Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File:                     o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier:          xmNPnf9cA71ez5sktxWORKg+jjmqHKJeK2T/lQdBTK8=
Subject key identifier:   6F:C7:86:A8:D3:82:57:57:22:24:B4:21:D5:0C:A5:28:42:E3:D7:2E
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer:       /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial:       019E9AE074D38ABF1F84E91D1A412878A96E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number:          0885
Signing time:             Sat 06 Jun 2026 03:01:01 +0000
Manifest this update:     Sat 06 Jun 2026 03:01:01 +0000
Manifest next update:     Sun 07 Jun 2026 03:01:01 +0000
Files and hashes:         1: 3MFj15oSeUJYuJbY2U542UoSXGM.roa (hash: j9Y9LVF9WUhE5Tw8LMdWTvxog1CGJJ1rf8AUNlTnbFI=)
                          2: FGVsTKcXFHABDa_e0HM9Faa7r2M.roa (hash: 2Iqm//83hIlnGhnfsyksmZkIg0tX+MTyrQg6DXUyYdQ=)
                          3: SwB1iAgYjly4csbv4jz0oadyUZk.roa (hash: TuHJEn/9Xw5181UZ/VH/apXlrIOdLQGvmuNms8pxlNU=)
                          4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: 56qGTJOmtvsVNrtjMSR2eiX6Lzwco9HERftqdQEoPLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:e0:74:d3:8a:bf:1f:84:e9:1d:1a:41:28:78:a9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
        Validity
            Not Before: Jun  6 03:01:01 2026 GMT
            Not After : Jun  7 03:01:01 2026 GMT
        Subject: CN=6fc786a8d38257572224b421d50ca52842e3d72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:2d:4d:d1:0f:9d:d6:be:68:ed:3a:7d:80:
                    1e:bc:a8:5f:e9:57:1f:da:34:fd:d6:78:6b:b9:8e:
                    27:a0:73:0d:73:d4:0a:45:81:fa:d0:d7:e1:1b:0b:
                    44:6c:f2:01:1c:e3:f5:ce:3f:a6:b9:c1:d8:49:c2:
                    58:d9:cc:08:0b:86:78:2a:0c:c5:c2:28:44:76:ed:
                    e7:5f:b9:f6:1a:55:89:63:ce:64:0b:67:eb:25:93:
                    99:33:6c:0b:c1:fe:20:12:5e:e7:3c:59:5e:c4:f6:
                    9b:e3:13:71:dd:52:17:a0:e9:c1:86:13:47:25:26:
                    f5:c9:6d:3f:c7:8d:12:95:89:07:3d:bf:06:52:d0:
                    a1:6b:ff:7c:06:5e:02:b1:34:d6:25:de:9c:78:0d:
                    2e:7e:c0:63:3f:cd:a1:c5:be:60:d3:10:c0:fc:1e:
                    7b:1a:f4:71:3b:99:bc:b4:86:2b:5a:a0:03:d2:3a:
                    00:43:c6:b1:77:f8:ec:94:7d:2f:1c:4d:32:d3:89:
                    ce:88:c7:c3:68:19:e2:b7:6e:20:24:db:c6:ae:fa:
                    7c:00:cc:e2:4a:35:90:db:37:b0:06:ed:96:49:15:
                    3e:b0:2f:e3:7e:44:d4:bd:7b:94:28:e1:b9:d9:90:
                    a2:d7:54:57:9b:7b:68:2f:3c:13:ef:13:8e:42:ac:
                    c7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C7:86:A8:D3:82:57:57:22:24:B4:21:D5:0C:A5:28:42:E3:D7:2E
            X509v3 Authority Key Identifier:
                keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:28:26:e3:0f:b9:c9:99:4d:34:c0:f5:8e:99:27:21:12:e7:
         c5:9a:8a:18:5b:b2:28:90:34:35:42:21:f2:61:9e:64:bd:a6:
         cc:84:fa:7b:e4:24:b1:90:5e:a0:f8:83:36:9a:46:d5:18:13:
         1e:7f:1a:fe:fb:c1:8f:74:09:cd:04:6b:5b:b6:59:e8:7c:93:
         ff:05:55:01:2c:69:a6:03:51:92:83:ff:47:6c:db:ad:59:3e:
         71:d2:bd:f5:a7:74:9b:41:f5:d5:78:24:05:e5:4b:85:95:61:
         cf:1d:67:f4:bb:d4:1b:e4:41:4c:f0:93:ec:24:11:09:6f:29:
         cb:12:91:e8:65:7d:8d:6f:9f:2f:22:38:b3:b5:7b:84:f1:34:
         12:dc:06:5f:8f:5f:e9:03:0a:ab:99:0d:ae:7a:97:31:3f:b0:
         ec:3a:66:88:31:66:92:cf:83:bb:a9:07:ec:17:eb:08:8e:ed:
         9e:3c:a1:f3:96:4b:75:4f:92:ff:47:89:64:a4:f3:97:c4:09:
         ef:eb:20:ed:27:ca:de:40:a1:11:27:7d:97:7d:9f:0c:88:6b:
         f4:30:83:2b:66:1b:f7:3d:4e:a3:6f:ed:a0:33:82:0d:8f:8e:
         6d:4d:b1:05:9f:18:f6:a9:96:51:d3:8a:c1:58:08:9a:a0:1b:
         91:91:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:18:48 2026 by rpki-client