Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File:                     pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier:          wviapyNI+BFQW7vMkTOBMuDWYa/ONxpBSTuxD20iXRw=
Subject key identifier:   40:5B:A0:76:4D:64:BD:DE:1A:32:16:4F:14:0F:AA:6B:2E:85:F4:22
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer:       /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial:       019EB9FD7D48FE4BC56B7A2668857475684E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number:          0E14
Signing time:             Fri 12 Jun 2026 04:00:58 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:58 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:58 +0000
Files and hashes:         1: 8hDvXAFXtwTiaPxitWHApgLE65k.roa (hash: EiRwFtmOo1DVVx7O1xctBpgvgnvAfczha5+H5oxZvkk=)
                          2: FrgtLDHlGMWP7-Ol00IvZZoBesM.roa (hash: T567K72LlQfx3PglnXUfayy6bFn0FIimheQaqSUapwY=)
                          3: PIBAi-NbloODmSiDeKc6jb9ihv4.roa (hash: R3IFcDR+URbSvkybKJ/Sj9TwLvQjyr3A69qpjrCDlEE=)
                          4: ga1BrMjD7wY_QoN5ExMTad0kou0.roa (hash: /2/Lg7lZekU4p6NvtnYYz9mRfacgER7O7n79Ibm5W4s=)
                          5: lplNqf06vua3DkgbqqhwRpQX5y4.roa (hash: yaa0RKonl28mWEtrN2B7tlLyBAqCTM4woPMQSkOo7wE=)
                          6: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: Pt+NI27I9AuRc3+Zmxnu8WV3zilivKi+sjg+bH5/1nM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:7d:48:fe:4b:c5:6b:7a:26:68:85:74:75:68:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
        Validity
            Not Before: Jun 12 04:00:58 2026 GMT
            Not After : Jun 13 04:00:58 2026 GMT
        Subject: CN=405ba0764d64bdde1a32164f140faa6b2e85f422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:a4:e3:74:88:90:64:18:03:4e:e9:fd:75:
                    5d:17:ef:f2:f5:bc:a9:a1:25:b3:67:d6:e0:78:e1:
                    30:dc:fe:71:b8:e1:cd:24:c3:9c:ba:f9:74:f9:12:
                    17:9e:f5:a0:9c:85:28:15:55:bb:a0:60:05:06:b7:
                    01:d5:bd:6e:e8:47:0f:8e:b6:22:c5:8c:ba:3b:e4:
                    2b:e2:63:8c:8a:41:8a:96:a5:82:d5:40:5f:71:97:
                    0b:be:58:0e:02:19:25:01:1c:48:53:97:11:ed:f1:
                    e5:a4:76:55:9f:54:76:14:de:fa:ad:f7:ec:6a:ec:
                    6d:f6:fc:fd:58:4d:72:60:36:a3:29:a2:56:3b:67:
                    04:5f:41:7d:71:ec:bb:81:6a:89:1d:0e:2d:b2:96:
                    79:70:64:e0:7e:ec:35:56:8e:be:96:59:60:c7:be:
                    08:34:cb:3e:e5:1d:95:51:2a:6a:24:5b:dd:53:b4:
                    1d:6b:d2:d0:81:7e:82:a8:de:63:79:3d:32:ab:77:
                    ab:41:56:54:ad:32:a0:39:a4:70:2c:42:59:20:d3:
                    fe:ad:c7:63:21:60:a4:1c:e3:0e:2e:bb:4a:bf:f1:
                    17:0e:6a:f0:0f:57:bd:39:8a:66:39:69:14:71:0b:
                    57:74:d3:a2:c9:a4:a8:fb:32:dc:82:7d:ee:2a:e5:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5B:A0:76:4D:64:BD:DE:1A:32:16:4F:14:0F:AA:6B:2E:85:F4:22
            X509v3 Authority Key Identifier:
                keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:95:17:6f:40:51:39:5c:7c:d3:b2:42:a3:f5:df:81:c9:
         99:e5:de:5a:b3:de:2a:b5:54:af:57:1c:8c:00:59:82:f9:a9:
         0f:5b:3b:77:7a:6c:ce:c5:78:44:23:14:61:c2:0c:dc:4d:64:
         a8:ba:7e:58:5f:22:94:c3:4c:c6:18:c4:44:9c:ad:c3:9a:f5:
         20:e4:23:e7:b3:74:c9:65:03:81:cc:cb:6d:61:9b:44:4f:3e:
         ca:1a:39:8b:8a:80:4c:16:09:33:8a:35:37:be:2b:69:dc:d0:
         63:db:a4:ab:1b:41:33:5a:98:68:3a:5b:8d:40:f9:83:cd:f3:
         59:18:5d:cf:6d:aa:0f:83:e2:06:be:65:db:6d:9b:09:19:b2:
         2e:5a:21:0d:54:d5:c6:f5:33:4b:cf:52:cb:75:b6:c4:0d:14:
         7b:63:49:20:19:90:df:b8:f8:53:ce:29:64:da:3b:cd:28:92:
         3e:81:fd:ae:46:f3:dd:66:07:af:40:e5:3e:ac:16:1c:7b:db:
         48:de:19:b9:ef:ae:d1:c8:81:40:f0:04:ee:11:9d:96:91:a6:
         e6:c3:c3:5f:e8:7c:a6:3c:23:da:b6:0a:61:fc:7d:5a:c9:c0:
         7c:3d:29:19:19:53:fb:a2:f5:e5:b2:82:6a:b9:8f:07:30:3c:
         7e:26:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:16 2026 by rpki-client