Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File:                     01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier:          tMrgtHfbyYtok9qNsoY7G67l4FS8io9e0bcf2aMsfmw=
Subject key identifier:   DE:F8:15:C1:09:E5:0C:24:E5:40:D2:51:3A:92:7F:5A:09:FF:0D:4A
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer:       /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial:       019EC0A3ACED8B8E6207FF8EFE72785A34FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number:          0864
Signing time:             Sat 13 Jun 2026 11:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:12 +0000
Files and hashes:         1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: n7DaHKIx/kkpR+QA7smMRa2AmuM7la8TUoDDAIXamQg=)
                          2: 4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa (hash: PqJvEzmh32UVxsDr7waFI7G4gmqJkPLZ5CaOrNIefv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:ac:ed:8b:8e:62:07:ff:8e:fe:72:78:5a:34:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
        Validity
            Not Before: Jun 13 11:00:12 2026 GMT
            Not After : Jun 14 11:00:12 2026 GMT
        Subject: CN=def815c109e50c24e540d2513a927f5a09ff0d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:91:4d:3e:52:ce:76:04:20:77:a0:23:4b:
                    bf:30:61:46:ff:4b:50:fa:6f:94:5d:ff:5f:65:35:
                    4f:cb:9d:e9:66:5f:fa:e1:ab:c6:74:dc:4b:c0:91:
                    58:5c:5b:a4:70:76:94:73:d4:ed:69:68:a7:52:b8:
                    3b:77:3e:7f:b2:9f:9b:dd:7a:37:54:52:83:24:6a:
                    1b:84:9e:cb:0f:01:f6:83:74:6e:c7:18:9c:89:52:
                    cc:35:90:ab:ff:3b:7b:5c:80:32:29:1a:24:e0:28:
                    2e:c4:81:5d:82:f9:75:59:66:b3:5a:c0:21:48:5e:
                    8a:3d:df:6d:bf:d5:db:7d:77:ab:24:b8:91:58:ad:
                    87:bc:59:1c:0e:1d:f9:31:1b:ca:94:71:a7:34:44:
                    98:22:2a:5c:09:aa:4e:63:f2:4e:ab:8a:dc:d8:79:
                    81:21:b0:c1:5f:23:30:46:bd:82:e2:dd:44:e8:7e:
                    bd:a2:1f:d7:af:66:36:10:c9:dd:f6:3f:0b:b6:a6:
                    4b:3c:31:1f:bf:3d:9b:93:37:7b:e4:cd:7a:9e:fd:
                    6a:e9:9a:0e:6e:a1:40:ac:e3:80:99:2d:5d:5a:4d:
                    42:1c:11:9b:3c:c7:07:08:9a:a8:72:b5:0e:20:85:
                    db:5c:9e:91:87:7f:9c:95:32:4a:44:21:cf:82:97:
                    5a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F8:15:C1:09:E5:0C:24:E5:40:D2:51:3A:92:7F:5A:09:FF:0D:4A
            X509v3 Authority Key Identifier:
                keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:90:99:6b:7c:ec:34:dc:9d:5f:73:34:f8:b3:9e:1e:ea:5b:
         b1:06:33:bb:73:66:bb:e7:6d:f8:ac:c2:7f:19:dd:98:d1:50:
         d3:6c:46:11:fa:e9:d0:c0:b3:b3:84:fe:fa:63:b5:40:6e:37:
         c1:9b:de:3f:17:89:54:3f:7f:38:cc:c0:9a:22:83:b4:90:f8:
         ea:40:5d:62:4c:37:db:57:0a:7b:d5:7d:80:20:ed:7c:8d:de:
         24:eb:59:51:f3:3a:2b:d3:5d:a7:6f:06:fd:b5:6b:a4:3d:58:
         a1:ad:3f:47:9c:1e:84:72:bb:8e:db:b5:c5:0b:23:5c:99:b7:
         b6:2d:80:a4:8b:24:00:64:7e:f3:73:a5:a4:da:d9:1c:ff:97:
         7a:66:87:1c:c4:41:64:d4:dc:8b:db:ca:b9:ca:e6:0a:3d:0f:
         9b:c2:3d:91:b7:74:d5:c3:71:aa:71:57:0f:f1:97:46:af:73:
         8f:9d:16:61:b8:0e:40:02:ac:c6:2f:66:ee:32:b2:2e:50:27:
         25:1b:6c:d8:92:ed:3e:87:ff:42:fa:28:03:22:e4:f5:7a:bd:
         85:f0:cd:7c:ca:92:1e:2c:dc:0b:ae:d4:12:75:ee:4e:1c:32:
         1e:44:bd:3a:26:cc:1c:e8:aa:11:2c:87:04:13:e1:fe:06:61:
         bb:2b:47:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:24:14 2026 by rpki-client