Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File:                     84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier:          vxWW4kL6NOy9mqQ2DbXRFrHjEcXQoz9mizshG6ug18g=
Subject key identifier:   8A:5D:5F:76:2F:8B:08:A2:75:3C:A7:0A:2A:99:41:04:9D:4B:C4:86
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer:       /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial:       019E9A71DBDFEF8A26FFE562C97E6CF95423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number:          1958
Signing time:             Sat 06 Jun 2026 01:00:13 +0000
Manifest this update:     Sat 06 Jun 2026 01:00:13 +0000
Manifest next update:     Sun 07 Jun 2026 01:00:13 +0000
Files and hashes:         1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: vDg/elvk9mxTAF07+iPUPHqqt0rP7MC9UenJ+UEYIME=)
                          2: A3Wm_w660o-WOKx14Qzsk48w80w.roa (hash: bbx1tQ0RBrPD7hgRhmK+PhPzre/duloLQugMlYybsho=)
                          3: R3vUElIMqfT3vzJXMUzIubVzmLQ.roa (hash: 44Gpc3/VsnWSrTFrLhn2IhmQD8M15ksHH0oPjm/pzxE=)
                          4: U1oh_8Ho8r1k2j-nGFoU_RDlNoE.roa (hash: NZ8sSZ9siHhWGPZhK1C3U7mz9zhYVNPsOY9uQbWP0to=)
                          5: Wi9gkeR1iKqKbqZI-0MAYDsf4BQ.roa (hash: fLvaMM59aDROgiWjnfSZl5l0LhCb2/kteh3fgXY7l5M=)
                          6: baXaAX1rxYa_2y57T1wari4SNRQ.roa (hash: Zn5x85hGWjwOTzCti/LCEZHhyAwdPWfVjbdllVnVtH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:71:db:df:ef:8a:26:ff:e5:62:c9:7e:6c:f9:54:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
        Validity
            Not Before: Jun  6 01:00:13 2026 GMT
            Not After : Jun  7 01:00:13 2026 GMT
        Subject: CN=8a5d5f762f8b08a2753ca70a2a9941049d4bc486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:ad:fb:dc:88:20:d1:7c:f4:0f:4e:61:24:
                    aa:38:6a:a7:03:c0:4e:fc:bd:13:d1:56:dc:7f:c5:
                    31:83:a4:82:1e:2d:a6:df:09:9f:e2:c8:88:4e:a0:
                    0d:a8:f4:9e:c9:aa:77:63:0e:7f:80:e9:df:e9:68:
                    c9:b6:9c:3c:53:a8:e7:11:9d:3c:93:c2:b9:98:86:
                    02:df:1c:d6:d5:ff:ac:ce:86:e4:5d:28:59:b5:26:
                    28:83:03:bc:4b:02:59:5b:55:b0:5c:bc:00:90:87:
                    0d:fe:7c:ca:76:96:67:cf:6b:bd:34:e4:11:52:b2:
                    97:b8:f8:d0:65:2f:41:1f:83:63:1b:cd:4f:9e:1f:
                    2c:84:40:80:34:a0:6e:10:1a:d2:7e:90:fa:8d:f3:
                    60:e2:3e:20:87:34:ed:2e:ea:6c:12:db:23:36:eb:
                    26:51:f7:74:61:a3:7a:e3:8f:6f:9c:cd:7f:97:45:
                    81:e2:bc:1d:66:20:8b:52:d5:1f:69:dd:79:2f:40:
                    e5:7d:b6:ec:c3:cd:c0:a8:ee:7f:ba:f6:50:fb:7c:
                    17:7a:02:35:44:c8:0a:25:d1:e1:b0:d3:42:0b:b6:
                    35:1e:cb:b8:f2:3e:d7:45:27:78:27:c0:9d:6a:b7:
                    e6:3a:d7:ba:be:61:c8:ec:70:d8:1e:2d:29:86:eb:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5D:5F:76:2F:8B:08:A2:75:3C:A7:0A:2A:99:41:04:9D:4B:C4:86
            X509v3 Authority Key Identifier:
                keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0a:df:29:71:4e:31:e1:1e:fe:15:44:b8:27:bc:05:5a:44:
         fd:65:1f:cf:78:7e:45:1a:89:61:38:88:84:9c:0f:d7:98:26:
         46:34:d7:b1:41:b9:c7:ab:56:69:17:2b:78:21:41:d6:be:58:
         0e:1d:8b:e0:26:b5:c4:5c:f9:a4:18:51:0e:ee:ba:8c:de:6b:
         28:0a:d2:eb:e1:b3:ff:9d:20:e4:cf:68:7b:29:8c:d0:f2:16:
         7e:73:7e:e8:7a:f6:76:97:65:e7:fd:92:da:b3:e9:d0:86:09:
         b2:e7:e6:b1:c0:0e:9a:83:10:b6:6d:72:71:4f:18:35:bc:9f:
         b6:8a:14:0d:ad:ae:d7:3e:9b:22:60:84:b4:fa:fb:e7:d4:72:
         f0:36:ab:a4:30:8e:59:a5:a8:bd:30:08:22:f7:f0:b5:8e:a6:
         72:a2:ec:09:39:1a:11:55:a8:c4:5c:e5:b5:0d:fc:0c:68:fa:
         b4:99:d9:a6:a6:40:de:a7:ef:e5:40:74:f6:a5:9c:f4:06:d2:
         32:b7:5b:21:f7:93:4c:bb:95:7f:37:8e:dd:94:29:62:e2:4c:
         2b:ce:d4:a1:56:61:ec:0e:80:99:84:db:97:9a:f6:6e:b1:70:
         df:6c:32:5f:32:bc:eb:4e:5b:d6:33:1e:98:91:33:4d:f0:9b:
         f5:28:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:37:51 2026 by rpki-client