Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File:                     xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier:          D1a/uxUKNTl/83U+5JS9UNWXNAw7haHnja/l8kH3wJI=
Subject key identifier:   6F:48:92:57:E7:13:3F:97:B8:C6:14:BE:F4:3A:37:82:2C:F5:17:56
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer:       /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial:       019EB8EAB858710CD6FBF434976CE34229A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number:          18E8
Signing time:             Thu 11 Jun 2026 23:00:50 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:50 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:50 +0000
Files and hashes:         1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
                          2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
                          3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
                          4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
                          5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: H0qNbxNgX6POGOK2obj30nCTGx7ycAHJoOXdOz0pwpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 23:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:b8:58:71:0c:d6:fb:f4:34:97:6c:e3:42:29:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
        Validity
            Not Before: Jun 11 23:00:50 2026 GMT
            Not After : Jun 12 23:00:50 2026 GMT
        Subject: CN=6f489257e7133f97b8c614bef43a37822cf51756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:10:6e:df:c8:f2:ad:dc:b5:f3:ab:ce:fe:9c:
                    96:42:31:bc:ae:ab:11:20:c7:b2:ce:09:7a:f2:05:
                    e2:63:ea:32:90:5a:a5:8a:68:88:a5:87:fa:d8:14:
                    30:1d:61:dc:b1:4f:eb:a6:3c:ef:04:25:c8:42:4d:
                    4e:46:fe:7a:80:a2:79:7b:92:dd:6a:9c:aa:64:3a:
                    2c:36:4d:72:40:37:02:37:34:25:51:47:e2:1f:48:
                    f2:ee:99:3d:4d:4d:42:0f:ff:54:46:e5:bb:76:81:
                    3d:e4:7e:8f:73:f7:2a:c8:08:9c:b5:e9:ff:81:a9:
                    09:31:66:55:77:f6:8b:25:d0:db:8c:61:ba:91:b3:
                    83:ef:3a:22:87:e7:f9:f0:1b:09:56:f3:2b:f8:1c:
                    01:d2:fa:c7:9a:4b:84:19:a8:94:52:58:a4:02:10:
                    f0:e2:49:a9:6c:d2:20:4a:4a:e4:85:4e:40:b9:aa:
                    e6:5f:53:b1:8d:49:11:e4:64:db:01:14:5f:13:8d:
                    b4:a1:c8:2a:e4:da:85:c1:4f:7d:61:c4:25:55:7c:
                    66:83:e2:da:24:a4:9a:8a:8e:d5:a9:bc:7c:88:2a:
                    7b:51:a0:87:9a:42:84:be:8a:fd:49:c3:e8:f8:1d:
                    f6:a7:41:c1:04:ea:79:cb:fc:29:63:81:da:1b:c2:
                    4e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:48:92:57:E7:13:3F:97:B8:C6:14:BE:F4:3A:37:82:2C:F5:17:56
            X509v3 Authority Key Identifier:
                keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:36:3f:0b:63:14:5f:cc:49:1d:94:68:c4:6e:76:ad:a9:1f:
         b3:cd:a3:05:cd:2a:7f:aa:14:3f:e5:67:86:ee:a6:5e:83:e6:
         a3:94:42:49:92:6e:98:7b:46:13:52:3a:50:b1:64:32:a3:e4:
         f1:73:b5:98:2d:d0:5c:a3:46:b5:be:c1:ca:4e:12:3a:2c:da:
         b5:bf:37:58:9b:71:68:36:7a:93:89:ed:4c:9e:69:51:50:f5:
         46:4a:f3:b2:f1:23:a9:c2:25:c6:1c:84:28:ef:4f:d0:d9:81:
         b2:20:ee:1c:64:55:17:9b:e8:d8:67:8b:8b:92:a0:46:d7:2e:
         f2:fc:31:d0:f3:ad:e5:bc:2e:ea:27:24:97:e5:cd:e7:c5:2b:
         72:d3:e8:0d:53:da:9c:2f:9c:12:8e:43:9f:4c:5c:53:63:91:
         4b:1e:cf:13:04:37:e4:74:c4:5f:04:b9:fc:7d:6d:f1:03:4d:
         03:c6:84:0b:60:06:90:31:a2:ef:24:17:1c:ad:6a:5a:cf:e3:
         d2:90:24:05:04:98:c9:c1:cf:47:85:6e:06:79:92:25:5d:48:
         96:95:b0:1e:72:64:1f:5b:aa:f6:db:ca:76:e1:21:84:08:0b:
         7c:be:62:a5:4a:d2:8c:37:82:20:ea:6e:5d:26:7d:7c:87:71:
         75:eb:49:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:53:00 2026 by rpki-client