Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
File:                     Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft (raw, json)
Hash identifier:          ubIHIJhnPFrn2nnJnIJG+7+dd+KtiRvb7AW+fj7AGFQ=
Subject key identifier:   7E:3D:3E:68:1A:4F:FE:B9:78:E5:46:98:D1:68:A2:A1:1B:22:1A:10
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Certificate issuer:       /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial:       019EC224EB878BDB02878BAD426E4D6E47A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
Manifest number:          1963
Signing time:             Sat 13 Jun 2026 18:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:59 +0000
Files and hashes:         1: 6GPblw6DV3CHVZNWZ0QdaVy6klk.roa (hash: DqtHDBDEhiMvYHUrl8XYbcaTNh8BiLqth+UKaws4rT8=)
                          2: Bzo_d6zW3tj-cs4yT8d3sKOXlfg.roa (hash: sB4IjXQ2q1JliT65t5pMashaLGv9OdpiFjT65GllIOg=)
                          3: Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl (hash: mFIewI9Sju5p+Rv/1BrPrQlVaWf3EBCoQKke1GhVam8=)
                          4: E3W4jp5zsoikKWLmA1V7bWlcpV4.roa (hash: YJ9yEvPcrd1MOHEooUf+VZebkz+BFG/oUSCxEMHiKbk=)
                          5: aUScLYE7hWlZLrttrbL09JUvQA0.roa (hash: x+eRx80jxSLOtFgW7pQIqcwn52mE8qpARjfDhLVRoV4=)
                          6: nW3IwE5roVsnBgu9z0_CgUuzIkE.roa (hash: W9YQgHEfBWzENVLpd45FQgo4EBkxudFGiV0/tWzb3uI=)
                          7: oJikVGeGH47Pi9ETf25ZC2y534A.roa (hash: O9mHTIlUIZNrSBo/sFV/Ngmx3bneDcEBab5/fbZjQkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:eb:87:8b:db:02:87:8b:ad:42:6e:4d:6e:47:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
        Validity
            Not Before: Jun 13 18:00:59 2026 GMT
            Not After : Jun 14 18:00:59 2026 GMT
        Subject: CN=7e3d3e681a4ffeb978e54698d168a2a11b221a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:aa:1f:ef:80:bc:f7:d1:c0:1f:e7:c4:4a:
                    47:0d:fa:5d:ea:1e:97:d9:90:79:13:fd:59:d1:88:
                    e8:2d:e4:2c:67:f1:b4:29:42:0a:e5:6d:be:41:63:
                    c1:de:3b:99:71:57:e0:45:6f:e8:cf:95:e2:35:25:
                    fb:e2:65:0a:aa:66:9d:da:50:67:91:0c:25:93:45:
                    a7:d7:48:4c:fb:7b:ee:d3:34:92:b8:75:f2:b0:bd:
                    8e:e3:88:2e:df:12:b8:3e:fd:44:7f:43:b0:1f:6e:
                    b7:56:2d:a2:f7:05:97:c9:c0:10:40:64:32:55:a4:
                    8e:09:25:a2:59:21:30:8a:b9:1d:b8:5c:64:b6:3f:
                    04:08:20:98:f1:56:9b:66:e8:1b:03:f0:8f:e8:c1:
                    b9:5b:eb:29:12:1a:51:04:3b:a4:9c:c2:aa:aa:9f:
                    70:1d:8f:bd:5d:cc:6b:df:5c:f1:c1:a9:04:6b:41:
                    3b:68:1d:81:64:a8:45:c5:2b:85:4d:99:e0:d0:20:
                    d2:f0:8c:48:54:5e:92:57:f0:39:e2:8d:c7:da:1b:
                    23:27:77:dd:13:7b:08:b1:ab:3b:cd:ac:c0:5d:ff:
                    00:cd:95:e5:f2:ef:dc:c8:46:bb:7c:57:6f:64:29:
                    15:c4:fc:f3:10:60:33:03:04:85:c1:48:71:4e:2b:
                    fc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3D:3E:68:1A:4F:FE:B9:78:E5:46:98:D1:68:A2:A1:1B:22:1A:10
            X509v3 Authority Key Identifier:
                keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0c:fb:b3:05:7b:5e:96:80:7f:96:d7:18:f6:d1:ea:0c:1b:
         c3:d6:db:84:3d:6f:49:d8:ec:21:99:b0:eb:aa:d3:0e:01:16:
         88:c7:3b:58:80:9e:dd:66:72:a8:94:98:9d:1c:94:05:38:45:
         94:93:96:7d:37:d5:89:4c:75:87:f3:17:66:e1:a9:d9:81:48:
         1a:d5:3f:a4:0e:53:f4:e1:b8:e0:f8:59:ff:ba:ce:46:1b:f9:
         67:3a:ad:3a:d4:fd:36:dc:86:00:db:01:8d:58:01:ae:7d:a7:
         75:1a:ad:3a:d1:1e:b4:00:fe:79:f5:a4:6c:e4:c1:0f:25:b1:
         65:cd:2f:54:f6:82:d0:3a:30:ca:51:9d:90:f3:ba:ee:bd:a7:
         dd:41:e6:fd:ef:4c:70:1e:60:6e:03:89:f4:64:88:11:15:78:
         46:90:87:09:7c:c1:b8:59:17:9f:20:2f:c5:2e:83:d7:37:71:
         b7:1d:ea:f6:71:c8:19:47:eb:f0:e8:52:35:d6:33:4e:5f:c1:
         58:cc:a9:1c:b0:64:a5:33:ae:cc:2a:80:42:10:1c:10:cd:81:
         21:9c:78:da:32:e9:61:4e:2e:c4:92:b1:fe:f3:7f:e7:77:0d:
         82:15:2c:55:ff:a8:95:b7:48:b0:49:60:30:df:92:de:c4:4b:
         f1:58:cd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:17:07 2026 by rpki-client