Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File:                     Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier:          lW8DQIqLbTqNIVU+PDyfZfCoUvaCI5JfZvAEHijD5V8=
Subject key identifier:   E7:DB:12:00:4F:DE:7B:0A:71:3A:A2:A2:47:20:3D:53:E8:2A:34:49
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer:       /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial:       019EB7D7DB35B91A1C9DE0D7F0683FFBF0FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number:          0B1A
Signing time:             Thu 11 Jun 2026 18:00:37 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:37 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:37 +0000
Files and hashes:         1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: lHCEE2mxATjA0PHBem71v1Yirkb92M7oBhx+lWTemRw=)
                          2: ez3ZuiMIYx6XAooxqgacpm5fhZg.roa (hash: vk/HfV9yv0+3WHPw2z2Am2j60UpVLAvpD1nYGFaREig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:db:35:b9:1a:1c:9d:e0:d7:f0:68:3f:fb:f0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
        Validity
            Not Before: Jun 11 18:00:37 2026 GMT
            Not After : Jun 12 18:00:37 2026 GMT
        Subject: CN=e7db12004fde7b0a713aa2a247203d53e82a3449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:82:29:6d:8f:52:07:81:b1:27:56:1d:16:
                    b3:50:6d:66:b9:0e:55:79:e1:59:3e:b8:e8:83:79:
                    6d:fb:99:cd:6f:38:00:5b:4b:77:98:67:fa:e1:65:
                    44:51:c1:c7:a3:e0:f6:0c:a9:3f:06:47:e4:92:05:
                    28:11:05:f0:bf:83:5a:a4:e9:f1:1a:01:65:84:b3:
                    15:01:59:7c:42:57:67:62:27:d7:08:6a:af:a0:b1:
                    21:c1:a8:73:7a:83:71:64:a3:9a:50:7a:6c:1c:dd:
                    5e:bf:4a:04:4d:e1:ba:26:3e:45:c4:7b:46:dc:b4:
                    9e:65:94:b9:30:71:ae:9c:49:94:0b:15:b1:dc:3f:
                    cb:77:2e:95:60:3c:04:98:3c:03:cc:f0:d2:16:c6:
                    f7:fb:42:37:01:0e:27:41:21:52:24:c8:5e:24:c5:
                    4d:62:bc:45:ce:9d:ab:ab:e5:61:7c:ce:69:4f:46:
                    f5:5d:3f:bb:0b:91:10:d1:e3:9b:b8:0b:26:a9:75:
                    ce:4b:a6:3c:e3:e2:8b:60:68:ec:77:f4:a0:65:04:
                    a1:83:37:4b:f1:11:00:c4:44:a6:18:f1:97:82:d7:
                    45:26:5c:52:6c:b5:78:49:16:01:0b:d8:00:d6:31:
                    a4:0c:3f:eb:9a:3b:de:2b:80:a5:49:06:e1:83:86:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DB:12:00:4F:DE:7B:0A:71:3A:A2:A2:47:20:3D:53:E8:2A:34:49
            X509v3 Authority Key Identifier:
                keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:85:59:fb:a9:92:9a:d6:29:d3:b8:9b:4d:5f:ee:54:29:
         31:19:42:e1:af:7d:6c:c3:03:3b:38:53:d9:28:69:20:ef:c3:
         17:f1:d2:53:d1:f8:e2:1e:8a:3a:6a:72:c3:16:92:a6:ab:1d:
         cc:1e:d6:68:f0:2a:99:bc:c1:7f:37:31:50:21:87:ed:2d:3d:
         07:67:10:e2:4c:f1:d4:43:3f:28:46:b6:7c:e0:be:c6:5b:ab:
         98:71:5a:32:98:fe:7d:d3:62:5f:ba:b8:46:e8:0c:93:b4:ac:
         c4:c9:9d:03:65:41:95:a2:51:f7:36:b8:9e:a3:fc:32:5d:a1:
         8c:33:b3:08:7c:d7:23:d6:ee:81:69:f0:1a:40:e0:fd:59:96:
         93:f0:80:f8:2c:ed:85:39:47:8c:80:e6:62:e8:0b:d3:4d:60:
         ad:7a:c5:4d:ca:53:fd:3b:6e:c5:0c:e6:d6:f4:11:38:ea:c0:
         71:b3:c9:ae:10:05:36:b7:95:15:e6:71:5f:5e:f0:49:41:e7:
         89:0f:f3:9e:b9:b8:a4:b0:54:fa:9f:4d:4d:b3:f7:0e:80:ce:
         94:1e:9d:5f:77:c1:a6:d8:e3:47:99:74:76:96:e7:1a:99:4d:
         ea:81:51:9c:5e:a3:0f:0f:de:7a:5b:ca:c0:ea:18:1f:6b:b6:
         66:94:c6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:01:02 2026 by rpki-client