Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File:                     i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier:          TA9yXhUT1Ag/zFSNhIMbP+4T7xWpFoXfneq2GhF6FHU=
Subject key identifier:   9A:E7:D5:96:F8:9C:9D:04:83:C1:24:5E:AD:FA:9E:F2:2A:B3:FB:78
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer:       /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial:       019F122E9A8867026E5540118F14E9C7DD09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number:          199B
Signing time:             Mon 29 Jun 2026 07:01:11 +0000
Manifest this update:     Mon 29 Jun 2026 07:01:11 +0000
Manifest next update:     Tue 30 Jun 2026 07:01:11 +0000
Files and hashes:         1: 4jNVPAJmLO9c6pL_yxre_7Qg83Q.asa (hash: 8bMdcGTnGljv1AHWzdlj2piSPGzoCzVunMnP41YGxLk=)
                          2: A_sUqXNJn9Rojoy-SannfwQKt2w.roa (hash: 7MgWH2+po5ITevBMtb9RWW486i9XpZGlyB9u24ejDDA=)
                          3: CwYtcY0RzoREVsUncN6feXvLhC8.roa (hash: ySt5zeOhGaWSVgsdZWXLp4TRyQYCT9hlwJu376Il+vE=)
                          4: Ju5bZFbzxZDEu6_EWVUu55SHf94.roa (hash: 3V3wg3sXHNBt7AEjJ/DpnJhsu+XXYKgeytuHR/IQBII=)
                          5: aontSbFahoS7z7yeQkm0W4LHsPo.roa (hash: nj6whxPf9P8SD5zY0uyTbTulc/A+27qSNJjJoDzd5t0=)
                          6: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: 5XY16cP2w/wyanjQWQpUcnMcN9ZAepmap25GzTGY3M8=)
                          7: iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa (hash: oKspxLsKbdfZFXIMEqaNBaecIl0lk1KJLeO2odsQH/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:9a:88:67:02:6e:55:40:11:8f:14:e9:c7:dd:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
        Validity
            Not Before: Jun 29 07:01:11 2026 GMT
            Not After : Jun 30 07:01:11 2026 GMT
        Subject: CN=9ae7d596f89c9d0483c1245eadfa9ef22ab3fb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:4d:b0:57:7c:fa:20:23:23:0e:9d:fc:ba:
                    a7:2c:da:62:f3:ee:39:24:38:bc:d5:50:06:be:0d:
                    51:23:d7:c8:01:08:7c:3e:0d:0c:5e:a3:cc:c5:0e:
                    36:db:6d:c7:90:3c:1d:c8:67:6d:f0:bb:4e:25:6d:
                    24:a0:91:8d:9c:4e:26:0a:27:c8:56:c5:74:4c:50:
                    17:68:9f:3b:bc:38:da:91:7e:83:e1:6c:22:a6:1d:
                    f1:e8:c3:d9:b1:bb:94:7b:35:70:ca:90:d8:a2:af:
                    25:e1:1a:4c:39:d8:44:c2:f8:2f:c8:14:15:0b:a9:
                    ff:60:c5:b9:2c:62:20:c0:e1:22:63:e9:09:7b:7b:
                    e4:91:ee:a6:e9:79:9c:9e:63:37:de:8f:11:3f:8e:
                    8c:0e:f3:82:0f:35:31:92:9a:fe:80:d8:25:4b:9e:
                    7e:b6:96:ba:e3:48:e9:e7:e9:66:a5:58:a9:be:74:
                    8d:f2:36:66:23:17:a6:75:f7:9b:02:87:47:d0:3b:
                    a5:e1:da:38:7f:e6:ed:9f:62:f0:66:6d:ec:f6:2f:
                    45:22:23:d0:fd:c5:3f:5f:1f:7f:8b:1a:1e:82:7c:
                    08:5b:fa:cf:4f:d3:ef:df:73:22:29:f2:41:a6:d4:
                    3f:86:97:19:d6:54:10:af:a0:17:00:59:d8:e2:69:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E7:D5:96:F8:9C:9D:04:83:C1:24:5E:AD:FA:9E:F2:2A:B3:FB:78
            X509v3 Authority Key Identifier:
                keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6b:48:7b:af:2d:9a:5c:e4:48:e7:9b:e6:9f:1c:33:64:ed:
         c0:b8:9b:f7:39:40:39:32:f1:ec:59:f9:ad:a6:54:bd:00:02:
         ef:7b:ef:85:bb:3a:22:54:59:4e:e2:bd:67:56:1e:11:32:64:
         f2:a9:5c:b5:57:55:c7:40:72:b0:71:62:7a:48:53:2f:a1:f8:
         67:5f:81:a7:55:98:f9:f3:9a:8b:f9:a0:28:3e:8b:76:b9:09:
         bf:8e:f5:59:76:db:a2:0f:4b:68:ff:08:22:dc:b9:9c:1a:7e:
         34:c9:5d:cc:e0:3a:09:7e:33:28:61:3e:31:ba:1d:79:0a:89:
         12:85:be:16:86:39:ae:77:55:16:4d:dc:ac:7b:70:94:85:75:
         1c:14:6e:dd:2e:d9:63:e5:2d:5a:ce:73:54:4f:25:c7:b1:ac:
         ea:d7:c2:39:6b:7d:bc:40:77:f1:dd:ec:53:fa:79:47:25:e8:
         c7:aa:f3:07:09:84:29:85:5c:09:ac:75:02:b5:87:8a:ea:45:
         13:d3:92:85:2f:2e:15:b5:6c:81:46:9a:24:c3:68:53:f6:07:
         04:af:58:91:48:da:02:2c:3e:68:c4:d4:28:2e:47:cf:29:12:
         82:d5:f5:5a:82:92:24:01:80:57:8d:0c:ab:80:fc:55:eb:36:
         3e:a9:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:35:14 2026 by rpki-client