Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
File:                     10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json)
Hash identifier:          3GzOd5rXdF+9sEuilmrAG8VvNIF/9KUJLHuhSoIneuQ=
Subject key identifier:   79:8D:DC:72:F6:DD:F9:C2:F3:36:3C:44:BC:6D:33:C8:A1:27:B3:1A
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Certificate issuer:       /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial:       019EA89BFCD310AE899115809F63CB8FB301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
Manifest number:          19F5
Signing time:             Mon 08 Jun 2026 19:00:55 +0000
Manifest this update:     Mon 08 Jun 2026 19:00:55 +0000
Manifest next update:     Tue 09 Jun 2026 19:00:55 +0000
Files and hashes:         1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: E5mZgVWXW21nQMa0StUFpV45SCHxc9zuIWh64K6yzOs=)
                          2: 3rngGDt_iwfhoOnfpD1kt_StBx0.roa (hash: KjcAZXNR5n6zPZTAkslgvia87YFrMCL2teXsMct736o=)
                          3: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (hash: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU=)
                          4: E-mC0iAlIk0BNqElj570L59xiI4.roa (hash: 11beTDD0KykGX0WoUgJf8Vzp+SRqSq4zspVnh6gtlMQ=)
                          5: HQJmpAkNAw1AqZ0b48w_YH827nk.roa (hash: 7qIcvQ4TbN25SPRVWssmjozD9Nk/d25r5V3RF5LK48w=)
                          6: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (hash: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE=)
                          7: WsU0TA-x8x-AIVwWSVATXH41Db8.roa (hash: PoI0MFNsTc9HWGtTXSe9O9CouuagHdHyjAB82f5capM=)
                          8: cpt5RAgtzGqSe2tQZjdg4D2WA0E.roa (hash: 8jg9MlATBiiFNT9Izoww+SGRXHn9l5TlN9GgD/T3YlI=)
                          9: g2L1Ckg2PdEviCbCq66EuHwj6s4.roa (hash: yQRf9YsIGhna0i1WbIuXI9A3Q/Zoyb3HRPF/J92zU/U=)
                          10: iZLlfuL5fkyQViX7MDGBKRfoKw8.roa (hash: QJj4R8PSS2uz6pf5eNhL303Omh3ETXGQxx47uMXmmwA=)
                          11: lU6d7ePd82R1RQygYGhFImrIFTw.roa (hash: eTV3PHC8L7+q7X6AQEeyA+TbOiZwiV2Wzom3Tk1Wu5A=)
                          12: mNyKHvh-ZzvywHbRbPxAB2YITpM.roa (hash: DMHicFuCe2CjcnqaSuEwET4bEyq4MbNuoENqwOAycio=)
                          13: mr_pNb5yoRFqFtKMWG7FgP2ifyU.roa (hash: KUyylK1Gn/i/rEUpdmb4WY0ip5PHMUeW+sIt34Rv4vU=)
                          14: qu_5X8JHr4yqGmfR7Z4agmkCTJg.roa (hash: pp2/dCo/iehzy+EhLzTvjRa68BviBR9e8y4FWQ8IXSI=)
                          15: vUylfTDcwUjT9ws66e9wdAqPzcg.roa (hash: Er/JWU9dw52/OcAiPzTg3upAwzRGmCG67anIQUk/sVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 14:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a8:9b:fc:d3:10:ae:89:91:15:80:9f:63:cb:8f:b3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
        Validity
            Not Before: Jun  8 19:00:55 2026 GMT
            Not After : Jun  9 19:00:55 2026 GMT
        Subject: CN=798ddc72f6ddf9c2f3363c44bc6d33c8a127b31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:fb:3d:47:67:38:c6:b2:7a:9d:e9:3b:18:
                    18:38:97:b5:95:61:72:30:b8:e9:0c:0a:a3:27:a1:
                    d3:09:bb:45:c3:24:42:97:99:f6:94:be:50:38:17:
                    6e:79:09:54:f8:63:54:e0:a4:db:f1:30:63:ca:86:
                    ef:ab:42:1a:d2:4e:24:44:ca:e3:f5:c8:79:67:23:
                    63:99:1b:9a:1f:39:c0:af:d5:15:af:a7:ed:ac:a1:
                    71:ef:ec:cf:0b:43:e2:47:be:f6:d1:28:36:33:6a:
                    2b:e5:41:29:21:ea:cd:a4:81:86:c7:29:0a:e9:e1:
                    54:be:e1:bf:61:f1:e2:f9:29:cd:e1:d6:a0:bd:d3:
                    ff:5c:51:5d:0a:da:5c:4b:f2:15:e0:64:96:09:5a:
                    f5:f2:60:f7:76:5a:e8:44:d8:66:77:1f:8d:8b:a3:
                    00:aa:f8:43:69:4a:12:b5:c9:c3:f6:d6:9d:90:52:
                    5b:78:0b:e1:6b:c8:88:56:98:4d:a6:c1:6c:48:6e:
                    45:f0:f5:18:c7:35:e5:a0:48:93:d4:44:a5:df:84:
                    05:f0:69:4d:29:6e:4d:f5:25:da:3c:df:86:4f:28:
                    dd:37:07:9d:62:8d:bf:48:d4:f6:bd:f9:b9:2d:c9:
                    15:5b:3a:57:c1:8c:b8:4a:69:e8:8e:7f:47:8a:ab:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8D:DC:72:F6:DD:F9:C2:F3:36:3C:44:BC:6D:33:C8:A1:27:B3:1A
            X509v3 Authority Key Identifier:
                keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f0:5c:4d:21:d1:89:74:cf:bf:2a:73:dd:11:10:0d:b8:29:
         7c:5c:f9:0c:93:7e:78:b0:aa:13:a9:32:a1:9e:77:f9:11:99:
         e1:dc:8a:66:81:36:6d:58:28:bf:1f:2e:78:ef:50:31:eb:9e:
         15:6a:23:6a:60:c4:38:63:95:1f:2e:65:68:2d:82:4a:b4:b3:
         d5:5f:6b:8e:63:d4:84:b3:62:5c:0e:1a:1d:20:bb:a2:6b:00:
         8f:ca:0f:65:65:49:22:2c:4d:43:d0:4a:ac:63:63:a8:a6:38:
         c9:e0:76:08:15:dd:53:06:e9:7e:81:6c:94:77:27:40:7d:6a:
         fa:c4:bf:7d:4c:2f:83:2a:8b:9a:b5:61:4e:22:f9:04:99:f4:
         5d:03:dc:5a:9a:30:7b:2c:e7:da:49:41:8a:1b:5d:36:43:14:
         97:f8:72:89:62:6f:80:75:4c:3b:d5:5f:c0:06:a2:c0:93:16:
         1a:95:04:1f:4f:cb:8b:f3:10:b3:4e:ea:89:58:cc:db:95:b2:
         db:cb:69:80:63:4f:26:a3:c9:ff:4b:d0:c4:45:36:47:31:ab:
         ba:34:c1:28:e6:91:a6:e2:28:9b:49:e7:75:9d:45:a7:2e:ca:
         25:26:a7:04:8e:92:fd:d8:ec:0a:75:ff:58:b0:3e:52:04:c3:
         ea:7a:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 23:45:43 2026 by rpki-client