Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
File:                     sMnhFmeJWbipR4_Op8o8BgMQIWI.mft (raw, json)
Hash identifier:          WQxUb/drxE6cSivN25jeDHpNbT9bW+Aerla86DF5iws=
Subject key identifier:   EA:23:5E:F3:A3:D2:A6:B5:FF:57:C7:CF:F5:84:41:0B:F9:20:E8:7B
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Certificate issuer:       /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial:       019F12DFAEC65C85611E17EBD5C3005A4B5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
Manifest number:          09D8
Signing time:             Mon 29 Jun 2026 10:14:36 +0000
Manifest this update:     Mon 29 Jun 2026 10:14:36 +0000
Manifest next update:     Tue 30 Jun 2026 10:14:36 +0000
Files and hashes:         1: SOiERy2FzpjBOJscmjZUT2oXCyo.asa (hash: I8iKKxNhfuhsMLpyqDcsPliv9eTPu4ZuRNf7dFDTu3k=)
                          2: XUGY9TbOMBX49Z8u90RGUe-ExLs.roa (hash: qtTspg26ND5GYRKyrYjwXIvA6gCRcdmehMVXE9EcA5s=)
                          3: pveYjPqqa33zyHJsL2HgOS81RP8.roa (hash: hkJYHCqt1h8FeEodnV/T5VcTAPQMmX14p05ilCVyqgE=)
                          4: sMnhFmeJWbipR4_Op8o8BgMQIWI.crl (hash: ZQtHUX2nhoi+hJSW1C1XBBC0pGv6cODOBWP4+dk+SYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 10:14:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:df:ae:c6:5c:85:61:1e:17:eb:d5:c3:00:5a:4b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
        Validity
            Not Before: Jun 29 10:14:36 2026 GMT
            Not After : Jun 30 10:14:36 2026 GMT
        Subject: CN=ea235ef3a3d2a6b5ff57c7cff584410bf920e87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:4c:e6:6d:38:e5:56:36:9e:05:20:eb:ee:
                    03:86:02:3b:67:11:71:9e:f6:de:05:60:c3:df:5f:
                    82:3d:1d:00:24:7d:c4:11:5a:70:51:c4:af:5a:e6:
                    ca:fd:d4:0d:d9:80:1d:d2:36:ff:80:49:77:05:91:
                    c1:31:58:00:bd:c3:58:57:da:90:13:95:b9:94:8a:
                    c0:81:e8:33:b7:7c:3c:7c:22:76:05:94:5b:66:f8:
                    2a:7c:eb:76:97:fe:5f:23:5d:3d:0b:00:53:89:6e:
                    17:96:bf:66:4b:8b:bb:6e:61:64:e5:7b:45:46:c1:
                    bc:47:9e:6d:0a:75:05:be:b8:fc:94:ff:50:d8:58:
                    64:30:f4:8e:50:df:81:e6:c0:e3:7f:d9:b8:1e:2f:
                    30:fc:ae:5c:d4:49:54:ca:b5:cf:42:77:db:b3:31:
                    54:14:69:16:8e:e5:94:d2:c7:8e:17:ad:d4:d0:2d:
                    1f:92:32:a5:f6:9d:3d:28:6e:d3:0d:29:ca:92:ef:
                    ab:fc:dc:16:08:30:46:75:50:ba:c7:8e:cc:60:ce:
                    99:cd:9c:8b:b6:4e:7a:8b:b7:0f:c9:3a:06:2e:38:
                    32:d1:cb:81:d9:64:d7:6e:97:fb:e1:7c:01:e0:52:
                    ca:0f:c1:4d:f4:0c:4a:40:7f:fc:90:42:0f:c5:b4:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:23:5E:F3:A3:D2:A6:B5:FF:57:C7:CF:F5:84:41:0B:F9:20:E8:7B
            X509v3 Authority Key Identifier:
                keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:96:4c:6a:da:e6:80:fb:80:72:b9:4a:0d:56:22:d3:0f:d6:
         5b:3c:d7:1c:dd:a4:6d:4b:dc:7c:16:cf:1d:2b:36:35:4b:ad:
         6b:45:b8:b9:ba:2d:fe:3e:9e:67:19:89:dc:01:23:2d:88:3a:
         e0:11:ca:2a:8b:55:ab:96:28:3b:4f:a3:bc:3c:41:d3:ec:f0:
         8f:1b:aa:de:d3:46:67:ce:7d:d7:a6:40:ea:80:94:4d:9f:cc:
         35:7b:7d:56:e7:0e:fd:3c:91:e5:c8:5f:60:64:04:76:30:2a:
         89:10:6b:b9:66:b3:62:fd:d8:81:35:f6:fd:65:1f:65:d4:3c:
         28:d6:13:9d:8c:10:b0:d2:c4:9b:22:c2:03:f4:e4:60:30:b0:
         fb:8c:9f:ca:00:da:f0:8e:5b:a0:7f:9d:d1:70:ac:e5:ea:3a:
         a0:d9:ee:9b:fe:73:99:10:8a:f5:d4:43:7a:07:f8:8d:c5:ea:
         43:65:21:01:e9:98:58:22:33:8d:54:89:32:ee:57:6a:7b:0f:
         20:e9:fc:67:ba:91:07:22:f0:fa:c5:e5:6f:55:05:75:4e:72:
         e1:2b:bd:c3:18:f1:ce:11:dd:dc:c0:03:9f:29:de:1f:f5:35:
         38:8a:08:5d:55:c1:04:c4:d1:a3:df:1a:41:a7:c4:5d:4f:9a:
         61:30:00:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:40:31 2026 by rpki-client