Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File:                     U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier:          wvwWpAon7G6ou5yqMp4HQSVgzmpq5docXKcym2jdAK0=
Subject key identifier:   E1:88:0C:25:9B:78:29:6A:FE:71:F7:71:E4:93:8E:37:A2:98:6F:07
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer:       /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial:       019E8EDBEEF7BEAB9A142D2FE9600B43F624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number:          0B86
Signing time:             Wed 03 Jun 2026 19:00:38 +0000
Manifest this update:     Wed 03 Jun 2026 19:00:38 +0000
Manifest next update:     Thu 04 Jun 2026 19:00:38 +0000
Files and hashes:         1: 0P9xPfTELLOLsIkje98I5DI3JMM.roa (hash: /5GbceYSZZKUMKDpKsep1xA2kefROVR28hBE+53Ms/s=)
                          2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: yhJp3bL3NldjBMhbHaqR9qvRQE4DwGlQEjAjGhyh+pA=)
                          3: pfH2GwBcvDoKyHCIT0cM2iz_ms0.roa (hash: Mm7/tRb+RTedsr3+m2DHJUxAaM0FcO0MUgT9eZ4XDVI=)
                          4: zMo_08BFuPtuYYrEDlRKq-rmGBo.roa (hash: vZCIJPH6khDNzPRPnP73DDsgX8UFqI/TfAzpfgqnDZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8e:db:ee:f7:be:ab:9a:14:2d:2f:e9:60:0b:43:f6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
        Validity
            Not Before: Jun  3 19:00:38 2026 GMT
            Not After : Jun  4 19:00:38 2026 GMT
        Subject: CN=e1880c259b78296afe71f771e4938e37a2986f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:9c:c5:71:2e:b5:8e:af:ba:44:86:7a:24:
                    f1:a3:f1:b8:d7:62:23:a3:20:a4:80:68:ce:eb:94:
                    36:a7:dd:52:17:c6:1e:04:0f:eb:41:f1:29:f9:5c:
                    5d:36:e1:8f:62:3c:c6:e1:d3:ac:24:16:9d:eb:e5:
                    b3:40:54:90:53:c4:10:d7:32:58:54:c1:e1:c8:44:
                    73:ad:81:66:e9:f1:bf:10:24:0a:3c:bc:77:cf:7c:
                    eb:36:7c:99:53:89:0c:72:42:c6:7e:e3:fa:5e:06:
                    7d:d0:53:6d:ed:be:9e:98:0e:15:92:49:e5:d8:13:
                    fd:1f:22:a8:06:41:04:b1:8e:ab:e3:80:f7:3a:5b:
                    a9:21:db:ef:af:68:fb:2f:a9:eb:16:f0:24:19:cd:
                    9a:3f:1c:40:2b:b9:96:17:cc:3f:3e:31:7b:db:30:
                    a5:c6:89:f2:35:7b:d0:34:5a:24:c5:ac:09:12:1c:
                    06:f5:79:61:ab:79:f4:9e:8f:95:d4:6a:0a:7f:09:
                    13:1f:ce:f2:bb:ff:f3:61:41:77:2c:2a:f3:7d:4f:
                    0e:9b:01:05:71:8d:9a:2c:1a:06:f2:8f:eb:93:ee:
                    91:34:55:96:2f:3e:09:a4:85:26:e1:46:c1:55:1d:
                    5c:3a:77:d5:5e:fe:76:57:4e:3c:be:6c:fb:4d:5f:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:88:0C:25:9B:78:29:6A:FE:71:F7:71:E4:93:8E:37:A2:98:6F:07
            X509v3 Authority Key Identifier:
                keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b8:01:da:57:70:9f:ef:5d:b7:76:50:91:39:fc:18:a5:27:
         7a:e1:b8:05:fa:65:f6:52:8c:c6:83:d1:d1:6f:6b:f6:82:d7:
         be:16:80:4b:82:5c:f4:5b:7e:f8:e9:79:c7:b8:e2:dd:ba:67:
         fe:9d:b8:dd:1d:9f:9a:cf:d9:db:69:ce:4e:8f:5d:47:54:69:
         ef:2f:fe:42:b2:ff:02:e9:69:08:c5:7b:94:df:81:00:59:12:
         84:61:08:1d:9d:9a:34:1f:12:1f:35:a2:f1:f8:5e:10:ac:c0:
         52:1f:2a:9a:3d:12:0e:3c:45:12:5d:06:0f:0a:d8:da:8f:df:
         75:c2:24:d0:16:17:1b:7b:15:5d:61:c4:44:75:fc:91:7b:f7:
         ce:87:e1:29:3b:8a:b7:5b:ed:ed:a3:0a:4e:bb:3a:68:6c:e9:
         67:cb:3f:8c:0a:e1:12:7a:79:4c:e6:86:9e:19:37:ae:cf:34:
         8e:9f:40:73:63:17:9d:71:6e:51:f8:0a:6c:9f:e8:bf:da:a5:
         e2:76:20:d1:61:e6:e8:8c:28:1b:91:d2:66:58:e1:3c:e7:81:
         06:c9:6d:06:b8:72:d6:78:a9:fb:b4:d6:ca:a5:c7:f8:a6:83:
         5b:7b:e2:7a:f5:4a:9d:6e:1f:af:ae:7b:7e:c4:c1:26:54:c1:
         9a:e1:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:19:34 2026 by rpki-client