Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
File:                     tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft (raw, json)
Hash identifier:          xPd7FBbqFiWBCAvZfQs5GnD/V9v9B5XLjgczImzzXfA=
Subject key identifier:   BE:6D:31:37:A0:86:A8:B5:A6:6D:02:99:02:E8:30:F0:F9:0B:EE:E3
Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
Certificate issuer:       /CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Certificate serial:       019EBBEC40DBF0934793454D7F1ADAB49ACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
Manifest number:          126D
Signing time:             Fri 12 Jun 2026 13:01:22 +0000
Manifest this update:     Fri 12 Jun 2026 13:01:22 +0000
Manifest next update:     Sat 13 Jun 2026 13:01:22 +0000
Files and hashes:         1: 767zGTDgc7fgTufWzjR5LaKSze0.roa (hash: n8p0HPsTD9vQuShoZxl/F7SA3Y5pTSHF+ThwGTaBjvI=)
                          2: tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl (hash: Qf4ryVEJzM+8JogG3s7ccVbK7sn92bSbGZnmoKZTMI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:ec:40:db:f0:93:47:93:45:4d:7f:1a:da:b4:9a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354
        Validity
            Not Before: Jun 12 13:01:22 2026 GMT
            Not After : Jun 13 13:01:22 2026 GMT
        Subject: CN=be6d3137a086a8b5a66d029902e830f0f90beee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:43:ee:76:1c:5f:45:08:89:c9:c5:ac:d5:
                    9c:68:c2:c1:dc:2a:6f:37:85:09:55:53:fd:c2:13:
                    94:21:08:da:68:29:0b:d3:e9:0d:4e:2e:36:0c:08:
                    ed:0e:24:c1:2e:98:b9:cb:f9:6e:6c:e1:ab:60:c5:
                    3e:88:08:f4:46:d8:7c:21:d3:6d:04:bb:cf:2d:78:
                    82:05:8c:78:d8:8c:dd:97:32:6d:6b:71:fa:83:44:
                    c1:cb:71:77:fa:f5:e4:e5:dc:f9:97:59:db:dd:b1:
                    f9:7e:89:14:9d:6d:26:6e:25:a8:13:c4:4d:42:9d:
                    dd:f8:49:50:69:a2:16:d3:31:10:33:9c:1d:45:bd:
                    19:06:25:f3:b6:3c:5b:a4:d7:7a:d6:2a:04:64:b0:
                    5e:dd:ae:c4:d7:59:1b:5f:ef:54:0b:bc:b1:7e:a5:
                    2c:74:9f:a7:d1:80:59:9c:4d:fb:6e:c5:be:aa:20:
                    66:79:86:9d:fe:04:09:0e:e7:3d:1e:e1:d1:0b:ac:
                    79:ad:1f:80:eb:86:f3:93:cb:6d:a9:79:2a:0c:a8:
                    fa:77:44:09:30:eb:e0:dc:24:8d:80:cc:2c:e6:ee:
                    32:f8:31:15:51:26:48:0c:74:ab:1a:af:6c:8f:ee:
                    9f:b2:4c:c2:b7:13:60:db:7c:44:08:59:de:3a:3d:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6D:31:37:A0:86:A8:B5:A6:6D:02:99:02:E8:30:F0:F9:0B:EE:E3
            X509v3 Authority Key Identifier:
                keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:20:1d:a7:e7:e6:d9:fc:b1:bd:31:c6:b9:8c:d3:7b:34:df:
         f9:c4:5d:99:62:6c:b2:77:6c:a0:d7:be:0c:c9:1c:d8:cb:0f:
         8b:22:3b:b9:ab:b1:57:63:14:ce:88:1e:8a:d8:8f:d7:f2:4a:
         a0:f9:85:f0:9f:13:40:a6:59:20:b2:7a:89:e6:90:52:c0:cb:
         ed:61:35:39:3e:2b:f3:9b:a0:71:ce:ce:43:5f:91:81:3b:49:
         46:43:2c:e8:04:6b:49:de:3c:6f:cf:b6:3c:85:04:75:44:d7:
         8c:71:02:dc:c7:93:2a:25:c1:15:d9:c9:10:ea:6a:54:13:30:
         02:02:3e:13:ac:6c:02:de:51:6f:1f:71:12:c6:df:3f:d1:cf:
         cb:b3:c0:cb:f1:7a:02:42:95:54:14:b3:8e:8d:a0:5d:fa:79:
         c2:de:1e:13:f2:64:cd:5b:b4:f9:a0:da:94:ee:3e:0d:01:a1:
         e4:78:aa:22:b7:13:47:8d:11:6a:9e:a2:de:58:66:5a:2c:fa:
         de:97:a1:5c:34:60:19:f7:4c:2d:d1:11:7f:87:ec:c8:36:da:
         5f:7a:55:3a:8f:2d:f8:cf:8f:24:84:52:7b:bd:d7:6f:41:94:
         a4:47:26:49:35:a2:03:65:ec:22:d4:38:76:06:c0:d9:27:e4:
         1b:34:19:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 19:38:21 2026 by rpki-client