Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File:                     cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier:          55Df22hXZ7upnYI5IPzrG1CW2TAgalzpzK3n2Gw+S7c=
Subject key identifier:   86:5F:96:EE:D7:48:AC:D6:9B:48:87:7A:EE:C5:18:0F:17:15:2C:7A
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer:       /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial:       019E88A33E288801025791BDAC95EC20AE55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number:          0393
Signing time:             Tue 02 Jun 2026 14:00:59 +0000
Manifest this update:     Tue 02 Jun 2026 14:00:59 +0000
Manifest next update:     Wed 03 Jun 2026 14:00:59 +0000
Files and hashes:         1: DAwWe5rLh-aQBzylMgXPEafT094.roa (hash: ddaH0Ll0Vx1InrKWW5z1h6HGqMMp7orTZW95H1Bjof4=)
                          2: DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa (hash: IKTadbiUFg9tzOWRHQMu+tnQ83zzuuvO8UT29QQwFPo=)
                          3: FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa (hash: GGkJmAABe4TcLrNWBtfMtwloTnLFtsdf5JSihhg5Xfs=)
                          4: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: B24R7ZFcu32lPJOw8b2Gyf+imHgvPBloG5ZjHNjLIMs=)
                          5: wjzuvsYsPDDKpMgBwHTQ9poihCY.roa (hash: l4MikOI2hGh4JANCfkUoAdXltlywTvqDvN7gXfHekr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:a3:3e:28:88:01:02:57:91:bd:ac:95:ec:20:ae:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
        Validity
            Not Before: Jun  2 14:00:59 2026 GMT
            Not After : Jun  3 14:00:59 2026 GMT
        Subject: CN=865f96eed748acd69b48877aeec5180f17152c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:36:c9:35:0c:b1:1a:d2:d2:0f:3f:42:8a:
                    da:03:ac:b0:89:a4:f3:d0:6a:77:ec:4a:77:98:b3:
                    69:6d:fc:a7:a0:18:9b:3a:1e:e9:40:4f:95:fa:33:
                    58:55:8f:46:6d:de:c4:3e:32:86:4f:1c:ba:2c:a9:
                    d6:3d:08:62:33:08:6b:ff:b9:2f:12:50:70:cb:b0:
                    58:b3:e3:23:9f:a4:68:dc:39:a3:92:fb:e6:98:81:
                    da:f4:0c:3a:db:17:4c:53:c2:18:eb:e2:1e:c4:8c:
                    29:d2:1c:4f:e7:92:4f:18:c5:a2:fb:b0:33:da:62:
                    1c:2f:4c:ec:76:8e:f0:19:b6:a8:5e:43:eb:c6:97:
                    ee:e5:23:3c:f0:bb:51:bc:ba:90:6e:88:66:e4:74:
                    18:8f:f5:3c:8b:e5:b3:c8:13:30:e3:f9:5b:6b:28:
                    33:71:64:e0:5b:e8:3e:fb:bd:aa:ca:f1:d6:61:f5:
                    bc:3c:22:94:ba:e0:f6:f5:76:4a:02:0c:aa:16:56:
                    29:4c:87:1c:f7:6e:ee:de:6a:8d:8c:e8:8d:4f:7e:
                    ca:c9:e5:33:27:a0:f1:da:d6:17:da:98:1e:b7:cd:
                    f2:75:7c:45:05:69:93:2c:2c:c3:13:2c:f3:27:fb:
                    1b:8f:90:ca:a3:d8:e5:20:0d:ba:f3:b0:d2:7b:05:
                    93:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5F:96:EE:D7:48:AC:D6:9B:48:87:7A:EE:C5:18:0F:17:15:2C:7A
            X509v3 Authority Key Identifier:
                keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:85:7d:e1:7b:61:ed:02:3d:82:85:ed:37:6a:f7:9e:b0:8f:
         79:cb:43:9e:5c:83:ee:39:51:c4:0c:b8:8a:9b:b4:c3:e2:69:
         38:ed:67:29:e2:bd:99:50:50:35:06:a2:08:77:76:8a:33:b0:
         2d:1b:96:07:9d:ee:6f:4f:16:4f:ab:e5:87:ab:f2:5e:d3:e0:
         f7:be:06:1c:c1:17:c6:de:e9:57:ff:77:08:10:f6:5b:91:92:
         b8:74:86:3e:f2:cc:a3:71:af:3f:96:a0:c8:2a:ba:fa:7b:4a:
         e8:66:21:b8:d7:92:79:81:59:12:7d:98:17:b9:59:62:e6:4c:
         bb:77:26:0a:ef:1f:bb:90:7e:b0:45:26:99:73:11:2f:8b:6b:
         a5:c1:91:30:7f:eb:23:d1:31:cd:9d:e4:70:69:e4:e0:44:7e:
         02:3f:2c:d6:b5:db:f7:b2:dc:0f:96:2c:5e:b4:0e:8c:30:84:
         3f:b5:1f:18:cd:dc:47:fa:7f:8c:1f:bc:77:df:cf:05:b2:56:
         0b:44:eb:9e:aa:c4:e1:90:e5:34:a1:58:1b:54:14:14:2d:40:
         cc:f4:5b:46:19:e3:80:fd:5d:0c:d5:cb:e5:f8:b3:5c:ce:7e:
         ed:1e:ff:23:bb:16:56:a3:25:32:9c:4e:65:db:51:8e:59:26:
         30:ef:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:12:24 2026 by rpki-client