Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File:                     d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier:          Annso7xC5/GuOs0ppXlcpwgrvNBPYvSjQcKpypU82FQ=
Subject key identifier:   2D:A2:B0:43:77:DC:CB:19:B5:9B:CE:57:9F:CB:EA:E0:03:45:17:E8
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer:       /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial:       019EF94A8CC4E5B0B3AA92FB04656D32C941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number:          14A6
Signing time:             Wed 24 Jun 2026 11:01:12 +0000
Manifest this update:     Wed 24 Jun 2026 11:01:12 +0000
Manifest next update:     Thu 25 Jun 2026 11:01:12 +0000
Files and hashes:         1: 4tLtZV00F7203d-0-VBLm-eP82U.roa (hash: lay1wdctHfM+5cGbvUeC7dYoLI/g4f9AW/OZJtKzUcM=)
                          2: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: UdyQ5MlrGv5Pepbc1llbQZU2U0Dim1tVGjuPL016Bik=)
                          3: jknUDg7dwoXIKf-FEYWIUojpUtc.roa (hash: 2W3qLOECU7Uc4cSeqqL3ulz5L4R4vc28jKIJo8yhIIg=)
                          4: yeFo64foK3kpAhiGs_pqxDBcJmw.roa (hash: 4dFVu3RpkjabUXVyt139HwNFtfV67WkuH9beOvHuc1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:4a:8c:c4:e5:b0:b3:aa:92:fb:04:65:6d:32:c9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
        Validity
            Not Before: Jun 24 11:01:12 2026 GMT
            Not After : Jun 25 11:01:12 2026 GMT
        Subject: CN=2da2b04377dccb19b59bce579fcbeae0034517e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7c:e0:15:d7:16:22:85:6c:3e:4f:4d:e6:a7:
                    4b:c3:74:36:d8:4b:fb:1c:49:70:55:43:5b:27:b1:
                    95:d8:b6:f0:ed:c7:9d:0a:57:4c:a8:25:ab:91:2f:
                    5a:48:21:ed:34:35:1d:31:ce:c1:f3:5d:49:15:00:
                    87:72:72:35:d4:ab:54:0d:a1:c3:b0:a1:cc:d4:94:
                    24:57:51:ec:39:75:cd:ee:52:cb:a3:59:3f:8c:dc:
                    07:31:e3:a7:0e:a2:cb:23:9a:7a:68:3c:8e:f4:7e:
                    ed:91:93:5a:c6:22:a0:07:ca:72:22:41:6d:84:ec:
                    ca:63:d4:23:9e:65:8d:a3:47:56:89:b0:89:ff:d4:
                    3e:a3:04:28:3a:d6:4b:4f:b3:14:51:c9:da:8f:3f:
                    08:5f:b9:fe:18:da:fc:1c:3f:6d:80:17:8f:ce:36:
                    5f:ba:2f:c8:26:9c:51:92:25:2b:66:cd:40:68:cc:
                    5d:22:0c:b7:aa:26:a5:a9:d0:a6:de:c0:6f:71:c6:
                    a9:ce:6e:6e:b7:49:f9:c2:11:ad:cd:a5:98:47:32:
                    05:af:b3:98:cb:eb:8a:09:3e:56:5f:e5:0e:3a:6d:
                    5a:07:37:d6:cf:71:9d:ec:b5:49:bf:0a:38:2f:f4:
                    28:86:76:3d:08:a8:d8:c9:e2:6e:b2:11:9c:b9:99:
                    c6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A2:B0:43:77:DC:CB:19:B5:9B:CE:57:9F:CB:EA:E0:03:45:17:E8
            X509v3 Authority Key Identifier:
                keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:87:ed:05:ba:a9:76:a7:66:02:c6:00:97:ae:b7:4c:72:07:
         16:73:0a:2a:aa:17:7b:4d:69:75:23:c1:96:27:60:1b:db:65:
         aa:3d:20:33:70:8e:b5:d2:7a:5c:23:b6:44:85:57:b0:f3:0f:
         be:18:53:a8:d3:1a:3a:cc:29:47:9e:74:4a:f0:c0:dc:d8:07:
         55:84:48:15:4b:cb:99:67:a9:46:ac:90:9b:2b:26:a5:21:6f:
         5c:f4:36:30:02:a7:01:b9:02:cf:17:95:a2:84:48:ac:02:39:
         47:7f:39:76:c4:e1:02:95:e7:60:de:8a:26:ef:44:3b:a6:07:
         8f:a0:1f:2e:22:ab:f3:b5:3f:90:07:25:eb:13:8d:94:5e:92:
         5c:59:92:8d:ea:ad:ed:10:f8:13:35:4f:35:0a:75:98:93:39:
         85:75:aa:d4:8b:f1:00:b9:d2:1f:f5:e1:58:a6:6c:41:d3:23:
         c5:3d:b0:ca:d7:21:94:1d:a0:56:3f:3a:09:1a:53:5d:f7:b5:
         af:7f:5a:0a:09:c4:c3:4f:cc:c2:a7:ce:a6:50:68:02:39:ad:
         65:68:ea:92:e2:26:16:35:0d:d4:a9:ff:a5:7d:ed:07:b4:fc:
         2e:e2:99:cc:6d:9f:e3:21:ce:7b:4d:cf:b8:70:de:2f:68:cf:
         98:4c:f6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:47 2026 by rpki-client