Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File:                     2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier:          qZsy6UaOKKs7jlF0L/6gEG4tJWawhqWPsDF8H2+JY5Q=
Subject key identifier:   85:D7:E2:FA:04:CE:C2:4B:49:BF:32:B4:AF:A9:1A:F2:F4:BA:30:38
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer:       /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial:       019E9A3B9751319EF0080046117F23A91977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number:          0C3D
Signing time:             Sat 06 Jun 2026 00:00:57 +0000
Manifest this update:     Sat 06 Jun 2026 00:00:57 +0000
Manifest next update:     Sun 07 Jun 2026 00:00:57 +0000
Files and hashes:         1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=)
                          2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: jF1KkUCjTmuuyafAor0GfLMEr8I41MEDaoV1IpQvSvQ=)
                          3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=)
                          4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=)
                          5: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=)
                          6: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=)
                          7: LmasvFTLE11mrCxdzPNrrKlYdc0.roa (hash: cro6qKPl5KcW1vG37gAcGVH3Wnv66eL0SBKTzxopYzw=)
                          8: OnExh771ZtOXTYHIXE8BRYIv3I8.roa (hash: iBanqCcjQhcLJzTqVwfRApVqXKWA6vIc0dQd8k0fLnI=)
                          9: SUEavrAvbJYi-09a6QVI2M_eSIc.roa (hash: hAAmC8KjoRR+ZLoagJaC8chUvGr6KdS0WhlLhZ1Tw9Y=)
                          10: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=)
                          11: _TZcDPZzpFhla5KXCrewBSv_afs.roa (hash: F0O1jt3D7eDKUVGno8fQyg0oYO+Zw0jzvuEgWmXzed0=)
                          12: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=)
                          13: d8tYjTMOm2iLi-JD46yX3lK67ec.roa (hash: R7k5LiqgpO3uW9dYKT9Gf8MpGa5+R/ekeb18H+cE9bo=)
                          14: g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa (hash: nYVi4YC9fVishrPOTjgH2hJlXxcspFsYbheNk/bE1wY=)
                          15: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=)
                          16: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=)
                          17: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=)
                          18: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=)
                          19: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=)
                          20: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=)
                          21: xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa (hash: 81EBYCMb1JChmS1xYbhUHSpsd2Mkl7rE43HaypoVrxw=)
                          22: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 00:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:3b:97:51:31:9e:f0:08:00:46:11:7f:23:a9:19:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
        Validity
            Not Before: Jun  6 00:00:57 2026 GMT
            Not After : Jun  7 00:00:57 2026 GMT
        Subject: CN=85d7e2fa04cec24b49bf32b4afa91af2f4ba3038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:e0:f2:dd:f9:0b:0a:b2:83:10:5d:35:54:
                    8f:b5:ef:a1:c4:33:73:73:a6:50:04:a0:30:42:84:
                    20:5d:62:be:74:d1:32:83:8f:f7:56:ba:eb:e4:e7:
                    ae:70:81:a9:90:89:b1:f8:a0:85:5c:05:c2:94:33:
                    96:ed:11:33:0b:62:7b:8e:e5:8b:2e:5e:d0:e2:0a:
                    e7:60:a8:2e:71:b0:51:38:a8:a5:69:44:47:27:d0:
                    95:1d:4e:bd:81:ff:d8:1b:be:d5:da:4d:f6:be:fe:
                    24:db:e3:8b:11:27:54:29:eb:2b:01:fa:70:5e:34:
                    5e:53:15:06:20:3a:07:e1:ef:92:d4:6c:e4:1d:a3:
                    17:44:11:5b:96:0c:2d:d0:44:1a:16:74:25:3a:92:
                    a8:f7:c9:95:91:2d:be:4c:4b:29:50:56:13:a5:df:
                    17:f7:59:06:9d:a2:e8:f0:de:45:5f:88:93:f9:91:
                    18:42:80:23:72:21:77:01:18:3f:26:54:c8:85:d4:
                    0a:7d:19:d7:3a:08:ce:4e:aa:4b:6d:db:4a:33:1a:
                    fc:39:a6:da:bb:e0:5b:58:17:2f:23:e6:18:44:4f:
                    3f:44:42:61:fe:cd:e5:13:9a:54:69:ca:1f:ef:b5:
                    f2:3a:71:5d:f8:20:db:4a:2c:4c:c4:79:be:17:40:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D7:E2:FA:04:CE:C2:4B:49:BF:32:B4:AF:A9:1A:F2:F4:BA:30:38
            X509v3 Authority Key Identifier:
                keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:80:1d:19:96:1a:ac:ff:9c:0e:9f:53:f0:4c:80:cf:07:62:
         b6:d8:52:fb:d0:a4:aa:1b:4b:0c:6a:a4:5e:1a:91:bd:c6:ff:
         31:83:5f:da:3f:89:b6:1a:4f:d9:16:59:da:0e:d5:7b:a2:95:
         f7:af:28:eb:d3:4d:a0:fb:05:a6:92:cb:3f:f3:0c:d3:d0:ec:
         0e:85:bc:d8:f2:0c:48:07:5c:b1:9d:86:62:12:86:1c:df:78:
         09:0c:49:ba:be:5f:c5:5c:b6:cf:d9:47:d3:55:7c:b6:67:5d:
         7e:56:73:12:7f:ab:7a:5c:25:66:c5:ab:7d:3d:24:18:6e:82:
         8c:6a:fa:16:ed:14:d0:88:20:f5:ce:60:4b:3c:f5:75:79:40:
         45:3b:d4:8c:23:96:af:f0:65:3a:77:6a:ae:c2:8c:a5:e6:97:
         0e:13:ba:f4:b5:26:3a:ac:04:d7:dc:bd:ff:28:22:84:b3:95:
         df:d7:66:13:16:f1:22:fd:5a:4c:66:84:2b:72:2c:fc:f9:7c:
         62:02:83:72:2f:76:86:02:7c:82:41:12:63:90:12:87:87:ce:
         9c:af:0a:5f:fb:8d:8e:75:ca:0f:8b:d3:0d:38:1f:23:ea:c1:
         b3:d1:79:d4:13:88:11:e6:34:3f:c9:b6:e8:47:d0:20:80:28:
         ba:c5:3c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:51:48 2026 by rpki-client