Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File:                     d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier:          prxd32MG3qJbDOlEcsyiRza3A7Amk731DC1MrNjFeFY=
Subject key identifier:   9A:DD:7B:BD:60:FF:1C:AF:7E:4C:51:E6:F4:B3:92:43:11:22:DB:93
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer:       /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial:       019EE7E9D15DA9794F18D1BDD0DC96609B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number:          1054
Signing time:             Sun 21 Jun 2026 02:02:00 +0000
Manifest this update:     Sun 21 Jun 2026 02:02:00 +0000
Manifest next update:     Mon 22 Jun 2026 02:02:00 +0000
Files and hashes:         1: 1-x1SQoCge1oAxdF8NH1g432c8v4.roa (hash: gGNG1VzQDUnu5gmTgkEbwFhdDKx8kxbSdmHR7f+ftE8=)
                          2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: e4fNqLjT2PU564N3z8dnjkVIWdSnlv7LLN6a8V5erlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:e9:d1:5d:a9:79:4f:18:d1:bd:d0:dc:96:60:9b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
        Validity
            Not Before: Jun 21 02:02:00 2026 GMT
            Not After : Jun 22 02:02:00 2026 GMT
        Subject: CN=9add7bbd60ff1caf7e4c51e6f4b392431122db93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:9b:38:ea:03:7e:88:c8:28:ef:3f:1f:99:
                    09:40:1d:2c:12:51:bb:75:ef:14:b7:e0:f1:ff:d9:
                    28:01:69:02:d2:77:63:9a:80:31:91:c7:e9:96:f2:
                    82:54:7e:06:1a:2b:39:73:48:2d:65:f7:ea:04:2b:
                    71:9a:42:23:7b:1f:1f:5d:15:3e:2f:66:1d:c6:d5:
                    33:dc:2f:16:91:56:f2:98:40:23:2a:09:d7:1c:75:
                    09:79:30:a5:eb:7b:33:96:7a:7a:0d:0d:43:52:9f:
                    57:29:ce:de:c3:4a:79:c2:ca:c2:e9:0d:f4:e8:8d:
                    d2:a3:f2:c3:2f:f4:1b:1a:42:18:0a:a5:a3:c2:84:
                    8f:07:75:18:a5:22:c2:32:2a:ec:2b:ca:b8:68:97:
                    fc:5d:38:0e:7e:ef:34:0e:a5:dd:e2:ef:c7:c6:6e:
                    59:f3:30:2e:d0:b3:50:20:21:31:20:92:c9:01:78:
                    45:f2:d5:8a:70:dd:19:49:37:47:44:37:7b:8c:2d:
                    37:ae:62:84:d4:83:44:f7:cc:2c:c4:a3:d5:21:0c:
                    f6:05:6b:a2:8e:b4:ef:28:a0:19:7c:8b:86:52:77:
                    8b:97:a5:8a:c9:e5:ff:24:ef:78:66:73:73:03:8b:
                    c7:4a:ba:93:91:de:a3:d6:f7:09:85:00:df:55:b7:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DD:7B:BD:60:FF:1C:AF:7E:4C:51:E6:F4:B3:92:43:11:22:DB:93
            X509v3 Authority Key Identifier:
                keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ef:49:d4:80:ab:bb:cf:74:5c:2f:3f:7b:53:1e:b4:32:f0:
         86:3b:71:7f:97:9b:8c:fe:c9:29:d3:0e:a0:aa:ee:21:9d:59:
         5f:4a:82:21:98:8d:9f:52:08:f3:7f:08:df:e6:76:69:52:71:
         62:a2:51:59:cc:aa:81:ec:37:59:72:72:3d:2c:4a:65:8f:06:
         4f:bd:1d:e2:7e:3e:8a:97:ee:14:58:65:4f:47:d6:75:28:a8:
         e9:3e:79:6d:4f:47:6c:8a:2d:2f:4c:95:fb:99:d9:e1:a6:02:
         ef:6a:c2:61:af:68:33:8f:f5:d7:b1:d8:17:39:08:22:5f:3e:
         77:67:89:47:2d:ac:62:fe:72:2e:4b:58:7a:5b:8e:34:d9:83:
         2e:ce:e8:c8:c5:91:8f:6d:a5:ad:9d:f4:f5:77:9f:ea:fa:26:
         2f:86:87:ac:70:2b:18:53:34:74:81:39:14:09:11:e1:81:56:
         95:e8:17:2a:e0:58:57:55:dd:0e:ab:15:3f:21:2b:1c:25:3f:
         51:a9:95:7b:0c:18:ec:21:50:9a:2c:75:b9:7a:76:fc:c8:55:
         8d:9d:16:1e:bc:40:cb:a1:ed:71:0e:0b:2a:03:ba:dd:08:99:
         3c:5e:d2:49:bd:41:89:54:8c:92:31:4a:19:67:07:dc:3d:00:
         65:27:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:04:19 2026 by rpki-client