Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
File:                     qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft (raw, json)
Hash identifier:          pDE2kUSvvb8sP2L93l4dr1s6Hw86EEjKeMO+BE7ick8=
Subject key identifier:   7A:B5:38:D5:30:8D:FD:67:51:2F:2B:9E:FB:A5:0F:10:A3:F6:44:A0
Authority key identifier: A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
Certificate issuer:       /CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Certificate serial:       019EB845EB95ED193EB6C4FFCC30379D5EDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
Manifest number:          083F
Signing time:             Thu 11 Jun 2026 20:00:50 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:50 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:50 +0000
Files and hashes:         1: MkdPJ2X8KSAgPeL_E9eUW7kJg44.roa (hash: L9wK9aXGqZVs8Xjy0tqG+NiG0/js60DJI6OgRrSyYQQ=)
                          2: qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl (hash: oGVKBCyo/sa812Z4dhDaKrcxed8Jf1Ej/Zft5+9ph88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:eb:95:ed:19:3e:b6:c4:ff:cc:30:37:9d:5e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
        Validity
            Not Before: Jun 11 20:00:50 2026 GMT
            Not After : Jun 12 20:00:50 2026 GMT
        Subject: CN=7ab538d5308dfd67512f2b9efba50f10a3f644a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:65:06:f9:cf:d6:6a:47:75:56:1b:04:86:39:
                    85:02:dc:57:1e:f0:af:8c:18:de:35:f5:f9:aa:bf:
                    87:31:28:9f:d4:3b:0b:58:c7:8e:c1:e1:bc:db:1b:
                    a5:c0:b3:74:08:ab:b2:b1:21:bc:a2:d1:13:98:47:
                    dd:ac:5e:ca:98:f6:56:5c:18:e7:2c:10:bf:6b:c6:
                    0f:4a:8c:26:b0:41:7b:c0:13:ef:24:ba:c7:a3:df:
                    e8:53:c4:f8:44:6a:cf:70:35:b1:15:d5:fc:44:4b:
                    42:00:4d:13:28:70:9b:77:98:1c:7d:00:9d:68:1f:
                    fa:ba:85:80:37:3d:2a:bc:80:d5:99:53:41:35:11:
                    be:e1:ae:3a:63:c6:48:6d:06:01:c5:ff:71:a6:46:
                    d6:f3:62:51:9b:fd:a1:c8:b1:66:17:2c:e8:2a:c7:
                    1f:e4:18:f2:d9:a1:9b:ac:1a:33:57:69:ae:d8:8d:
                    b9:82:8c:5f:8d:b1:24:3c:81:98:c6:e1:67:fe:e4:
                    2e:26:d6:da:fe:8a:2e:84:8a:3a:20:ae:23:00:04:
                    96:3c:71:d4:6f:c2:59:a9:5c:ae:fe:3d:b6:ea:fc:
                    49:cb:2d:b8:0b:32:27:f5:14:e9:c6:05:bc:22:3b:
                    7b:35:24:19:95:b2:f9:de:1a:b0:4b:1c:48:6b:23:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B5:38:D5:30:8D:FD:67:51:2F:2B:9E:FB:A5:0F:10:A3:F6:44:A0
            X509v3 Authority Key Identifier:
                keyid:A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:4c:ed:06:40:65:18:3b:79:0c:18:c1:43:28:59:e8:50:
         6b:e0:09:e1:ad:01:56:e7:02:9c:24:f2:85:75:e6:c4:c1:ad:
         b9:b6:2d:6f:ba:17:fe:6c:8c:fa:cc:03:fc:81:78:84:c6:f3:
         77:9d:c0:59:3d:85:07:28:e4:de:d3:da:04:a0:28:7b:03:77:
         64:ef:1e:4b:9a:81:6f:18:12:83:33:2f:84:83:72:fb:10:d2:
         af:12:62:e0:0e:86:0b:d6:45:f2:b2:8c:7b:8c:b5:3b:b0:ca:
         06:8f:e7:5f:b4:e4:da:52:1a:3a:88:40:bb:da:21:52:72:15:
         cc:61:c5:1f:e0:85:34:01:0c:9c:27:fe:62:d6:3c:ad:f1:9d:
         06:24:b7:b2:9a:5a:2d:e2:6b:d2:fa:7e:2a:dc:0b:c9:fa:d2:
         6e:98:98:3f:73:93:a2:59:48:a2:72:a8:ed:e3:01:46:6d:bd:
         5d:15:db:7b:bd:c3:21:83:b0:65:69:5e:0d:d0:c7:47:15:47:
         87:86:9f:6f:b3:8f:2d:a0:f9:28:3a:23:d9:e0:ca:e2:5a:7d:
         2f:0f:34:47:ad:19:bd:16:24:e7:16:eb:cf:2d:2d:b0:78:72:
         39:01:a1:a2:71:51:30:32:73:4d:9f:9d:6f:00:0a:3c:56:2e:
         f4:e5:dc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:17:28 2026 by rpki-client