Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
File:                     iEZAW_zHgGbFGSyz6-csRDxVcog.mft (raw, json)
Hash identifier:          ocWvTy4ZUFqfxctY7LtxYrSBX1c4zz+E0zdrB326044=
Subject key identifier:   9F:89:75:05:3D:07:55:FE:77:07:76:BA:A8:CE:59:35:FA:1E:1C:47
Authority key identifier: 88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
Certificate issuer:       /CN=8846405bfcc78066c5192cb3ebe72c443c557288
Certificate serial:       019EB733B123037B04261E375E38EEEE83CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
Manifest number:          1955
Signing time:             Thu 11 Jun 2026 15:01:18 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:18 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:18 +0000
Files and hashes:         1: iEZAW_zHgGbFGSyz6-csRDxVcog.crl (hash: qDfHy/xdzIgkGXpPEZh419nC0W6zTxw7ZSdjnOnK/9g=)
                          2: kUCjBswIGYWVGbpprI2jmZ708Qk.roa (hash: 1c9cExXpL0YEg3NqkYEUwPG7ybPwLJ10//KgRqbBmLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 15:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:b1:23:03:7b:04:26:1e:37:5e:38:ee:ee:83:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8846405bfcc78066c5192cb3ebe72c443c557288
        Validity
            Not Before: Jun 11 15:01:18 2026 GMT
            Not After : Jun 12 15:01:18 2026 GMT
        Subject: CN=9f8975053d0755fe770776baa8ce5935fa1e1c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:7e:de:48:f7:1d:75:e9:60:eb:81:f9:14:
                    d2:c6:5c:51:65:ab:c3:6c:0b:27:37:a3:77:e7:9a:
                    de:35:ce:75:b2:2e:c2:97:76:00:ec:18:c7:7a:c3:
                    cc:99:84:ea:72:01:ef:e8:ca:9c:e8:25:2d:e3:ab:
                    d8:55:9b:6f:f2:37:49:12:a7:26:7e:90:27:1b:e7:
                    f7:35:44:90:26:03:f7:ce:08:ab:f1:bf:ad:e5:4a:
                    6d:c8:8d:ec:cc:94:bd:23:b3:8b:46:7a:88:01:b3:
                    2b:ca:2f:07:d0:7b:31:2e:d1:e1:c4:9b:0b:32:c1:
                    db:a8:4a:71:fa:e4:f9:61:70:ee:c5:ac:a6:aa:ca:
                    a2:cd:2b:34:87:07:44:65:d2:9a:59:12:d9:7a:22:
                    3a:8d:e7:73:f1:74:9a:23:90:15:ae:6e:5f:cb:02:
                    3b:2a:37:ca:62:cb:54:41:45:a4:61:b2:43:3a:00:
                    1d:7e:c5:e0:1f:02:05:85:33:de:31:e1:5d:84:76:
                    60:c7:01:a5:e4:04:45:96:77:07:ad:8f:1b:25:58:
                    e7:96:d5:f4:42:ef:d3:23:6d:bf:31:26:26:67:53:
                    af:48:dd:d8:58:47:28:48:92:c7:7f:02:14:a6:b2:
                    99:50:31:25:f7:28:a3:38:00:6d:10:ea:c2:3e:9f:
                    65:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:89:75:05:3D:07:55:FE:77:07:76:BA:A8:CE:59:35:FA:1E:1C:47
            X509v3 Authority Key Identifier:
                keyid:88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:73:12:f0:df:16:61:0d:c8:3f:01:d4:83:df:39:57:0f:b5:
         8e:9b:c5:42:88:c8:e7:aa:16:0a:47:75:95:ff:6f:c6:79:85:
         31:05:02:26:d9:54:c2:19:b2:15:99:a5:5c:f3:5d:c9:41:09:
         f9:c3:01:81:92:20:23:d5:de:f7:f6:8b:34:96:64:75:35:9a:
         11:3c:76:0d:4c:dc:5c:07:e8:df:7f:dd:21:5b:3a:26:d3:c7:
         10:17:6b:a7:30:c5:a7:36:3c:e4:d6:71:d7:48:3b:a0:ab:d9:
         c4:4f:da:ea:aa:04:8f:80:ee:5e:f6:e5:4f:00:91:82:5c:01:
         f7:87:1a:39:eb:8f:dd:08:d5:69:3a:00:50:08:8b:cf:7c:a6:
         b0:a2:cc:ff:b6:98:35:0a:7b:a9:10:e0:dc:de:30:7a:f4:62:
         4e:27:77:10:74:b8:33:d8:df:3f:9a:85:97:61:20:11:a8:cf:
         41:90:1b:f0:a2:d4:c2:12:d4:bf:5c:27:76:cf:6b:ff:48:87:
         dd:78:47:08:01:94:4c:60:83:79:64:fc:07:f8:7d:5c:6b:64:
         20:fb:26:17:da:6b:f8:1a:6e:ce:75:75:54:5f:2f:54:26:7a:
         d4:3d:ff:4c:41:6e:52:e8:38:c0:b9:56:ae:60:79:26:75:28:
         cc:f0:b8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:08:03 2026 by rpki-client