f:4b:93:1f:84:
                    a5:d4:ec:f7:8a:c2:09:10:c4:be:51:54:2d:c6:6b:
                    ab:13:f8:1f:cf:ee:53:7c:1b:eb:40:02:ed:9d:df:
                    5d:e9:d5:4c:53:82:6c:a7:49:9b:ac:55:78:5d:27:
                    65:8a:2c:30:81:1b:f4:e6:6e:d6:ca:4a:96:23:12:
                    b9:95:0f:4e:5c:e1:25:3e:e3:47:75:e0:3d:9a:e0:
                    bc:0d:54:a0:52:c9:77:10:1a:8a:6c:44:37:7a:db:
                    ef:33:a7:5f:32:06:ce:9e:5a:c4:b3:10:2e:91:9c:
                    70:d7:b5:4f:53:cf:36:ec:af:39:3d:28:09:47:a1:
                    be:e6:66:c7:c8:95:8d:b7:78:4b:eb:bc:16:b4:55:
                    50:b0:67:8e:bd:be:20:c6:69:d2:7f:fc:20:c9:29:
                    e5:3b:66:af:56:26:52:bf:d1:e4:e5:c9:66:58:2a:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8D:93:15:3F:1C:56:A8:3A:C8:73:94:31:FF:8E:40:25:C4:A7:5E
            X509v3 Authority Key Identifier:
                keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8f:b7:fe:1b:fe:38:3a:66:96:f3:2b:5e:d5:17:7b:6a:76:
         ec:07:df:7f:08:b2:05:40:4e:7b:af:6c:dd:e7:26:e4:d0:8a:
         ed:5c:c7:2f:6c:e8:70:52:d1:05:76:a7:b1:9b:4e:48:c4:16:
         e2:b4:00:78:51:c1:5e:bf:44:5c:21:17:43:c3:17:6a:d6:35:
         f6:07:14:1f:b1:aa:5a:01:92:15:61:e5:a1:96:38:71:ba:b0:
         89:52:ab:e0:03:20:b9:a8:2e:ef:8d:db:a1:13:8c:98:64:ad:
         88:47:25:63:a1:c9:8a:21:5b:bd:f2:8b:df:a5:b0:ce:46:a4:
         3e:ee:6f:a9:66:f9:15:e1:c1:46:93:d9:34:31:af:6c:bf:1d:
         a6:20:d5:2f:e0:2a:4b:5c:df:97:18:bc:2b:df:a9:84:8f:db:
         d4:90:a0:bd:fc:4d:44:ed:58:c9:30:dc:f1:5c:7f:9d:5d:df:
         24:71:d1:45:24:2a:11:ba:32:29:8e:62:a3:7d:ce:18:cf:ab:
         82:e0:f9:99:77:37:1e:73:7e:0b:a0:19:5d:5a:3c:55:d9:81:
         df:ec:38:f6:fa:f9:e5:e9:42:a6:65:ec:8d:b3:97:d8:8b:8d:
         44:42:41:61:8c:c4:29:a5:17:cc:c4:9a:33:a9:7d:04:17:0f:
         03:f3:ea:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:37 2026 by rpki-client