Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File:                     iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier:          5ywXSzNFy5BgtRoCwuQYRjiePIpBxQJ22dr9n6y56Ts=
Subject key identifier:   EA:12:39:CC:E9:69:1E:AE:5E:8B:54:9E:21:DF:16:66:B0:18:2F:DE
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer:       /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial:       019F130A9374D05FED8B11361120BA3362D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number:          08F3
Signing time:             Mon 29 Jun 2026 11:01:27 +0000
Manifest this update:     Mon 29 Jun 2026 11:01:27 +0000
Manifest next update:     Tue 30 Jun 2026 11:01:27 +0000
Files and hashes:         1: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: ShthMxQIjkc4slUSwJiv6ujfW/5MNO7S7UeXFwgksoA=)
                          2: yAy7dhfnf5ztz8zG2y2BYT0K2Nc.roa (hash: Yhi2sxhWb+ZdylE1qzvoU8mFvZlrRwD3FR8dKXylg+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:0a:93:74:d0:5f:ed:8b:11:36:11:20:ba:33:62:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
        Validity
            Not Before: Jun 29 11:01:27 2026 GMT
            Not After : Jun 30 11:01:27 2026 GMT
        Subject: CN=ea1239cce9691eae5e8b549e21df1666b0182fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:1f:19:a6:3b:81:ca:66:ce:25:fb:d9:5e:
                    33:d0:61:fb:ab:b6:0a:65:0d:dc:16:d6:85:a9:4a:
                    fa:fb:b3:af:b0:8a:53:d0:f6:f5:ad:e4:40:48:a0:
                    53:cd:ab:4a:ba:38:6d:77:4b:c2:bb:af:ad:c8:91:
                    bd:9d:3d:9d:e6:f3:a3:61:bb:35:bf:7c:ec:cd:b4:
                    6d:cf:37:1d:ad:42:4e:b3:c7:02:59:cb:6d:5b:f9:
                    88:f8:51:23:80:2f:2f:45:b0:82:78:3e:d2:d3:3a:
                    68:fc:d1:b7:a0:4b:b3:45:10:67:f4:41:b2:b8:3c:
                    3d:b0:de:1b:94:6e:be:86:7e:c1:87:ac:1b:71:03:
                    b9:e8:68:54:c2:91:ec:a5:e7:7b:96:b4:04:89:26:
                    d7:80:4f:91:ef:d2:0b:4d:b6:7b:66:f9:f1:75:f5:
                    93:20:23:91:60:93:da:be:3a:7d:76:8e:f9:01:ec:
                    b2:34:e1:f1:52:40:f6:ac:34:5e:73:35:ae:f4:d0:
                    27:32:20:a9:2c:45:83:4a:6c:f3:99:be:90:21:70:
                    66:ad:6a:dc:83:e2:a6:b1:e9:8b:26:d0:30:79:0f:
                    f4:bd:65:d0:f1:83:84:f6:54:6c:17:c1:bd:18:d5:
                    6c:50:5d:65:13:9e:c7:40:f0:e2:97:a8:a4:78:e0:
                    86:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:12:39:CC:E9:69:1E:AE:5E:8B:54:9E:21:DF:16:66:B0:18:2F:DE
            X509v3 Authority Key Identifier:
                keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:71:63:92:e5:b6:b8:0a:2b:2c:a9:d0:3a:72:ea:3f:02:2b:
         6b:e7:28:79:e3:b6:17:d8:71:50:0e:f0:1b:b7:dd:12:08:56:
         d2:48:d0:2a:f1:89:44:1f:63:57:05:6b:de:cb:44:93:15:77:
         bd:71:b5:05:a6:d5:91:50:c8:7e:81:1c:97:07:2c:7d:14:d8:
         bc:4b:a8:f2:46:cf:ff:c1:19:81:d7:0b:30:d5:85:5a:3a:04:
         d5:db:7e:1a:e7:38:97:ad:61:8e:6a:0a:20:ca:48:b4:e4:a9:
         76:37:ad:fb:f0:6b:49:2c:f8:e9:90:9d:cc:0f:56:62:43:ca:
         1a:3d:be:01:df:e6:4f:37:9d:98:69:4a:0b:16:d5:0e:12:ed:
         eb:35:45:79:8d:98:c6:20:df:5b:f3:3d:56:5a:48:c6:a3:c4:
         2c:fa:1b:c1:43:08:28:ed:73:e6:5f:fc:19:98:8f:b2:2e:b2:
         90:40:b9:d9:41:d6:33:49:6a:aa:6b:43:4f:09:01:c0:1d:de:
         cf:87:08:17:1b:3a:b8:85:2a:7c:77:81:48:2a:06:b8:63:38:
         f6:19:a7:20:72:15:80:f8:9a:b7:8b:c5:14:03:0f:3a:18:f6:
         17:fa:f2:94:e5:01:21:b7:6c:d6:27:df:7c:a0:57:01:8d:17:
         ac:0f:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 19:01:03 2026 by rpki-client