Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File:                     maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier:          qKSP0+CCoph9EMCT8DPcXSbcEJrRHXofDP5g90gSbY8=
Subject key identifier:   33:A7:13:2D:8E:19:A5:7F:CA:22:83:89:65:69:4A:75:DE:08:3E:0C
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer:       /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial:       019EB68DE55DB2EA7547C8716544BE64EEE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number:          106A
Signing time:             Thu 11 Jun 2026 12:00:13 +0000
Manifest this update:     Thu 11 Jun 2026 12:00:13 +0000
Manifest next update:     Fri 12 Jun 2026 12:00:13 +0000
Files and hashes:         1: 6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa (hash: 32SPWBtR5ifRYzi3R6/09Z2DiSWDuRPZa68/1wX0JGw=)
                          2: J1QSbtTALXp3LDlVSmUk6MBKTwk.roa (hash: S+0rrf1JmQadx56tQAp4cXgjdXzHGEHs/KEObwAzQdw=)
                          3: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: 3T2+CzHGFrRIx3bT76YGkDi90rTDPVVtZ+pHbeNTfNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 08:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:8d:e5:5d:b2:ea:75:47:c8:71:65:44:be:64:ee:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
        Validity
            Not Before: Jun 11 12:00:13 2026 GMT
            Not After : Jun 12 12:00:13 2026 GMT
        Subject: CN=33a7132d8e19a57fca22838965694a75de083e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:27:da:06:f1:8d:27:10:2e:87:ed:74:38:
                    3e:75:9c:3f:fa:9d:83:1b:c1:a4:b3:bd:11:5a:a1:
                    b1:d4:75:a8:4f:06:d7:f2:8a:87:e1:2d:a6:96:b4:
                    14:da:a2:b1:d6:d3:ba:c6:65:c2:5e:fb:17:f3:44:
                    d4:a4:3e:11:5e:87:94:4f:08:9c:f6:06:04:d0:ca:
                    b4:36:1b:66:ee:25:3e:6d:95:a7:19:9b:20:af:cd:
                    d8:c6:ec:ac:0f:59:9d:ba:15:66:22:ae:7b:73:8b:
                    25:7e:a2:88:24:25:02:88:7a:21:4a:d1:af:6c:1f:
                    ef:a0:50:a8:7a:cb:e6:78:56:8c:98:3a:c9:e5:0c:
                    78:9b:cc:e1:8c:1e:0d:ce:b7:9c:8c:3f:43:22:a5:
                    93:83:d3:a0:91:bc:a0:61:6d:4b:b4:32:a5:bc:a8:
                    fb:e4:f1:74:8b:21:e0:93:73:4a:c9:48:a7:59:48:
                    7c:2e:d0:b7:2f:e1:b5:0c:3b:98:5f:b1:5d:4e:27:
                    85:4d:f8:10:09:a2:4a:7f:6b:a8:bb:c8:14:15:e7:
                    74:c0:50:86:05:a8:86:89:d7:68:6f:9d:76:67:90:
                    44:e7:54:05:7f:2c:c9:61:50:37:1a:8c:7e:bb:a9:
                    d6:84:19:6c:e4:5a:d1:15:21:cb:e3:ee:5d:7d:f0:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A7:13:2D:8E:19:A5:7F:CA:22:83:89:65:69:4A:75:DE:08:3E:0C
            X509v3 Authority Key Identifier:
                keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:05:46:71:f8:8a:73:81:58:29:bb:91:16:26:73:9f:15:4c:
         be:74:12:f6:73:6d:96:84:56:98:7a:2f:f6:4b:df:fc:e9:5c:
         66:2d:b2:27:00:d5:20:f5:73:c0:c3:e2:9a:94:f2:be:f6:82:
         73:76:ba:e6:42:ed:69:ff:8d:89:25:a0:dc:cd:c8:4c:0d:8e:
         3c:df:7c:26:ae:a0:4e:1f:ee:5c:a1:30:20:8e:12:aa:e0:fd:
         1e:ba:a8:8e:a5:68:19:dc:ee:37:8b:aa:c1:5c:78:18:5a:39:
         4b:73:a4:5c:36:e6:2a:0f:b6:57:97:e6:28:f8:75:18:c3:61:
         71:e7:6b:44:5f:63:c4:c6:13:a2:14:64:32:f7:cc:74:4f:dc:
         ac:63:6f:28:24:c8:ee:dd:13:56:08:0c:de:4d:f1:b1:9a:e1:
         95:44:7b:94:4c:bb:90:c5:c3:a4:a7:95:78:83:4e:b9:25:f0:
         ed:17:9a:e5:10:86:03:72:1f:cd:31:9f:1c:01:99:29:3d:49:
         aa:cb:e7:e3:84:82:8f:0f:3b:15:6c:4d:32:d8:d5:73:ba:35:
         84:47:ef:f5:e1:2f:ab:ec:3d:24:9e:66:4c:28:2c:36:7f:f7:
         67:a7:7f:af:f1:62:c7:4e:a5:9a:f6:2a:84:a9:79:0f:e2:be:
         66:6d:9f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:41:19 2026 by rpki-client