Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File:                     mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier:          gn0GatqzASoXf/SUCZ+pywhKp51+L0kt1Ne5jWNjefo=
Subject key identifier:   2F:46:B0:88:B2:46:89:EE:10:38:A8:49:F2:62:17:A9:87:EB:AF:80
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       019EB732ABF09EE4B3DD0AD0137E349ADFF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number:          135D
Signing time:             Thu 11 Jun 2026 15:00:11 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:11 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:11 +0000
Files and hashes:         1: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (hash: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs=)
                          2: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (hash: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU=)
                          3: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (hash: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ=)
                          4: RKC_1mqLXMIDbGkqZMEJrCSWeCo.roa (hash: PPGCCrSEwXx1Rr+8w142QOXo4ncdDGVM4h0k0e7qrm8=)
                          5: U6vQ_9-xOxVrenXa0_Xg04rZfLY.roa (hash: OQhVM9/l+WAA3TDjGzNDJCTikubrDwOffydjFZn+MFs=)
                          6: UUD9roNkskiwye2tqwssSFEocBY.roa (hash: uz8OsG4t9MjUUcUflz9xYFC0CJuPcU2Ss0OyzWUNNtw=)
                          7: W4qxGEOnhck0eA0os9nmiLaPXEU.roa (hash: QlC0nvvSkC3Gr5lT9KAlzmA+mhP9wXRsj529IDFwxxk=)
                          8: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (hash: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=)
                          9: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (hash: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g=)
                          10: iIxvWcwl88BImtN8o1GvbtwFtug.roa (hash: a5Q+4dXfu6wDxBWXxjzSYqzWruw5vPQbQWVRYFB3/0Q=)
                          11: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (hash: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=)
                          12: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: w0oBa0g63J8063HyysPiEi7xXmMB4gtbv1ipZnTkbtk=)
                          13: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (hash: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA=)
                          14: ttggVWDiefPyqveIlfoGKCWaja4.roa (hash: NvSwdx11u/EHh453rM9xZTJvAWhbuq2a/Hj0lXbHfsQ=)
                          15: vTt98DamUvECWEMoSR5lw_z_oe4.roa (hash: xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:32:ab:f0:9e:e4:b3:dd:0a:d0:13:7e:34:9a:df:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Jun 11 15:00:11 2026 GMT
            Not After : Jun 12 15:00:11 2026 GMT
        Subject: CN=2f46b088b24689ee1038a849f26217a987ebaf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ba:16:ad:f3:49:bf:64:ef:54:18:7e:ba:7a:
                    1c:b6:14:9d:d1:4c:52:c0:80:b1:d0:9b:14:d5:b6:
                    fc:b8:89:53:ad:7e:fb:b3:e2:00:ef:95:1b:7f:c9:
                    6c:5c:61:49:18:4d:81:7c:96:52:df:65:28:54:3f:
                    a7:c7:b6:a0:88:2e:cd:3f:7f:7d:1c:be:8d:4f:ef:
                    21:67:e1:3b:e0:2d:15:f1:12:60:d1:f8:94:aa:77:
                    aa:c9:2f:45:0d:d2:88:27:87:3a:90:60:0d:fa:57:
                    26:d4:c6:45:15:60:9d:91:05:35:69:ab:c6:c3:eb:
                    72:8c:8e:0b:4a:d1:ee:b2:c6:19:49:15:15:bd:94:
                    4b:9c:ea:02:e1:7f:6d:db:8d:57:3d:e0:21:b3:a1:
                    25:03:c3:cf:88:59:b0:2e:84:fd:85:9a:33:86:8c:
                    ab:bf:1d:f4:ee:d1:5b:47:74:e3:98:65:4e:c3:e6:
                    1a:a3:95:62:8c:14:58:a8:93:4b:92:d0:3a:9e:fc:
                    0c:ca:3a:8b:5b:4a:62:d6:f8:89:43:50:d1:55:98:
                    3c:24:a8:f5:00:24:e0:89:a4:cc:10:09:e0:63:f6:
                    34:03:cc:90:72:44:1d:55:f7:96:5d:82:52:12:fb:
                    d0:71:5b:16:f4:92:5e:20:9b:a6:ed:bf:3a:ae:10:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:46:B0:88:B2:46:89:EE:10:38:A8:49:F2:62:17:A9:87:EB:AF:80
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:86:68:6f:6b:e0:36:4a:ca:5a:82:d3:2b:44:ac:70:6d:1f:
         e8:53:d8:3f:03:93:8c:63:f3:f6:4b:e4:75:44:02:9f:91:bd:
         a9:f6:fc:6d:e3:24:bf:a6:03:69:7e:33:c7:60:4f:b6:ba:5a:
         7c:48:95:6d:8c:0b:1b:b7:63:24:94:74:58:d6:1d:09:70:a3:
         6f:9b:47:a1:60:37:28:76:87:0c:27:25:a8:c3:ed:de:0e:02:
         c3:eb:e9:b5:47:d3:b1:0a:d4:92:3b:22:08:5d:cb:9d:22:d8:
         c9:79:71:f3:2c:8e:2c:cd:08:93:f3:a3:d5:03:f4:08:a9:fb:
         6d:71:a4:ea:b5:41:6c:68:3d:d5:dd:09:12:f5:49:6f:ef:f0:
         af:bc:50:88:55:8f:3a:5a:74:b8:86:a3:ab:68:d9:48:0e:90:
         5f:70:ca:72:4c:34:e4:c9:4d:1b:6f:ba:16:87:52:a5:a0:8b:
         5c:e3:99:b8:f0:ce:68:8e:81:73:9f:cd:a1:59:d6:33:e2:50:
         b6:f1:5b:7a:37:ea:af:76:0d:d9:f3:38:dd:7d:6d:0e:d6:12:
         51:83:0f:27:0b:33:e2:d7:02:43:eb:e6:78:9d:ae:0a:ca:31:
         03:fc:16:60:26:de:67:dc:0f:6b:90:59:12:d1:73:0c:6f:24:
         12:2f:02:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:35:49 2026 by rpki-client