Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File:                     nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier:          ZEUasH2AGPll5RLn3zQyfEO/QqiiCIfKiKxPCmvfwrE=
Subject key identifier:   D2:48:09:0E:B0:91:72:0E:78:57:BC:CD:14:93:E6:DE:46:39:7D:FE
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer:       /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial:       019EB7337AD32A20939FBB1D68E882303B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number:          064E
Signing time:             Thu 11 Jun 2026 15:01:04 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:04 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:04 +0000
Files and hashes:         1: EidzJCWNUyQpfWwfT7scfsDvqbQ.roa (hash: DXl1W2a36eg89T47v1wHSMBi3fnkBbmg5I1x8xEjCCU=)
                          2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: 4UurbCLTzI8fwF+509V4ZOopxSKIh+jbGpDqyWW8r2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:7a:d3:2a:20:93:9f:bb:1d:68:e8:82:30:3b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
        Validity
            Not Before: Jun 11 15:01:04 2026 GMT
            Not After : Jun 12 15:01:04 2026 GMT
        Subject: CN=d248090eb091720e7857bccd1493e6de46397dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:20:c1:ca:5f:fe:e2:bf:da:60:13:ea:ab:d7:
                    bc:9d:ac:67:5e:98:26:4f:e7:0e:6d:f9:31:cd:66:
                    40:50:de:a2:db:22:6a:64:ff:dc:18:b0:c5:a5:6c:
                    51:0d:34:92:b0:07:cc:8b:5d:e1:a4:65:bf:fa:1a:
                    58:1a:46:20:b8:87:1e:94:1c:64:18:9a:f4:d1:69:
                    df:53:57:d1:2b:5c:16:46:3d:51:f0:ce:0d:3e:bb:
                    4b:5b:81:8a:ff:15:ab:2a:df:7e:dc:79:52:0e:2a:
                    da:b1:78:38:fa:0b:9f:e3:87:28:4f:1d:3c:3a:51:
                    04:bc:63:93:b0:e0:01:85:d1:13:9c:a5:4a:72:8d:
                    3c:a4:45:3a:94:77:52:f3:46:35:fb:ef:08:a1:3d:
                    7e:28:a2:e6:8a:da:90:c1:64:e5:c9:4d:98:f6:43:
                    d5:33:94:1d:e5:99:58:83:56:9e:25:88:27:91:86:
                    6e:e6:2d:0c:d3:69:83:46:5b:d8:9c:31:7e:3c:07:
                    b7:6f:ff:72:3e:4a:50:8f:a3:12:31:5c:93:a6:b4:
                    16:5f:ef:d4:62:6b:d1:dd:a6:9e:ad:60:e3:ba:a9:
                    eb:42:aa:df:98:ea:4c:f8:bb:92:91:89:46:ea:1b:
                    3c:af:88:19:67:de:ac:5e:7c:e5:6e:4f:6d:46:66:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:48:09:0E:B0:91:72:0E:78:57:BC:CD:14:93:E6:DE:46:39:7D:FE
            X509v3 Authority Key Identifier:
                keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:73:72:60:dd:b2:95:f4:da:84:bf:a0:59:81:15:01:7e:ec:
         2b:bd:9e:7e:b9:ed:72:9d:d1:55:d2:15:41:cf:ee:06:11:6f:
         62:d1:98:23:10:a5:be:87:29:30:fe:b2:95:c4:38:bd:2d:04:
         8c:ad:52:b4:4d:83:fe:12:55:3a:d6:96:91:93:49:5f:c5:bf:
         52:dc:eb:71:de:58:6c:a5:78:dd:c4:76:59:69:6b:f8:20:c4:
         5b:af:c2:69:62:ad:c3:a0:ef:0b:2a:94:ea:b9:6b:30:01:cb:
         a0:4f:82:39:2a:dd:1d:81:6f:ac:a7:94:26:2d:d5:e7:1a:81:
         dc:05:f4:7c:49:16:1e:8f:39:c5:39:6b:40:6e:55:37:35:ba:
         f3:5a:f8:75:76:36:5f:53:d7:53:48:bb:57:cd:08:1e:a9:ac:
         54:20:80:06:83:fe:4d:5b:2e:4b:be:34:d6:5a:89:10:11:84:
         67:1a:48:d6:14:f0:19:41:c5:17:d4:c9:93:61:97:1e:9f:4e:
         18:0e:d7:a7:a9:9c:e8:6e:2c:5a:57:62:e7:b6:6b:a5:9d:c3:
         c1:03:9e:38:15:59:dd:4f:b3:07:18:9e:b5:bc:8b:07:b7:3f:
         40:2e:29:01:33:c0:f5:bb:49:84:e4:69:07:d6:3c:f0:30:7f:
         f9:7a:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:57:34 2026 by rpki-client