Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
File:                     TaktycvByBxzpp8xWlMbR_ROPFQ.mft (raw, json)
Hash identifier:          dAvU0fLdSKc4mC9KNFNQzFUApLD7LozyBRy24KtOLt4=
Subject key identifier:   70:0C:7E:D6:5A:C2:C7:02:3A:F7:CB:5A:50:58:E2:F9:6D:F9:8A:1D
Authority key identifier: 4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54
Certificate issuer:       /CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54
Certificate serial:       019EB7D8206816C330C149899781A53C560C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
Manifest number:          0A6E
Signing time:             Thu 11 Jun 2026 18:00:54 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:54 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:54 +0000
Files and hashes:         1: J6MDysEdSDqpfEKGzsYRb5JJurM.roa (hash: UOMYa9Ddu00FwSsUCK8E9aTAp2SOrOcZP7FkvyKmDVg=)
                          2: TaktycvByBxzpp8xWlMbR_ROPFQ.crl (hash: 6IdwHU+dwJdS8+VHfvbWSKWXozHsEN0GNnWoDxeiRQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d8:20:68:16:c3:30:c1:49:89:97:81:a5:3c:56:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54
        Validity
            Not Before: Jun 11 18:00:54 2026 GMT
            Not After : Jun 12 18:00:54 2026 GMT
        Subject: CN=700c7ed65ac2c7023af7cb5a5058e2f96df98a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:77:70:f5:bc:f9:75:59:e5:a3:ca:df:3b:
                    29:da:2d:b0:b7:9d:51:0f:6e:c1:9c:02:f8:f4:c5:
                    86:0e:e6:ee:c5:ec:b4:13:62:f6:6d:fa:f5:fb:69:
                    58:6a:69:f8:7f:8e:00:f6:e4:5e:e1:8c:10:84:3c:
                    5a:d1:58:77:fa:68:67:b9:07:65:fa:0a:05:f0:77:
                    2c:1f:8d:eb:4f:ee:ff:1d:df:42:52:fc:5d:3c:aa:
                    43:23:56:4f:8a:3e:31:94:c3:b1:47:5e:c1:91:34:
                    cc:de:b1:2a:d7:fb:ce:48:a2:bb:d1:2c:d1:fe:98:
                    d8:b6:c9:e1:12:c2:3c:e0:48:a0:0c:12:d5:a7:de:
                    22:9d:13:e4:79:cd:81:05:4c:84:75:d0:61:1a:64:
                    3f:42:cb:11:58:8d:43:d3:5f:2c:80:ca:dc:b0:31:
                    c2:af:66:d3:ca:f9:41:99:e3:46:bb:8d:c1:8c:79:
                    c6:70:17:be:3e:79:7c:a7:f3:d3:69:93:4c:82:d8:
                    30:8c:24:df:a8:20:df:4e:ac:86:55:10:af:1a:ef:
                    1a:8b:f4:1b:62:ad:40:75:b9:d7:08:34:40:fe:38:
                    c9:c4:51:4e:16:98:4e:d3:15:84:cf:35:be:25:a8:
                    d2:af:22:80:8c:fa:85:c2:95:47:c7:b9:2c:48:f9:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0C:7E:D6:5A:C2:C7:02:3A:F7:CB:5A:50:58:E2:F9:6D:F9:8A:1D
            X509v3 Authority Key Identifier:
                keyid:4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:db:da:27:19:8d:1b:e1:cb:3d:94:e5:99:58:f3:2b:51:da:
         df:76:06:9f:c6:f4:d8:a9:f7:d5:fd:f3:25:77:1d:67:a5:8c:
         4a:3a:a6:6b:79:df:72:35:88:5e:13:61:a6:3f:b9:ef:61:ac:
         89:4b:d3:e5:4a:49:f8:3c:b4:a8:99:15:ee:1b:c8:e6:4b:77:
         a8:65:3f:30:ba:dd:c9:da:89:87:19:1e:88:51:82:c1:91:69:
         3e:36:cc:e3:dd:2e:21:a3:7a:25:3e:36:5d:ca:71:50:48:8a:
         ac:3b:54:a0:73:04:80:cc:76:c7:e2:92:51:bd:a6:b3:8b:72:
         71:4e:b3:d2:61:f3:ff:db:69:2b:57:91:ca:b5:e2:62:4d:d2:
         d6:5e:4b:bc:c3:d8:fe:53:bc:ed:d1:23:4b:b2:da:5c:f9:cb:
         49:97:6e:93:a9:3a:6e:8c:f1:2c:bc:85:fb:ee:0f:68:97:86:
         44:05:c7:95:db:fc:77:21:74:b8:19:f6:56:89:82:37:21:cd:
         d5:d7:27:98:06:bf:31:94:22:dd:1a:11:50:93:d2:e3:84:d9:
         88:be:a2:b9:40:32:8d:30:34:b7:69:08:08:21:2a:76:b5:3c:
         e3:ab:81:91:7e:5b:f2:3f:32:0e:ce:4b:07:c1:a0:00:3d:12:
         59:25:30:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:18 2026 by rpki-client