Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
File:                     PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json)
Hash identifier:          6W1sqx/Mi4cm4C8SZFLBfIBneGIk1rCsEH1IwIGD4zs=
Subject key identifier:   6E:A9:92:5E:92:4A:5B:17:DF:E8:6C:DE:D3:AA:A4:43:EF:5B:D2:1D
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Certificate issuer:       /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial:       019F189EBC0713BC916F2D89B92151506AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
Manifest number:          0E8D
Signing time:             Tue 30 Jun 2026 13:01:23 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:23 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:23 +0000
Files and hashes:         1: 49PmNqo2ozi6foyeWngY9-dP7_8.roa (hash: FTUCcOfecgfUHEaYOHAMv32E85Y9HshWNlhJWT3H1nQ=)
                          2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: lVAz7NZmtlzAHNx59tVVCq+x1r8UM7Olms47/6RZxaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:bc:07:13:bc:91:6f:2d:89:b9:21:51:50:6a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
        Validity
            Not Before: Jun 30 13:01:23 2026 GMT
            Not After : Jul  1 13:01:23 2026 GMT
        Subject: CN=6ea9925e924a5b17dfe86cded3aaa443ef5bd21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:53:ab:26:75:0d:4f:e5:fa:09:d5:ea:24:07:
                    50:79:80:35:1f:c2:0d:3d:1e:fc:72:1a:1a:0d:0e:
                    c9:d1:66:96:0a:18:ba:76:da:e8:a7:59:b3:6b:1f:
                    66:b0:85:8b:a5:65:f2:11:31:65:43:e8:78:58:0b:
                    e3:ea:e8:e8:d5:37:bb:fa:f3:59:69:33:86:3d:2b:
                    41:a1:e1:97:c3:c7:0d:ee:8e:b4:d7:85:be:e1:78:
                    78:32:d0:00:a9:69:e7:73:bc:45:53:f9:2c:2f:99:
                    02:66:60:7f:ee:2d:7a:6a:50:93:78:42:05:1e:9f:
                    df:d5:60:6b:f8:52:18:8f:c5:59:35:37:2a:85:4b:
                    06:42:21:67:65:44:db:bd:1c:ec:03:55:84:11:a3:
                    00:62:33:97:33:36:31:38:9f:0a:6b:ca:a8:c4:22:
                    ab:06:ae:85:24:3b:1c:f0:d4:b4:1d:34:70:11:0f:
                    cd:cd:2c:35:87:02:7b:df:2a:31:99:9c:d2:92:08:
                    e1:f6:13:63:c4:f1:df:57:b5:b1:bb:f5:0c:e9:b6:
                    5b:2d:ea:f7:8a:e7:bf:ef:4b:ef:c4:e9:8e:35:43:
                    7e:6b:5e:89:45:01:a9:11:c7:b5:df:60:61:60:e1:
                    16:b5:81:43:fa:f7:ab:ca:6f:f0:d3:0e:6c:8e:a8:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A9:92:5E:92:4A:5B:17:DF:E8:6C:DE:D3:AA:A4:43:EF:5B:D2:1D
            X509v3 Authority Key Identifier:
                keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6c:98:09:89:fe:d5:d8:31:73:fd:41:54:4a:63:fb:16:9b:
         5d:db:17:b1:b2:78:47:1d:90:34:e6:55:3c:97:aa:23:4c:a5:
         a2:7c:36:52:17:d7:e8:ea:d3:d0:82:3a:fb:be:eb:02:b2:4c:
         7e:9b:e9:82:fc:7c:02:1b:4c:cd:48:2a:e6:02:aa:cf:d2:09:
         bd:7c:0b:16:cb:ad:ce:5b:f9:4d:95:df:b0:b9:eb:47:80:69:
         0b:3f:07:e9:31:d1:a5:67:c6:68:0e:15:0d:18:50:63:96:6d:
         aa:4e:e9:88:7e:b9:d2:96:d5:c2:41:cc:5e:d6:cd:70:39:10:
         1a:8c:9f:23:f7:5a:27:96:13:6c:1d:79:04:45:72:77:26:63:
         67:9e:34:56:4f:ec:9c:87:94:33:e0:f9:99:b4:ca:c3:50:c5:
         8a:9f:87:4e:85:b2:6b:53:b8:36:8f:9d:66:d9:92:ae:a6:52:
         2c:88:65:50:23:08:3a:4f:26:eb:b2:98:0d:6b:36:a2:70:28:
         fd:30:d6:dd:d8:05:bc:8c:68:e8:6d:3a:e6:d9:f4:21:b5:da:
         d2:11:0e:a2:86:a5:ad:b2:b0:dd:2b:5c:66:fb:fd:84:b8:d9:
         e1:42:b2:27:89:dc:91:df:a2:3b:8a:58:a8:77:89:78:5f:98:
         8e:73:94:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:08 2026 by rpki-client