Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File:                     isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier:          Pl8WYdHtA8FJ3vCZwffR1dRYWQiT1kb0328ADupKDdA=
Subject key identifier:   55:64:C5:73:FB:6A:32:EE:C5:92:B5:B0:EB:A1:9A:14:30:CC:01:12
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer:       /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial:       019EB6573ED26F77E6198B25A03E3C3C1E28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number:          163C
Signing time:             Thu 11 Jun 2026 11:00:31 +0000
Manifest this update:     Thu 11 Jun 2026 11:00:31 +0000
Manifest next update:     Fri 12 Jun 2026 11:00:31 +0000
Files and hashes:         1: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: f+3U/KpdOEZai1mCM/eSiwEV9W+MUT8aH5c0v/CE16Q=)
                          2: pjsQjYCyJ3t8hM7PRxXLSSskH0s.roa (hash: JlEEmKo2Oj3IztEax/xHj/p3At5KTwe0I06/xzxbFsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 08:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:57:3e:d2:6f:77:e6:19:8b:25:a0:3e:3c:3c:1e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
        Validity
            Not Before: Jun 11 11:00:31 2026 GMT
            Not After : Jun 12 11:00:31 2026 GMT
        Subject: CN=5564c573fb6a32eec592b5b0eba19a1430cc0112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:17:21:46:fe:30:d6:1b:70:ce:ee:f6:40:41:
                    54:3f:de:c3:2f:c4:25:64:7e:23:38:ff:63:2c:fe:
                    5a:b2:3d:b5:cf:39:35:9f:ba:8d:1e:3f:b1:63:f6:
                    2e:d8:75:c6:6b:66:d1:24:a2:a4:a0:09:0f:72:03:
                    2f:52:35:f1:39:40:60:83:02:1b:68:13:5f:6a:55:
                    82:55:a8:31:16:22:f0:27:ac:55:1a:33:48:5e:15:
                    b3:68:74:f8:f7:c4:5a:dc:a8:12:87:b0:c4:b1:bd:
                    7a:ed:19:fd:eb:45:79:49:e0:3f:63:ed:56:2c:c9:
                    e4:3a:b1:91:1d:84:71:1e:21:78:bf:8c:08:8d:b5:
                    03:b9:11:75:f4:9b:47:6f:2c:37:04:1a:25:92:b7:
                    a5:41:53:28:04:4e:fd:91:c2:75:28:87:a4:cd:be:
                    34:3e:e2:08:2c:ee:bc:7c:7c:3d:1a:a5:5c:98:b3:
                    27:cc:4f:b3:81:5e:d1:b2:ba:f9:f7:4d:78:b8:3a:
                    2a:f7:5b:e0:6d:11:f8:8a:da:1a:8b:51:8f:87:61:
                    3c:7c:f5:87:90:37:9c:cd:ee:d4:06:8b:aa:89:41:
                    b7:14:f1:80:04:60:48:6a:09:93:8d:c8:10:f0:32:
                    c0:f6:cc:4f:44:f9:e6:24:19:ee:27:2f:e1:93:99:
                    8a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:64:C5:73:FB:6A:32:EE:C5:92:B5:B0:EB:A1:9A:14:30:CC:01:12
            X509v3 Authority Key Identifier:
                keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c8:8e:70:c3:dd:26:86:9b:0c:ae:71:5a:60:ea:07:19:85:
         ba:02:5b:fc:3a:25:6e:25:f1:ab:22:19:14:ec:9e:cb:27:04:
         6a:a0:64:93:a5:de:33:0a:90:95:10:42:aa:23:40:c5:3c:ea:
         7b:9b:95:0f:e8:a0:83:26:0a:7f:ef:ae:f3:bf:3e:20:41:3f:
         f6:fa:0a:eb:9d:44:63:2e:e5:e0:7d:c5:5d:ba:4b:d8:39:3d:
         5e:55:cf:0a:c7:e7:82:ce:00:30:c0:3b:99:62:57:af:d6:fd:
         7b:34:11:79:f4:d6:01:69:3d:2c:a9:a6:69:06:cf:58:8a:eb:
         04:6b:8a:59:d8:83:34:9a:4c:ad:a8:4a:a6:b0:97:97:a4:d1:
         80:de:75:ab:2f:9d:c6:83:de:94:c8:8a:c0:d9:93:f0:5f:12:
         8e:d9:bb:fa:47:20:b3:de:ae:3d:c8:87:c4:89:5d:0e:ec:dd:
         e1:60:9c:5f:b0:e7:9e:f8:ca:a0:ac:41:f0:dc:41:8d:c4:86:
         3c:a3:0d:e2:4f:e1:ee:b8:06:73:03:aa:d2:f0:8d:11:23:33:
         0d:62:69:c2:b7:88:c9:9c:ab:65:63:5d:e3:c0:69:5b:a8:1d:
         b8:38:51:0f:79:1f:4e:f9:71:62:cd:70:31:71:64:e7:df:e9:
         82:28:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:10:31 2026 by rpki-client