Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File:                     O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier:          /VgxMfjjUS9Dmr3yZFcuXbiuGdpwwYsTBNi7GaGuYi8=
Subject key identifier:   6A:64:C4:D9:58:5F:09:73:8E:F0:17:E2:66:B9:52:7B:E0:7A:61:D6
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer:       /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial:       019E59009CDB0768DEBC5E9355B2DD66515A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number:          06B6
Signing time:             Sun 24 May 2026 08:01:12 +0000
Manifest this update:     Sun 24 May 2026 08:01:12 +0000
Manifest next update:     Mon 25 May 2026 08:01:12 +0000
Files and hashes:         1: 1UG_i4X68HiPHviRW1z0p_TSsXk.roa (hash: Rxi5VpSkCVYP7zpaawxiqgEVbztptEcbkSS6G+faZaE=)
                          2: 921A09PidqQ_DPqribEcJ4Ns9ic.roa (hash: 1p6ZvcbQbV5L2uaDpeFuyGxdzNA8guzksazYOvFT/c0=)
                          3: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: xYwszVZIaXsCGAo7kS3yZeSV6zIzrIBaGBv9fkQEbvs=)
                          4: QakAbn2qL6zC8DUBjSIVZLBbpXc.roa (hash: 6xvVEYi0a4GqVQ6WMVJR2REYvzQK/KHG+c6HRFsJwKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:59:00:9c:db:07:68:de:bc:5e:93:55:b2:dd:66:51:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
        Validity
            Not Before: May 24 08:01:12 2026 GMT
            Not After : May 25 08:01:12 2026 GMT
        Subject: CN=6a64c4d9585f09738ef017e266b9527be07a61d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ba:40:e8:b1:12:4c:f7:32:09:ab:8c:d0:0d:
                    87:9b:0a:97:63:85:1d:d9:f2:2a:04:31:90:5b:d1:
                    b9:3f:31:d5:49:11:38:19:10:f8:d6:b0:5c:9e:84:
                    57:3a:bb:22:2c:38:c6:f7:ab:d6:19:39:71:be:66:
                    57:5d:9d:63:cd:3e:f7:a1:e6:b0:f1:c1:26:2a:7f:
                    16:40:31:40:01:55:40:6b:9e:18:4c:3b:1e:a8:41:
                    ec:5d:86:f1:e7:4b:d1:b7:8f:a6:d0:2e:3d:1c:a9:
                    c3:82:04:2e:4e:ff:49:c6:ad:31:d8:53:a9:58:4a:
                    55:93:fa:1f:57:9c:5c:1b:9d:23:7f:53:d2:c5:06:
                    97:4f:3e:c9:0b:8a:32:40:d0:1b:89:be:b3:b4:65:
                    a7:c0:47:73:01:12:ec:c2:52:eb:a1:74:25:c1:c9:
                    75:99:89:65:52:7b:6d:f8:07:2e:6a:b3:0f:8b:c3:
                    96:1d:98:b2:4d:3b:96:46:9a:49:5b:cd:d7:ff:6b:
                    6a:61:ed:93:e8:82:f4:7f:ad:0f:1b:46:fd:57:54:
                    69:84:6d:06:46:a4:73:ad:8d:bb:0f:e2:b4:fc:56:
                    28:25:5b:8e:11:08:12:15:b2:64:99:1f:55:2d:ee:
                    69:e6:b7:1b:f4:37:fd:76:2e:1a:b6:68:a6:5a:80:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:64:C4:D9:58:5F:09:73:8E:F0:17:E2:66:B9:52:7B:E0:7A:61:D6
            X509v3 Authority Key Identifier:
                keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:07:8b:bf:ca:d3:0b:d7:87:9c:6e:eb:30:84:1e:e6:9b:37:
         05:12:a2:91:9c:4c:87:79:be:d7:5d:5d:e7:f0:70:7d:a3:1f:
         ff:08:78:9a:6e:22:b2:29:71:e0:8f:7f:a8:47:e3:35:a2:b2:
         6c:14:e2:27:82:35:01:3a:08:99:15:01:e1:30:ee:ac:c2:53:
         5d:03:81:1c:88:1e:11:d2:b2:68:b6:37:c2:2f:63:40:20:25:
         cb:a7:c1:1c:0d:f0:e6:7c:4f:58:86:f3:41:a7:bc:e9:94:69:
         ae:fb:76:7b:c3:7c:fa:37:6f:68:de:e0:d6:4a:d3:23:e1:95:
         21:ce:02:b6:ea:3f:1a:02:af:36:9e:ff:27:8a:c4:f1:91:52:
         c3:41:58:99:28:85:50:61:52:1d:43:07:0d:9c:82:d7:e9:c3:
         1d:d3:df:5f:3b:c7:a5:f5:1d:a3:76:36:ab:09:ce:bc:86:5c:
         c2:15:f8:ae:e6:4b:7e:dd:9a:9c:9a:a8:51:49:af:d2:cb:93:
         6f:3a:c0:28:de:9a:6e:e7:7e:89:49:b4:7e:34:33:f2:fd:55:
         1e:c0:75:df:9b:d7:8f:aa:2a:fe:b9:60:20:7f:7e:cf:10:23:
         19:00:36:69:8e:24:06:d7:6d:fb:7a:07:f8:ac:26:b2:c3:b3:
         14:a4:c7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:59:04 2026 by rpki-client