Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File:                     sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier:          rws8qCgIKd61rODT2UnxPo/qznotJj54tpGy9+fhpqA=
Subject key identifier:   20:12:74:ED:69:BC:A7:E8:9A:49:C6:16:4B:E0:55:A2:A6:94:96:D1
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer:       /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial:       019F11F82D343CB239F6833BB00AAC13E9E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number:          1417
Signing time:             Mon 29 Jun 2026 06:01:44 +0000
Manifest this update:     Mon 29 Jun 2026 06:01:44 +0000
Manifest next update:     Tue 30 Jun 2026 06:01:44 +0000
Files and hashes:         1: 41LKwPw-LLlX1iRyv05q0eGVxQA.roa (hash: /hldaDmFUq5ScLzS5Do9OQvpCy6tJ6Mldta+rPoVSBs=)
                          2: QdmtMonnxjCquFhjrcUo8qpZ9bk.roa (hash: wbBSWKojB7pH/vu01mc7MlC/g/OxHu6eJE6dc+J3abI=)
                          3: _IvJfFzGHlNib8r-PrbygGaf9ME.roa (hash: ujiDP9ug2z8JoHMVWVWd8NY4OblKHkwk6gW1+3Pknes=)
                          4: kwUHvF8K5DKPpyHMUkx411cQrSQ.roa (hash: BqDwnwYRUU7AFepo3iOTkaJL9CkTmsePW0u1PWVooCE=)
                          5: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: 3R0p+PwlJaUq0Mt58ksMj412Cgkv8u2BWkNPSJiqyh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 06:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:f8:2d:34:3c:b2:39:f6:83:3b:b0:0a:ac:13:e9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
        Validity
            Not Before: Jun 29 06:01:44 2026 GMT
            Not After : Jun 30 06:01:44 2026 GMT
        Subject: CN=201274ed69bca7e89a49c6164be055a2a69496d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:8d:ea:2c:21:86:72:00:7b:66:d8:46:f3:
                    df:14:0d:c2:4e:2e:25:3b:44:f6:53:73:bf:3c:85:
                    95:32:48:3f:5e:7a:e6:51:f3:e9:a8:d5:dc:f9:df:
                    e7:78:c9:c4:e8:69:9e:38:00:47:0f:12:7f:62:52:
                    c8:a3:70:95:53:34:9c:2a:a7:89:c2:88:12:49:64:
                    42:06:3c:56:07:0d:a7:32:8d:7c:0f:e0:4f:be:41:
                    36:31:ba:83:cd:2b:45:b7:69:ff:6b:0e:b3:6a:cb:
                    eb:cb:d5:f8:d2:58:57:df:04:af:78:4d:72:e4:a5:
                    bb:85:fb:b5:9e:3e:13:1c:42:fa:a9:3d:6e:9e:0e:
                    ae:72:b9:a0:7d:84:eb:00:0b:98:95:36:7d:2e:d3:
                    e3:e3:1c:5a:ac:1e:69:26:11:55:60:1e:24:89:71:
                    4c:2a:5b:54:d7:c3:f8:32:04:6a:f0:04:25:8b:a4:
                    fb:ab:05:bd:47:ea:68:61:d0:7f:c8:73:aa:71:1e:
                    8e:ac:f9:f5:da:11:82:70:63:42:af:9b:73:2b:7a:
                    00:b0:b6:60:e6:0d:00:5a:67:5f:2f:4b:08:d7:8b:
                    7d:dd:c2:0c:1b:29:0f:f2:28:fa:a2:96:4f:0a:87:
                    8b:1f:ed:03:67:6f:3a:b8:7d:06:66:06:20:67:47:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:12:74:ED:69:BC:A7:E8:9A:49:C6:16:4B:E0:55:A2:A6:94:96:D1
            X509v3 Authority Key Identifier:
                keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a4:7b:99:7a:0a:b2:00:42:76:39:f7:38:e5:21:e7:48:61:
         44:5c:0a:cf:fd:ad:0e:0f:15:d9:cd:46:d7:ee:77:f2:b1:f6:
         4f:9d:3a:01:c4:21:be:97:83:f7:aa:4b:c8:3c:4d:db:ae:4a:
         12:6e:a5:33:81:1a:aa:97:51:eb:b2:f0:af:8b:5b:e5:16:3d:
         b5:a6:0e:76:26:d4:91:0b:ad:7d:54:84:41:32:20:f8:31:2a:
         66:ab:e5:8a:e7:33:cd:68:de:37:9f:da:c3:af:9a:cd:55:70:
         5e:aa:55:c5:d3:ad:32:34:5b:c6:b3:9c:e6:63:64:5d:39:20:
         16:0a:55:0d:16:78:4c:ab:94:68:8b:c5:35:6e:3c:84:bf:03:
         f4:a2:67:1c:82:5c:40:ab:82:23:82:86:47:83:80:fd:3d:84:
         78:46:27:68:8f:da:1b:db:52:42:fd:c0:a0:3f:4c:2e:79:1d:
         8c:a8:36:bd:b4:2c:e0:f0:6b:08:0f:58:5b:31:88:b0:37:de:
         b0:fb:59:97:42:7f:d3:f8:c3:43:1b:78:29:b0:11:6d:bf:db:
         ff:61:9d:ea:05:ef:e3:72:cc:d0:05:bd:9f:2e:2e:ec:26:5b:
         1f:32:ab:7f:c6:39:ed:f5:5b:16:92:07:dd:1d:c9:ba:66:32:
         de:05:1c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:41:51 2026 by rpki-client