Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File:                     o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier:          FbrCDb3ZC7fMIhhDAnVgEF3xsB/1ziN5z8O/s3oKzhk=
Subject key identifier:   14:27:C1:25:69:A7:D5:9C:69:2E:03:B7:C3:EA:8F:5A:FD:E2:AF:5A
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer:       /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial:       019EBAA2702CE199935C3F5ED3E8631A7B09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number:          15A6
Signing time:             Fri 12 Jun 2026 07:01:08 +0000
Manifest this update:     Fri 12 Jun 2026 07:01:08 +0000
Manifest next update:     Sat 13 Jun 2026 07:01:08 +0000
Files and hashes:         1: OFa8deirJ8mX7gRn79xlLJ8oDFY.roa (hash: N+xsE/A93Q5FiilxuvU4PImtKOjqeD0giFP8OnmhGl0=)
                          2: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: CXSaLbA1/PfOniqS3HJvCJNhtb5SjrHoRNtGwyl22tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a2:70:2c:e1:99:93:5c:3f:5e:d3:e8:63:1a:7b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
        Validity
            Not Before: Jun 12 07:01:08 2026 GMT
            Not After : Jun 13 07:01:08 2026 GMT
        Subject: CN=1427c12569a7d59c692e03b7c3ea8f5afde2af5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:e0:11:a0:1d:5c:a1:1f:e1:1a:bf:48:dd:
                    d2:83:c0:20:bf:0a:17:99:9c:45:fd:59:1a:60:94:
                    b0:db:7e:ee:61:f1:51:b6:08:2f:3d:1b:b6:85:85:
                    ae:b9:3d:be:72:91:0f:8b:d2:8b:ad:aa:bb:08:32:
                    68:6e:77:b9:08:7b:a4:92:99:3e:ea:6d:60:b4:35:
                    8c:9c:3e:e2:1e:95:8e:e9:b7:b0:3f:26:66:a1:f4:
                    ff:6d:c3:d3:9a:41:3c:85:58:0f:85:e3:7b:ab:4a:
                    0a:87:4a:d1:77:f9:64:9c:b2:d9:8d:22:0c:fd:3c:
                    23:6d:17:98:2c:54:ab:b8:c5:dd:32:6f:1e:06:f9:
                    96:f9:2b:a7:35:4c:82:b6:10:54:21:65:4a:95:a0:
                    cd:95:95:af:2b:37:82:f0:64:5a:6c:1e:1a:80:97:
                    21:62:6e:10:53:f7:ba:40:6d:8f:8a:a2:43:08:50:
                    e2:32:84:c2:5e:c7:77:2e:b6:56:eb:cc:6d:25:d2:
                    44:46:e9:9a:61:2b:da:b9:06:4c:8e:65:3a:b7:a7:
                    78:c1:b6:9d:5a:46:ca:f2:a4:84:27:4b:e9:19:17:
                    10:af:3d:cd:20:15:ed:e4:88:5c:ae:06:1c:cc:7e:
                    97:db:89:a6:26:3f:18:9d:30:36:ab:62:d2:ba:0d:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:27:C1:25:69:A7:D5:9C:69:2E:03:B7:C3:EA:8F:5A:FD:E2:AF:5A
            X509v3 Authority Key Identifier:
                keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:06:f8:86:bb:1b:57:96:b9:99:48:ff:be:8e:0f:c1:d5:22:
         ec:ce:b9:19:c8:d8:06:85:44:2e:63:6a:d1:8b:a3:ee:56:e6:
         9e:10:03:bc:60:af:d3:b9:3e:45:ff:b8:01:79:ee:4b:1f:60:
         b1:c5:9f:11:3a:88:80:a6:23:b6:23:89:68:cd:ec:8a:fa:62:
         99:46:4a:17:51:54:70:a6:c8:c1:f8:4c:cb:6c:e2:14:d1:d0:
         b2:4b:8b:71:5b:53:3f:aa:11:90:06:1c:c2:8d:81:df:01:a0:
         9f:e8:7c:c6:1f:bd:b0:72:4e:f8:14:e1:dd:64:c6:a0:84:8a:
         a3:50:73:5c:47:a7:45:a9:d1:48:ad:db:8c:15:92:02:a2:50:
         3c:84:81:dc:6e:36:65:e7:2d:dd:c1:be:da:fb:ff:68:91:fc:
         20:6d:c0:0f:1c:a5:74:ef:bc:b1:dd:39:c0:0c:f2:8f:25:34:
         63:37:29:09:3c:a7:ff:f9:f2:24:48:99:75:e6:da:4b:b3:26:
         0c:23:61:5c:13:b6:41:85:13:7f:df:9f:4f:e7:9e:f1:fe:fa:
         3c:dc:d3:c4:fa:df:9a:11:61:a0:5c:dc:df:da:71:62:14:81:
         7f:29:4c:af:a7:fd:d1:9c:18:c1:69:18:0a:ba:14:f8:e0:2d:
         39:e5:4a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:28:25 2026 by rpki-client