Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          89+FvezjhnZ73Ido7zVU1jE38qmsQaueP1KIsDLgnj0=
Subject key identifier:   40:DE:A4:E2:41:58:3B:06:5C:0D:48:52:87:10:85:42:87:E8:38:3A
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       019F129C22CB7500D826DB873783A0CA1CCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          1987
Signing time:             Mon 29 Jun 2026 09:00:50 +0000
Manifest this update:     Mon 29 Jun 2026 09:00:50 +0000
Manifest next update:     Tue 30 Jun 2026 09:00:50 +0000
Files and hashes:         1: ABBwkEzotHssFvLAUqOqZl36BVo.roa (hash: dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=)
                          2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: IcIvzjCErdAAy/UFc0XGe3QtY6Wb06I7WugNOAYGN2E=)
                          3: JxdVQlPabf5FpimKARBZDSKiNxU.roa (hash: iaX91Mhj2IG2/tYDP0MoHlwqtJyUmq2/acODPla0N8E=)
                          4: dtKfjS2Cx153-9Bxv94dxO25icU.roa (hash: e1P0tOI8yTdnj97qKiJfMB6m74LROCBqW62mLe1obDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:22:cb:75:00:d8:26:db:87:37:83:a0:ca:1c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Jun 29 09:00:50 2026 GMT
            Not After : Jun 30 09:00:50 2026 GMT
        Subject: CN=40dea4e241583b065c0d48528710854287e8383a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:f9:ef:38:fc:7f:af:3b:41:11:a4:02:db:
                    3a:e5:8a:c2:af:ce:11:df:a1:d1:8f:ed:b9:45:56:
                    8c:cf:11:03:f2:6e:20:6a:85:85:db:be:af:cd:c4:
                    20:09:d5:31:5c:73:1b:a2:a3:13:91:d7:b1:44:ad:
                    01:a1:22:87:cf:c0:5e:b5:e0:e3:6e:55:f9:de:0c:
                    83:ba:1a:c1:fb:99:52:e9:15:22:6d:26:9c:31:8a:
                    36:df:0e:fe:62:d4:8e:c4:91:cf:ff:1c:73:75:52:
                    d8:ec:06:e2:95:5e:c9:93:cc:79:e6:30:96:a7:a3:
                    4c:8f:8e:36:09:d4:0d:1d:72:28:e8:d8:df:fa:6f:
                    54:18:f4:18:53:54:e6:41:db:92:58:2b:44:c3:7c:
                    02:b7:e9:3d:2e:fb:69:62:27:52:2c:0c:b1:7f:5c:
                    54:63:46:8c:53:d2:8e:a7:47:9e:3c:79:e5:6b:12:
                    2b:f4:c0:4c:ac:41:b6:0b:55:3b:b8:83:7f:a1:b0:
                    27:09:26:be:a0:47:5e:cd:34:96:a7:89:82:34:43:
                    2a:10:1f:b4:ce:04:d2:98:09:2e:cf:49:2e:6c:f4:
                    bc:f9:b8:90:b2:ba:8c:5f:bd:fe:38:3e:fa:a5:ce:
                    3b:7c:35:82:f5:98:97:da:c6:f8:17:45:a6:52:ba:
                    c4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DE:A4:E2:41:58:3B:06:5C:0D:48:52:87:10:85:42:87:E8:38:3A
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f2:f9:82:50:04:89:99:c5:69:74:5f:32:0e:2e:ea:9d:e7:
         3d:28:b4:f6:a4:e7:78:1e:dd:54:c1:b2:1a:ea:84:ce:73:e2:
         8b:94:ff:03:0e:0c:15:97:2f:30:84:0b:a2:63:77:12:53:0a:
         2e:9f:98:97:b7:cb:05:ad:00:53:13:78:67:67:a3:bc:14:65:
         03:03:e3:42:a5:e8:b8:f0:a9:59:5e:7e:9e:97:06:22:e6:50:
         b1:8c:de:02:52:f9:b7:62:ae:67:48:c6:6d:91:85:89:43:65:
         52:d0:59:81:0a:91:51:67:cb:a9:e7:57:3d:77:d0:b2:b4:c6:
         42:8d:1e:d6:0e:3a:1d:51:9c:10:75:1d:38:0b:3f:19:f0:5b:
         a8:fa:82:33:49:e2:28:98:8c:4f:54:db:3e:6e:44:61:2f:42:
         b1:24:4a:39:05:2d:ff:d2:3b:22:de:05:f9:98:15:3b:48:6b:
         56:ea:4b:7f:0a:03:9e:a0:34:a5:8c:6e:8e:13:d9:af:3c:bb:
         0d:27:4d:12:3e:ee:19:6c:29:2c:7f:6d:3b:9a:db:7b:c0:cc:
         e9:8a:ed:68:36:57:e5:43:5b:18:7d:b6:15:04:75:53:85:7b:
         cc:7a:aa:5c:7a:52:d7:a8:68:93:bd:a9:dd:ae:24:ef:58:6a:
         40:43:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:35:18 2026 by rpki-client