Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File:                     iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier:          QZbP4Vm6wLWWYVs7HTlnZDLItdTul21O59ZL87HBYDA=
Subject key identifier:   9A:29:AA:58:EA:F8:74:71:D3:F0:F5:EE:3D:A3:07:B5:48:D4:53:1A
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer:       /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial:       019EE0D487A6A3E32D2A4792E0F8792C970E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number:          168E
Signing time:             Fri 19 Jun 2026 17:01:25 +0000
Manifest this update:     Fri 19 Jun 2026 17:01:25 +0000
Manifest next update:     Sat 20 Jun 2026 17:01:25 +0000
Files and hashes:         1: DoG1nIvAyF6Ofk7B7oBXD9fCbWY.roa (hash: 9biYSv6POYCwfleLHgkM4hjjkLE1P6h07qcPCt2vZ8Q=)
                          2: Ku186Y-Tu0woDCZbFinpqq7ZdFE.roa (hash: v4Tz8TXIdty6/ZjbJ1ivX2W0EU7wX33Cwf/C7mVCK74=)
                          3: _yFrTYVVOzem6SAvOPOzP_wE_MM.roa (hash: 5prdT05UIi7fhKfl8B0EiaHRzoodJuHLB7r7onONbos=)
                          4: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: ZwgREvw6cl80vuEp/qPSanXpEiuqhaBOebyOxy3YAt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 17:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e0:d4:87:a6:a3:e3:2d:2a:47:92:e0:f8:79:2c:97:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
        Validity
            Not Before: Jun 19 17:01:25 2026 GMT
            Not After : Jun 20 17:01:25 2026 GMT
        Subject: CN=9a29aa58eaf87471d3f0f5ee3da307b548d4531a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:c8:80:58:b9:86:fc:79:f1:eb:4c:f0:8e:
                    b6:ec:22:a8:14:95:d0:b5:63:71:74:b0:de:d8:d0:
                    e5:4d:05:47:c5:68:15:64:1e:00:9c:9e:a6:ab:c6:
                    bf:65:8c:64:58:62:de:be:9e:59:61:30:55:70:99:
                    e5:78:04:17:39:7f:04:11:8d:0c:e0:94:37:16:99:
                    d6:d7:ba:3e:88:4c:35:c2:9b:3b:a6:ce:e7:39:a0:
                    17:7b:6e:19:33:57:01:37:95:6b:50:1a:ab:a3:3a:
                    72:84:37:c3:8c:46:0c:36:8f:53:82:37:97:79:b1:
                    70:78:1a:ae:db:34:e3:b9:09:77:be:01:2c:8d:2b:
                    20:ee:71:c3:55:07:64:bf:17:4a:f2:82:28:b2:e8:
                    43:0d:31:d4:cc:72:00:bb:49:02:c1:66:bc:96:6c:
                    95:d9:08:04:38:90:c3:01:b6:7e:41:4a:8f:15:3b:
                    37:40:7e:3d:ad:43:a5:46:b6:40:b1:3b:d2:0b:dc:
                    27:a9:23:a0:a7:76:c2:db:ef:c4:16:e1:46:e3:07:
                    e5:0c:c4:bd:7b:75:81:d1:24:92:86:29:4b:a1:07:
                    e9:65:46:8f:d4:ee:e4:83:f6:d6:a7:d0:0c:21:ab:
                    6b:54:0b:c6:90:33:51:a4:22:2a:2b:a5:db:04:c6:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:29:AA:58:EA:F8:74:71:D3:F0:F5:EE:3D:A3:07:B5:48:D4:53:1A
            X509v3 Authority Key Identifier:
                keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fa:66:6f:c6:6c:b4:6b:0c:00:52:58:70:46:e3:22:63:58:
         f9:e2:ee:72:4c:c8:29:2e:2a:e6:ee:18:5e:14:b3:e4:3f:a8:
         55:0c:b6:5e:87:19:86:65:3f:67:a0:fd:81:d5:1c:a0:d3:b8:
         ae:71:66:65:6e:2e:f8:96:2d:34:21:72:49:4e:ae:7f:f3:1a:
         f0:28:36:40:5f:04:da:16:34:b0:63:30:07:5d:ff:00:87:a1:
         ab:30:53:a4:ea:d1:2a:0d:a1:f1:a3:84:5e:0c:90:e8:f1:31:
         b1:ef:f2:55:fc:9f:9a:90:2e:be:61:d6:a7:f6:66:89:52:e6:
         95:32:7e:74:ba:8b:60:33:fb:e9:b2:64:a3:de:c9:e7:b2:bc:
         89:70:03:9b:14:f4:aa:95:0e:93:5e:16:c1:bf:b6:61:4c:71:
         fe:80:d0:ea:30:c8:03:08:7a:20:f0:3e:82:79:61:bb:d4:5f:
         76:b6:91:d5:f0:ea:d0:ab:61:7e:dd:bc:55:d8:fa:6c:da:1e:
         e1:89:a1:4e:a7:1e:66:a3:c9:e8:29:8a:92:27:c9:f3:10:8a:
         67:e2:25:93:31:b7:99:f7:ad:66:a5:13:15:74:0e:e8:51:4c:
         21:b8:67:ba:d2:90:99:11:72:7e:bb:4b:83:f9:86:c0:5e:0c:
         10:66:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:34:15 2026 by rpki-client