Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File:                     CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier:          fB1g164p+x7WbxnquXfcFAhy8x6TbEsCkoPBauOQxgQ=
Subject key identifier:   17:8B:91:9D:1E:F0:0D:E6:F1:BD:AD:AF:43:FE:B8:31:F2:DE:2A:63
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer:       /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial:       019E99CD0AF2D6BEBA53D65C6CAD6D9B7AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number:          142B
Signing time:             Fri 05 Jun 2026 22:00:12 +0000
Manifest this update:     Fri 05 Jun 2026 22:00:12 +0000
Manifest next update:     Sat 06 Jun 2026 22:00:12 +0000
Files and hashes:         1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: ttWZMW2yiZQ9RW3CkDUCws80RP4JIxxXNhON97lQhwc=)
                          2: Kr82PzCvD4Fk7jNwoZ0-iCZtxTE.roa (hash: XM1J6jO/D+cqiYMXDlDXyv/SlFsPZ20nk+XVsCUihVk=)
                          3: YMptQVK4HH5vDul8RiYPM5BA3i4.roa (hash: 6IlPlDIrNnILGNV4XcoHgemdeW+kMLsTXUGyZB/VOA8=)
                          4: cENwAzhw60-ikgeBP0Wk-X-TPRQ.roa (hash: WKFy5CgMQiAy0y2WtEt+U7yH6EI/ABaKojXrx+8izJQ=)
                          5: n35REyNvGDkbhlXQDkgILr0DQJo.roa (hash: XOxfruBgBSVJzwCvp7t1Dh63tFF/2A3jPjy2stEx9vs=)
                          6: sLW9QUPl2doaDpkVMgscvJSFTPA.roa (hash: Gq/TJtCE6wPwEUtIEF1+84a/2wA7uiRfAtKneXSPPHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 22:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:99:cd:0a:f2:d6:be:ba:53:d6:5c:6c:ad:6d:9b:7a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
        Validity
            Not Before: Jun  5 22:00:12 2026 GMT
            Not After : Jun  6 22:00:12 2026 GMT
        Subject: CN=178b919d1ef00de6f1bdadaf43feb831f2de2a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:de:8f:0d:9f:7b:c1:90:44:e7:f8:8e:7d:5d:
                    c7:43:f3:1d:be:da:70:a2:9c:47:f2:ce:96:35:a0:
                    12:e4:e7:f6:9c:01:30:c4:7b:f1:8a:06:cc:34:a5:
                    d1:2a:7e:a1:ce:b4:d3:1f:dd:78:4f:5f:25:2a:fb:
                    ce:14:98:7c:d1:50:c4:4f:ca:3f:ca:66:af:98:ed:
                    aa:40:99:20:53:ce:d0:80:bf:0d:e3:61:1b:ec:35:
                    b6:9a:02:69:80:cd:56:36:05:77:f1:c0:48:4e:da:
                    66:b5:02:29:06:91:c1:09:91:52:8e:36:c2:8a:0d:
                    34:d8:42:d7:c9:72:a9:3d:2d:db:7d:fb:62:fc:dd:
                    d9:26:e1:bc:37:0e:b0:06:cc:17:2e:9a:f9:ce:bc:
                    c1:54:14:07:dc:b2:b8:71:25:5a:d2:37:76:bf:05:
                    ea:ca:74:56:ba:15:6a:30:9e:2d:0c:06:61:e9:8d:
                    49:8b:7f:fb:b5:b1:0e:f2:f9:f6:4b:c4:fe:2c:d2:
                    a2:4f:26:cf:f1:00:90:00:24:17:17:84:69:f1:b7:
                    cb:26:33:c2:a0:d4:91:ee:94:f7:10:92:63:03:c8:
                    42:29:4f:9b:cf:d8:e1:06:36:8b:a9:a1:47:2f:16:
                    c6:67:2b:c3:8e:b9:0f:e7:03:66:1a:7f:21:f2:09:
                    31:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8B:91:9D:1E:F0:0D:E6:F1:BD:AD:AF:43:FE:B8:31:F2:DE:2A:63
            X509v3 Authority Key Identifier:
                keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:36:6b:9e:1b:c2:92:6c:a4:9b:3f:1c:ab:2a:e0:99:cf:39:
         92:0e:14:68:4e:f1:4b:8d:4f:ff:02:c4:7e:99:36:60:37:80:
         d2:0c:9f:86:7e:9c:8a:84:d6:13:af:eb:b2:61:3a:b1:8f:53:
         46:0f:8c:82:05:8f:24:be:7f:0f:ad:95:bc:a8:2f:a2:5d:7d:
         ad:76:5c:b1:a1:c5:a5:3d:c9:fe:7b:e2:79:4d:63:e5:56:b8:
         d5:07:04:fe:f3:29:af:08:96:4c:37:36:f6:af:29:81:69:4e:
         ef:34:9b:77:fb:9d:a6:9d:c8:76:03:96:f6:c9:3a:8a:ce:b3:
         63:71:72:9b:40:93:f3:8b:af:f2:21:31:c6:02:9b:c1:0a:4e:
         ff:67:03:8c:91:62:c1:fd:4a:cc:c2:6c:a6:19:01:47:ea:c0:
         6c:f4:02:ec:80:29:78:95:4b:92:7c:61:66:d3:64:a5:d4:01:
         d8:c6:c7:8e:66:43:69:8f:bc:87:f7:7b:e2:37:db:9b:dd:bc:
         71:5b:fe:84:c6:69:c5:59:d2:1f:b5:56:cb:21:5f:9a:74:c0:
         8d:5f:bb:cd:97:38:dd:17:a8:28:8d:c6:ce:cf:19:b6:62:92:
         3b:6b:88:7f:20:7b:02:47:02:db:0f:22:ad:db:c8:66:1e:7c:
         27:b0:ca:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:25:58 2026 by rpki-client