Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
File:                     _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json)
Hash identifier:          RuRc48Z4MyMd/s6tFLcAaU2ePwIPr++1+k/gIdyjWiQ=
Subject key identifier:   99:B9:30:E3:6C:B7:A3:BD:C0:DE:E6:26:FC:AF:E0:0F:45:F1:BE:1A
Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Certificate issuer:       /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Certificate serial:       019EB87D236EE9FFA9F566B1F84F36BCF22E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
Manifest number:          1467
Signing time:             Thu 11 Jun 2026 21:01:09 +0000
Manifest this update:     Thu 11 Jun 2026 21:01:09 +0000
Manifest next update:     Fri 12 Jun 2026 21:01:09 +0000
Files and hashes:         1: Lh9ws7Zx-Z49Y3KqDWbQ2Lm-Lb8.roa (hash: PF/ed+k7gtadd5HsxTcEuV0PkSMYqzIOsEkgaO30wiM=)
                          2: M3kEZhwNAZH2MoRits4PT4v1XYY.roa (hash: 9BRevnCxVw2l/jCPOd7XDBAI+hID2up62MsIMKdFJLE=)
                          3: Ugs1R72eLpNOvqQLq80_hJnxxCs.roa (hash: HAAX/DAdp/HiBc6dDbGVPO1NxsuLn8+Z1EDMvgnvFTM=)
                          4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: 1O/7svzPidCcWd0NmAascw5lT1YbKcMw1f3zwZtbmPs=)
                          5: d1DdXgc0G77dhrd6ZdfdSd_hf70.roa (hash: VPxYVo5tR4ALJMz9uvC5RMlfofG9QR9Ag17Z6g94IPk=)
                          6: ldHMEOJiE59-H0cOPRmvSFACx0s.roa (hash: mOMIPtr1abOjWcrfM5eKbECfrNaucrP77WVejoM6ds4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7d:23:6e:e9:ff:a9:f5:66:b1:f8:4f:36:bc:f2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
        Validity
            Not Before: Jun 11 21:01:09 2026 GMT
            Not After : Jun 12 21:01:09 2026 GMT
        Subject: CN=99b930e36cb7a3bdc0dee626fcafe00f45f1be1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6a:02:08:04:93:8f:04:27:80:0b:1f:9f:aa:
                    3b:3f:de:d5:ec:0e:e6:c8:c1:cd:b6:40:97:9b:ec:
                    c4:9f:dc:10:d4:77:3a:28:1e:9e:4b:0c:91:b8:05:
                    19:d2:c8:b1:d8:90:85:23:1d:d7:a1:c7:00:60:49:
                    41:ac:26:00:38:26:60:02:47:8b:f3:ce:61:94:1f:
                    b3:df:da:08:29:f0:9e:2b:4b:86:50:d7:da:8b:61:
                    45:5d:5d:17:7e:2c:ae:8f:5b:0e:fc:d2:54:7c:79:
                    48:8c:81:48:b2:77:9c:29:94:2b:36:8b:0a:2a:eb:
                    6a:ec:5c:2d:ee:a9:01:0d:63:f6:e1:e9:9e:2d:fb:
                    c2:27:0d:e4:b5:0c:4c:99:c3:7d:32:81:41:1a:95:
                    69:f5:13:79:b5:3e:22:e7:11:c0:f9:81:0d:67:fa:
                    3c:c4:df:87:b8:e5:9d:60:da:83:1f:84:5b:c3:b7:
                    ab:8e:52:5e:cd:f3:fd:e0:15:1e:c9:76:f2:38:c9:
                    82:10:a3:57:c4:53:38:4b:0d:a8:06:39:cf:28:24:
                    9a:88:19:c6:81:a8:6d:ec:3b:85:c8:7e:bb:4c:f3:
                    54:97:2e:d7:c7:d2:f5:37:d2:a6:66:b8:29:6c:f1:
                    96:2e:5d:58:4b:c1:e4:84:36:76:d0:1d:9b:b9:8c:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B9:30:E3:6C:B7:A3:BD:C0:DE:E6:26:FC:AF:E0:0F:45:F1:BE:1A
            X509v3 Authority Key Identifier:
                keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8c:31:76:2d:02:67:1c:96:af:5e:31:ba:d2:03:0e:12:74:
         3b:6b:19:ed:b9:b4:a7:87:b6:cd:a1:48:e9:96:1e:11:2f:3e:
         d0:3d:d0:58:1b:08:bb:af:63:b9:52:4d:0d:c3:64:4e:fc:c8:
         ed:7c:f4:79:f3:6d:18:74:6d:33:50:76:94:8e:4c:4d:af:74:
         35:4a:62:c6:0d:73:3b:9e:99:69:8a:64:2a:ad:c2:53:c1:3b:
         c8:f0:c2:32:67:4a:47:bc:b1:30:61:34:bc:bd:fb:47:80:7f:
         53:f9:c7:5d:b0:0f:d1:00:96:60:8d:84:94:1f:60:41:33:1e:
         f3:d7:12:00:38:35:66:9d:f2:86:c2:8e:a2:40:e8:ba:02:97:
         b5:cb:14:aa:07:bb:ba:fe:d3:aa:3b:91:b3:5c:6a:3c:2a:0a:
         4f:e1:18:35:ee:4b:ec:03:87:a3:a2:75:8f:e6:77:3c:fd:28:
         d1:04:7f:5f:24:3e:e0:28:20:d3:4c:8b:61:23:cb:96:f9:80:
         43:fa:11:ae:11:c0:23:10:ee:62:6e:eb:c4:7a:a0:ff:0d:d6:
         db:73:bf:fa:75:d6:1d:da:96:7d:59:b2:3c:60:32:36:62:1e:
         ad:40:2c:ab:f0:de:55:64:c4:26:5d:69:f5:82:05:4f:89:40:
         ad:e8:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:20:21 2026 by rpki-client