Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
File:                     cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json)
Hash identifier:          MN3xOalBIuqKDDlV1u7BsB6s5YfB5XdZPj9ZDYBaIjc=
Subject key identifier:   F0:BD:CC:21:70:CA:FC:BD:D8:0E:F8:9D:14:5C:F6:40:AF:D1:85:B9
Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
Certificate issuer:       /CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Certificate serial:       019EB7A0CB8F45E174EEB29744D34B88CFF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
Manifest number:          064F
Signing time:             Thu 11 Jun 2026 17:00:28 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:28 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:28 +0000
Files and hashes:         1: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: pp9204l8y22GTEeYRmuuA5hTzzC5bNUl5aCTtbXzoRg=)
                          2: eUWfxWghJ9MEZ7tCGolfI7KpscU.roa (hash: NcF9IeGtFM+4GMOYjdME6cxPWgCCMAdO701188d5CSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:cb:8f:45:e1:74:ee:b2:97:44:d3:4b:88:cf:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef
        Validity
            Not Before: Jun 11 17:00:28 2026 GMT
            Not After : Jun 12 17:00:28 2026 GMT
        Subject: CN=f0bdcc2170cafcbdd80ef89d145cf640afd185b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:95:c2:a7:fe:c8:de:a3:0b:2d:a1:ce:ef:
                    3f:16:7b:2a:0a:70:2b:92:c1:67:39:2f:51:f3:3e:
                    ea:cb:8e:35:c2:c8:24:4d:37:f6:52:6c:e8:36:ca:
                    eb:19:4f:56:a3:86:31:d3:b4:6d:15:e1:fb:e1:df:
                    8a:22:f7:c1:b0:e0:5d:59:da:79:e1:fc:9e:75:01:
                    00:6f:96:1f:26:74:3d:bf:f9:44:86:a8:be:dd:be:
                    b7:17:83:cb:23:76:4c:46:10:b0:4f:96:26:6d:d8:
                    f8:6b:89:20:c9:8e:b2:e7:00:eb:ca:0f:5b:c8:3f:
                    72:89:bc:9f:1f:53:3d:31:a1:5b:42:4e:07:cb:4c:
                    1e:75:94:db:62:8d:9f:79:fc:a3:11:82:51:71:a0:
                    88:3e:c1:0d:22:cf:b0:97:31:dd:59:d1:5b:88:3f:
                    a3:f0:86:df:84:ab:57:13:14:cb:e0:c1:62:43:7c:
                    82:74:25:7e:4b:f3:b6:69:f8:eb:dc:4a:80:4b:f8:
                    80:90:10:e0:ea:4b:3a:28:23:dd:e2:e4:2d:96:1c:
                    25:aa:5e:a8:15:de:59:f1:98:98:27:8a:2f:2e:b9:
                    76:c9:e7:88:24:0a:43:6a:8c:e5:64:58:8f:c4:96:
                    fc:57:50:9f:32:d1:39:fb:3b:44:5d:3d:2c:d5:5c:
                    b8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BD:CC:21:70:CA:FC:BD:D8:0E:F8:9D:14:5C:F6:40:AF:D1:85:B9
            X509v3 Authority Key Identifier:
                keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5a:76:76:22:7b:e2:f0:ee:7c:3a:6b:f0:61:ff:bc:e0:22:
         5a:f2:49:7a:97:f4:97:6f:c1:fc:db:e6:dc:a8:c5:57:bc:5d:
         82:fa:e9:ff:8e:d4:68:e1:46:ea:e4:20:1c:ae:01:58:40:1e:
         0f:87:7f:01:73:de:33:c2:25:bf:97:4d:1c:42:89:1f:63:58:
         1d:25:bc:67:d9:4b:74:f2:f6:0c:86:72:d1:77:08:b4:a2:90:
         16:f1:48:01:7b:3e:aa:44:21:0d:36:18:d1:5e:09:ea:81:b1:
         9c:25:5f:aa:c3:f1:4f:2b:7c:8f:6b:bb:74:0c:f7:68:55:70:
         14:0e:63:d4:9f:26:74:0d:c2:47:c3:a7:8c:b0:b8:96:c1:c5:
         54:43:66:04:fa:31:fe:26:08:c9:0b:26:d0:f3:bc:c1:5d:28:
         0d:4e:05:74:9a:ae:ce:8a:a0:be:1d:20:1c:25:0a:13:72:64:
         d4:70:cc:00:e7:43:51:2c:4e:11:1a:b6:69:6b:fa:d3:f7:4a:
         4e:50:8d:31:fe:38:b8:f0:88:78:6b:e4:c9:40:be:bc:c0:88:
         fa:1f:8e:b5:81:59:4d:5b:75:66:c6:e2:3e:d4:72:b8:dc:5f:
         6b:61:73:c0:4f:3d:45:1f:fb:35:41:ac:2e:22:58:9b:9f:62:
         d1:27:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:18 2026 by rpki-client