Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File:                     uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier:          1NxRVAFIv+kbUoNLsveVs81+0oQHXlhdfzrJc6WrdQY=
Subject key identifier:   B1:7E:41:0B:AB:F8:58:60:0C:54:5B:52:88:A6:E0:04:7D:2D:1F:72
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer:       /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial:       019F11531703644F729D5C098774B03B8365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number:          1985
Signing time:             Mon 29 Jun 2026 03:01:25 +0000
Manifest this update:     Mon 29 Jun 2026 03:01:25 +0000
Manifest next update:     Tue 30 Jun 2026 03:01:25 +0000
Files and hashes:         1: AXJwwgLV20qOfdiRkcLp7cuyLa8.roa (hash: TJd1vyVMSaddwqO1mLObhJwRHoC09A1cxMdzGIXMVxA=)
                          2: JVhM3Ybetfs8u4lZCxCSpx8pJdU.roa (hash: qDG/lBnPGvBdowawU0zXsB0DnTTCTXSKOxuDVEvE+Lw=)
                          3: JciEJIGTlcBIQFyaMf4k2cUulG0.roa (hash: PsuB426mDHmj/nCSN0DLQAoyVz9KEoXVW/4qNh6n7rE=)
                          4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: 37DSyqr478xXBBh9uBgkV0gCqVbTqBXKYZTvsJdSm9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 03:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:53:17:03:64:4f:72:9d:5c:09:87:74:b0:3b:83:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
        Validity
            Not Before: Jun 29 03:01:25 2026 GMT
            Not After : Jun 30 03:01:25 2026 GMT
        Subject: CN=b17e410babf858600c545b5288a6e0047d2d1f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:f3:fb:12:20:93:c4:9a:a7:67:39:3a:0c:
                    55:40:7c:df:b7:45:eb:95:8d:fc:1f:d6:35:f2:eb:
                    c6:0b:a6:c4:25:70:1a:87:81:06:8b:6c:b0:96:86:
                    57:6a:d1:06:5d:45:64:8a:f8:bf:10:b5:39:14:ac:
                    5f:ae:40:9e:02:76:fd:a5:92:56:78:f5:19:cd:f8:
                    b1:3f:a2:64:7e:76:5d:c7:be:6f:22:aa:bc:57:14:
                    68:55:2b:98:b2:81:af:0c:26:38:9d:46:45:2a:70:
                    18:71:a5:e9:d8:a9:a1:69:2e:41:45:40:d6:c9:0d:
                    0b:ba:19:80:06:dc:3e:c0:71:be:ee:34:b0:d8:0b:
                    ee:09:2a:75:a8:05:bf:2a:b0:a7:a0:bc:13:05:a5:
                    fe:cf:52:3f:f8:39:be:2e:5a:e6:ce:ac:3f:4a:a4:
                    23:04:e0:37:44:80:0d:86:94:32:4e:75:bd:95:dc:
                    be:be:98:59:db:5a:17:ea:36:62:0f:a3:0a:c2:9c:
                    85:b9:ca:8b:eb:66:df:0b:24:d7:c9:22:41:45:f3:
                    08:36:04:9b:08:42:0f:9d:6c:de:09:57:7c:9f:86:
                    bf:4f:73:2e:d2:e4:36:c2:d6:f0:9b:35:b3:1f:32:
                    ec:9d:20:24:77:c0:26:ce:5f:23:db:9e:f1:01:e1:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7E:41:0B:AB:F8:58:60:0C:54:5B:52:88:A6:E0:04:7D:2D:1F:72
            X509v3 Authority Key Identifier:
                keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:bc:1a:9a:7c:85:56:b5:a0:90:f3:3c:6f:70:6c:ca:67:64:
         f7:e0:d5:a8:43:83:fc:32:85:18:fc:e0:ca:b8:ec:40:d7:6c:
         0b:33:dc:c5:e2:11:b0:84:8b:07:1d:12:b7:61:7e:d8:63:c1:
         d4:de:9a:96:73:da:4d:b7:f4:b6:66:ff:8f:c8:61:41:7f:ef:
         ae:66:58:db:4b:27:26:3d:2e:d3:7b:af:99:ef:eb:2e:f0:95:
         8f:ee:7b:cd:13:e7:ab:1a:77:e8:c5:4a:37:3b:d8:a8:a0:ed:
         43:20:24:f0:28:9d:b1:f7:43:9f:46:79:b4:71:7c:da:19:03:
         34:b8:5f:71:85:1a:0c:6e:a6:8d:29:01:4e:fb:ed:95:1e:2a:
         1d:ff:8b:6b:40:f4:a8:fa:21:b1:f5:46:84:0a:9e:78:1a:c9:
         88:d9:5c:3a:22:7d:ff:76:34:70:5c:6b:cd:4e:48:4b:49:b6:
         5e:09:3e:73:14:85:66:01:28:b4:e2:52:b1:7b:63:e2:47:4a:
         01:c7:35:03:00:10:8a:b3:9b:5b:cd:51:6f:ac:70:21:4b:c5:
         06:ea:d0:e9:a1:e4:8f:e6:7a:84:b7:d9:6e:8a:e7:94:7a:86:
         a8:50:5c:23:36:5d:14:0d:c5:3b:9f:0d:d5:ef:4e:6e:8d:d9:
         b2:b2:52:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:29:37 2026 by rpki-client