Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
File:                     mpTE6sr0BAocMO0e3qjjAAcxtqo.mft (raw, json)
Hash identifier:          X5bLkzxMwLi9zRgXMW2tvjH7w9h4djc4ruVNttXR+tE=
Subject key identifier:   C0:8F:C3:D3:4A:6B:E2:1E:88:98:4F:45:E0:33:B3:16:40:37:1A:9E
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Certificate issuer:       /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial:       019E9B8502BF78B9CC745863019905BFDD11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
Manifest number:          07FC
Signing time:             Sat 06 Jun 2026 06:00:45 +0000
Manifest this update:     Sat 06 Jun 2026 06:00:45 +0000
Manifest next update:     Sun 07 Jun 2026 06:00:45 +0000
Files and hashes:         1: kUsI4SRxxZP0gd_4YTt-HTTnRSc.roa (hash: fG/gmFQxL44rDJ/8bE+/AVQ5a2QcbRZO0R8IThxbrH8=)
                          2: mpTE6sr0BAocMO0e3qjjAAcxtqo.crl (hash: Yl6NI7h2XnPnHehly2nTxbHK2Zl3cVb38dpoK5kin8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:85:02:bf:78:b9:cc:74:58:63:01:99:05:bf:dd:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
        Validity
            Not Before: Jun  6 06:00:45 2026 GMT
            Not After : Jun  7 06:00:45 2026 GMT
        Subject: CN=c08fc3d34a6be21e88984f45e033b31640371a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:c6:cb:7f:c9:99:47:e9:80:1b:0c:a2:2a:
                    d0:cf:b7:2f:cb:3c:26:b3:98:25:ae:f8:5d:81:67:
                    08:90:0a:3d:b2:92:fb:27:08:6c:57:6d:6a:a7:72:
                    5f:13:e0:01:b0:8f:36:9a:40:1b:a4:07:93:d8:55:
                    46:74:f6:6c:af:ef:50:17:92:dc:eb:20:bf:15:08:
                    90:af:78:1d:f9:85:b7:77:ac:8e:38:5b:b6:23:5e:
                    97:6f:75:74:16:6f:5d:14:64:0e:04:61:2b:55:3b:
                    04:4d:35:33:0b:c8:80:ac:19:91:5e:35:31:15:93:
                    c8:9f:1b:d7:17:ee:d3:1f:72:6b:32:17:df:27:64:
                    0c:a4:4b:c3:de:73:a4:2b:db:4d:f1:4d:6c:6f:fe:
                    34:5a:cd:e7:b5:d4:09:c3:45:e2:4f:16:8f:e5:7c:
                    37:f9:20:75:75:f2:54:c2:7f:d6:f8:5d:b7:b1:70:
                    56:7f:14:03:c8:4f:10:b0:1f:94:97:9f:14:74:28:
                    b1:f6:eb:b5:51:f2:4d:5f:01:2e:84:e7:e7:d9:d7:
                    ce:b6:3f:42:f1:01:4d:34:01:c7:ed:68:e0:0f:61:
                    76:7b:0d:9a:f8:30:10:b0:80:db:6d:89:43:f4:8a:
                    d9:3a:64:f7:04:65:ee:3b:3e:60:72:45:c2:03:db:
                    08:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8F:C3:D3:4A:6B:E2:1E:88:98:4F:45:E0:33:B3:16:40:37:1A:9E
            X509v3 Authority Key Identifier:
                keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:6c:40:13:23:38:6a:59:b1:df:f9:0e:df:5b:cf:eb:e8:
         43:dd:1f:9c:62:be:59:9f:e6:50:ff:a5:09:ca:6a:cf:84:49:
         29:b4:f9:41:84:81:c2:49:96:3c:17:7e:9c:b9:ba:08:90:81:
         f4:76:13:1b:b6:a9:2d:91:fc:a5:1d:e4:f1:8a:bc:65:36:58:
         91:e5:27:d9:24:18:1d:a4:21:09:fa:21:b2:e0:5e:39:75:41:
         43:08:a6:fd:4e:25:93:25:ff:4b:5c:0c:b6:ab:9e:b7:3a:48:
         56:e3:10:af:09:51:12:b0:7e:4e:f1:3d:f6:6d:ba:e4:b4:ee:
         f4:af:64:57:45:4b:f5:13:54:a7:1d:5d:e3:49:70:73:3c:f6:
         55:71:7b:0b:00:9d:6b:67:95:7f:f6:7a:87:87:22:be:14:6b:
         24:d6:1f:f8:73:28:01:c6:ff:7a:4c:3d:b6:6d:1f:16:52:6b:
         72:de:50:e4:28:23:7a:02:e0:93:61:45:cb:7f:15:db:15:5d:
         06:12:fe:2e:85:b3:32:9d:07:cd:64:fa:06:a7:44:c2:58:31:
         55:73:5e:e6:b2:1b:cd:11:46:ac:a8:78:ba:59:fd:5f:37:ce:
         c2:39:d1:96:05:0c:f5:56:f3:22:fd:0d:2f:35:6d:d9:bd:ca:
         ea:c7:e7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:37 2026 by rpki-client