Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File:                     aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier:          ncZsOBZJgADu6ujH25wAPck9ApFLj3MFZ2/bkvWeSuU=
Subject key identifier:   43:24:08:2D:A6:24:D3:B7:5B:00:7D:FB:1F:FA:80:CB:7C:1A:30:16
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer:       /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial:       019EB9C69C2BAC4A92BDEFF7BC6C181B4B08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number:          18EA
Signing time:             Fri 12 Jun 2026 03:01:01 +0000
Manifest this update:     Fri 12 Jun 2026 03:01:01 +0000
Manifest next update:     Sat 13 Jun 2026 03:01:01 +0000
Files and hashes:         1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: 2mpIBQnpIOztBs9jsBaCvPulJN9E6kGYjZtWAlSXx0Y=)
                          2: pwbWCuGOLTFOrJupg71uoibxjHU.roa (hash: AW3hofHwJcZNnJFiGJ8uTdZk7az4nc9IpPWU/+dKm48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:9c:2b:ac:4a:92:bd:ef:f7:bc:6c:18:1b:4b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
        Validity
            Not Before: Jun 12 03:01:01 2026 GMT
            Not After : Jun 13 03:01:01 2026 GMT
        Subject: CN=4324082da624d3b75b007dfb1ffa80cb7c1a3016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:15:f4:67:94:2e:e0:cf:91:96:fb:5e:ce:
                    01:16:00:6b:62:ba:de:99:60:f6:93:bd:33:27:2f:
                    89:9e:6b:fc:e4:34:88:53:ef:4f:d7:b3:20:e9:27:
                    1b:1f:e6:9c:37:57:95:3d:d1:25:d4:81:ef:d4:02:
                    1e:4d:fc:d1:1e:ef:73:4f:2c:45:46:f1:a9:24:bc:
                    ab:a9:4f:7a:68:ee:5b:19:6c:ed:4d:c7:28:86:db:
                    00:df:47:9b:2b:58:ae:ef:79:cd:10:52:0f:e9:23:
                    59:54:57:b0:2b:04:62:b8:84:19:a8:08:8f:b3:1c:
                    ac:19:77:c6:d8:20:c1:9e:84:5d:66:00:05:56:15:
                    9c:ae:2a:c9:38:97:04:be:af:31:43:ae:f7:7b:1d:
                    3a:ab:b3:9b:1a:0b:59:e3:ee:2e:3d:1d:ba:26:01:
                    a1:64:0c:a9:30:54:91:4a:95:26:24:0e:db:25:a0:
                    ba:0d:6d:27:4d:ea:27:a4:0d:59:a2:92:87:da:c3:
                    18:31:f3:ef:7f:91:0b:31:24:e7:67:4d:d3:6b:3b:
                    56:36:a7:39:65:4a:93:d8:a5:63:d8:a2:22:05:5e:
                    3a:e8:e2:0a:cc:3c:7b:e2:7c:72:91:0d:a9:a7:8e:
                    7c:33:1b:e5:8a:9e:42:45:ef:8c:52:d5:dd:c9:d8:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:24:08:2D:A6:24:D3:B7:5B:00:7D:FB:1F:FA:80:CB:7C:1A:30:16
            X509v3 Authority Key Identifier:
                keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:54:32:cd:97:36:af:df:35:a8:75:1b:06:37:c2:f4:a0:79:
         a8:74:e1:97:d3:ca:df:81:ef:07:9e:d9:e0:2b:32:c1:2c:cf:
         bf:01:58:49:c0:0e:23:02:b5:63:3a:4c:67:5f:f0:be:8e:b1:
         7c:a5:45:4d:72:6b:50:2d:2f:57:df:39:da:89:e5:b3:1f:4b:
         c9:76:af:50:b5:9a:73:38:f7:7e:16:15:f3:33:41:f2:76:af:
         b1:1c:d1:72:01:ca:a3:71:be:3c:23:d6:08:16:56:62:c6:b1:
         4c:03:eb:03:fa:ce:db:c9:0e:2b:86:0f:21:c8:ae:70:51:c8:
         dc:64:a0:34:3b:22:71:b0:e9:8a:c3:58:47:3b:60:d4:1a:c2:
         40:9d:32:13:d7:28:e7:49:1c:1e:86:d7:c1:9e:dd:cf:ad:f5:
         b8:e8:56:d6:64:85:54:b8:9b:5d:37:d1:7e:79:67:38:ea:83:
         2f:71:57:9b:2c:19:18:7b:f5:49:29:3d:4f:10:da:21:b3:e2:
         98:a0:c0:0d:94:24:0f:7f:e5:bc:b9:5f:78:f3:cc:26:fe:00:
         79:d7:74:30:a4:91:2f:2b:8e:b1:b0:e0:fe:37:ed:9c:8d:fb:
         f9:31:5b:ef:8e:e6:90:36:8f:17:8c:24:14:0b:34:c9:f0:fd:
         f7:f9:52:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:36:36 2026 by rpki-client