Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File:                     d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier:          rmEOfr4MuWVIXkwZZ4bwHGbJ1A8Lmvucd+wMxZO7614=
Subject key identifier:   3B:40:9B:25:A6:C8:0B:6E:9E:5A:9F:A9:B5:DE:40:A2:63:F3:B4:95
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer:       /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial:       019EFB3AE35A427C79E49B7E56BCE9E6B329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number:          14A7
Signing time:             Wed 24 Jun 2026 20:03:20 +0000
Manifest this update:     Wed 24 Jun 2026 20:03:20 +0000
Manifest next update:     Thu 25 Jun 2026 20:03:20 +0000
Files and hashes:         1: 4tLtZV00F7203d-0-VBLm-eP82U.roa (hash: lay1wdctHfM+5cGbvUeC7dYoLI/g4f9AW/OZJtKzUcM=)
                          2: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: J47C+4GexCKQILn9Y7X2mDvwQQh0tClZ3Q7sYK6Zu1o=)
                          3: jknUDg7dwoXIKf-FEYWIUojpUtc.roa (hash: 2W3qLOECU7Uc4cSeqqL3ulz5L4R4vc28jKIJo8yhIIg=)
                          4: yeFo64foK3kpAhiGs_pqxDBcJmw.roa (hash: 4dFVu3RpkjabUXVyt139HwNFtfV67WkuH9beOvHuc1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 14:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:3a:e3:5a:42:7c:79:e4:9b:7e:56:bc:e9:e6:b3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
        Validity
            Not Before: Jun 24 20:03:20 2026 GMT
            Not After : Jun 25 20:03:20 2026 GMT
        Subject: CN=3b409b25a6c80b6e9e5a9fa9b5de40a263f3b495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:f1:ee:03:38:57:aa:ed:17:b7:f8:de:31:
                    5d:6a:ca:54:32:76:b2:9a:79:71:c8:5f:d8:b1:d7:
                    cf:57:3a:a9:e9:ea:da:fb:aa:5c:7d:3c:75:e2:a5:
                    11:33:21:74:20:9e:38:a4:4d:28:d8:0c:77:df:fa:
                    d3:a9:1f:8e:98:8f:64:93:eb:50:cc:26:a8:3f:ee:
                    e0:3f:04:e9:d1:e5:21:10:37:ca:82:59:be:3b:d2:
                    13:82:9a:de:5a:e2:f9:74:9d:77:45:70:af:b1:aa:
                    09:d3:0e:55:51:e7:de:c6:8f:e2:76:02:03:0b:9a:
                    03:96:92:3c:10:99:63:d4:96:64:7a:04:9b:bd:a9:
                    93:41:89:cc:1b:c7:a8:79:66:cf:29:3e:b0:99:53:
                    07:79:ba:3e:b3:29:53:a4:5c:6d:7d:29:8b:bc:40:
                    91:5f:4d:fb:74:0e:82:0a:d3:26:ac:86:6a:9c:f8:
                    f0:0d:64:9e:88:ae:df:f8:5e:c8:01:12:39:2a:58:
                    09:05:48:c5:b0:17:a5:97:28:37:bf:9e:ab:0a:09:
                    3b:28:a3:17:32:35:73:c6:77:7d:0c:03:76:38:3f:
                    f7:14:eb:8c:15:ca:4e:31:22:60:48:89:a3:4b:29:
                    40:cc:02:9c:77:35:a3:e1:a2:21:7c:0e:ab:d0:6e:
                    a2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:40:9B:25:A6:C8:0B:6E:9E:5A:9F:A9:B5:DE:40:A2:63:F3:B4:95
            X509v3 Authority Key Identifier:
                keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:32:e4:42:fc:b5:6a:51:e1:cc:9e:a1:d2:96:76:b3:8f:ab:
         30:c5:84:9a:bf:08:5c:25:25:a3:41:44:24:df:0f:63:99:6b:
         e4:1c:24:1e:61:42:8a:89:be:02:46:c4:32:2a:4d:94:ae:19:
         4c:17:02:f6:ef:48:3e:87:0e:4f:99:97:96:6f:bb:70:3b:ff:
         eb:a0:0d:6c:c1:45:5a:24:b8:ab:e9:09:ff:4f:61:62:2e:f6:
         3d:7f:6d:ea:e8:a1:7a:c0:c4:46:7b:8f:63:7b:55:eb:b9:8d:
         fa:02:f2:3d:15:90:a1:20:4b:bc:b4:50:59:d7:80:e5:1f:d7:
         bd:15:41:f5:91:17:35:d2:f4:51:05:ad:b5:c4:32:62:7f:c8:
         68:ba:41:65:b8:2a:dc:be:66:22:85:87:08:38:7b:7c:26:b6:
         3e:ad:32:34:75:b5:56:8b:83:99:5e:21:fb:22:b1:ee:af:d4:
         f0:c1:b3:68:f8:d9:cb:bf:95:a1:7c:b9:23:34:a8:71:8c:47:
         02:f5:ce:4a:2f:db:3e:f4:77:f3:60:a8:98:f8:50:db:a4:06:
         20:8b:9f:01:2d:ab:02:aa:18:45:75:a9:2f:e5:49:21:0e:77:
         cd:28:b6:3d:cb:e9:63:e9:e2:3c:43:c4:c3:ed:89:4f:19:d3:
         91:69:58:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:21:18 2026 by rpki-client