Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File:                     0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier:          HXQj/s58VMQLETW4wTzF/Pj2wCErSXWMvDH1hJIfBkU=
Subject key identifier:   37:6E:D7:AF:F2:D3:99:4B:4B:6E:B4:5D:EF:81:3B:B2:2B:F9:16:30
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer:       /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial:       019EB8EA998B554950F7BBF6FEB1CEC75F67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number:          065F
Signing time:             Thu 11 Jun 2026 23:00:42 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:42 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:42 +0000
Files and hashes:         1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: sdsq268ZK7CRZhySWlFgxSEPSHyZFDzQ6obboC3x3qk=)
                          2: qTWraqPBRkXUgfYW4gfB3AS-jm0.roa (hash: Rbt0ZTsq9hRwXO+cnDLn20WShDhAg5xFObZyVKiajFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:99:8b:55:49:50:f7:bb:f6:fe:b1:ce:c7:5f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
        Validity
            Not Before: Jun 11 23:00:42 2026 GMT
            Not After : Jun 12 23:00:42 2026 GMT
        Subject: CN=376ed7aff2d3994b4b6eb45def813bb22bf91630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:c8:80:1f:fe:da:22:6b:b7:8f:91:2c:28:
                    17:5d:7e:fb:5b:07:98:cd:4f:b2:89:32:b5:5a:62:
                    27:67:fb:e6:bb:cb:d5:d9:75:53:22:15:cf:66:7b:
                    cd:35:0d:e4:f4:4e:cd:88:9e:a5:6d:23:cc:9d:4d:
                    0f:20:15:3d:d2:17:bc:2c:03:65:51:96:20:e4:e2:
                    fc:2d:07:98:ba:24:93:72:13:d4:20:6a:21:4d:ab:
                    64:10:a4:7d:aa:9b:c2:69:51:d8:9a:c2:fa:5b:0e:
                    23:d4:8c:a4:7b:04:1d:be:6c:e6:37:7f:b5:4f:d6:
                    41:63:ca:1b:23:ac:0b:aa:e5:eb:e5:9a:fe:d6:a3:
                    74:cc:79:f1:61:a3:de:28:ea:b2:f8:68:f2:1c:ae:
                    ca:7b:76:aa:22:9b:59:25:c2:05:f9:20:f8:c0:af:
                    5d:95:8a:bf:c2:b0:a8:f9:0e:36:c9:aa:3d:69:eb:
                    a8:f2:d9:ae:ed:17:a7:13:fd:36:2c:43:8d:6e:d7:
                    a2:4a:b8:b4:e6:a8:47:41:df:31:12:88:d9:aa:a8:
                    1e:ab:15:0f:3c:0a:c8:f1:42:c3:37:78:f4:84:2b:
                    57:e4:79:2b:57:28:af:db:3b:a2:de:16:fb:24:5b:
                    e1:6e:1c:3d:1d:ae:5f:55:cc:cd:78:bc:66:40:9d:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6E:D7:AF:F2:D3:99:4B:4B:6E:B4:5D:EF:81:3B:B2:2B:F9:16:30
            X509v3 Authority Key Identifier:
                keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6c:59:62:86:3a:ad:e9:74:cd:fa:cd:b8:51:72:b1:bc:c9:
         82:43:96:7c:ca:3d:04:60:08:c9:60:d8:92:54:31:58:d9:c7:
         c5:1b:e8:1d:0a:20:b3:d2:52:a3:1b:64:af:23:dd:c2:08:88:
         ce:f2:e7:33:7e:3e:e3:d7:0a:fb:bb:90:44:13:51:67:4a:a3:
         11:2e:9c:9a:0b:9d:0e:85:09:5a:73:84:f4:c9:fd:6b:7e:3b:
         a2:a3:1e:8f:b8:1e:33:79:82:b5:24:41:e2:19:77:d6:ef:40:
         d1:35:b8:a4:06:f8:41:08:a8:dd:1a:ec:65:07:9e:8c:89:4c:
         7e:2a:45:91:c9:59:c1:b3:d5:57:62:12:43:15:87:26:44:bd:
         88:72:12:ba:b2:c8:cf:97:35:e1:3d:47:fe:25:cc:bd:d5:4b:
         cd:20:d1:44:d6:0e:2a:2f:11:66:bd:7e:15:95:23:3c:90:ad:
         db:b7:55:c1:f3:1a:67:41:ee:3a:dd:7f:f6:af:be:bf:4a:c8:
         9d:c6:91:8e:bb:49:0f:7a:23:a0:1d:69:85:24:79:87:dd:79:
         2f:77:2f:3c:9f:b3:1f:44:36:a6:f6:8b:98:14:a8:2a:f4:57:
         b8:e5:0f:08:56:ec:1b:f4:6a:1c:fd:cf:ec:6d:d7:c1:90:ac:
         0a:53:03:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:46:44 2026 by rpki-client