Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
File:                     dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json)
Hash identifier:          SlFoxjqTiOwCCOFUE7iobCGHT4CjEiyGxjnIAiyso3M=
Subject key identifier:   1D:92:D2:C5:41:5D:03:52:D7:BF:D8:8F:AF:A8:BA:FB:25:DC:94:17
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Certificate issuer:       /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial:       019E8D91E96B7C762CE2F6D3D2773509F3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
Manifest number:          08D5
Signing time:             Wed 03 Jun 2026 13:00:10 +0000
Manifest this update:     Wed 03 Jun 2026 13:00:10 +0000
Manifest next update:     Thu 04 Jun 2026 13:00:10 +0000
Files and hashes:         1: 0PbPEQsG-kj7SoehWuyEm8KHUSs.roa (hash: PSFO3oJW97UfWkTdnQLs8C6Bk6abk9LmfHzrgXAaZBA=)
                          2: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: J+eUkmBG5kZMHiLQFswFp3ld8Ek1tTYkxTeApmxuJIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8d:91:e9:6b:7c:76:2c:e2:f6:d3:d2:77:35:09:f3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
        Validity
            Not Before: Jun  3 13:00:10 2026 GMT
            Not After : Jun  4 13:00:10 2026 GMT
        Subject: CN=1d92d2c5415d0352d7bfd88fafa8bafb25dc9417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:dc:86:fd:e6:82:47:a0:85:5d:bb:87:71:
                    38:ce:36:83:6f:f2:7f:17:2e:73:62:cc:a6:7f:09:
                    ff:1d:87:b6:9b:c7:b2:88:0d:05:21:6a:f7:a1:7a:
                    d6:b8:3f:66:0c:ed:91:c4:ed:b9:10:1d:02:4b:17:
                    0a:4f:be:ec:49:fa:7e:8a:9b:6e:cd:50:10:61:90:
                    82:ac:eb:8c:b1:67:b9:a8:d3:55:0f:9a:81:8c:06:
                    36:92:03:f8:57:15:a9:82:95:67:52:df:68:0c:73:
                    37:0d:48:ec:b0:c0:11:cc:59:cf:c5:d9:ed:11:14:
                    81:6a:5b:37:4b:31:c8:0b:7e:17:45:24:67:10:b1:
                    2e:ca:c3:86:90:31:9f:53:6a:13:90:d2:b1:f9:bc:
                    ca:1b:82:d7:36:87:c9:d8:eb:a5:a2:88:ae:4f:82:
                    e7:3c:db:03:15:19:3f:7d:17:30:b1:ae:a9:8b:6a:
                    9c:9b:1e:af:95:ce:b7:a9:87:65:98:aa:37:8f:cd:
                    65:4e:f6:ea:a8:46:cc:fd:e5:0e:d7:30:fc:9a:bd:
                    75:c3:e8:e3:01:f7:d0:04:44:04:78:55:6c:c7:80:
                    d1:22:2f:7c:cf:75:92:e6:58:f4:93:74:04:3b:12:
                    43:64:32:ac:9d:b4:61:b1:b6:86:af:1d:f2:db:4b:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:92:D2:C5:41:5D:03:52:D7:BF:D8:8F:AF:A8:BA:FB:25:DC:94:17
            X509v3 Authority Key Identifier:
                keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8a:5c:af:93:a5:44:2f:b2:4d:51:a3:cf:34:45:12:98:bd:
         53:86:4e:f4:bd:56:7d:fe:3e:b9:0e:42:8b:3b:64:48:22:fa:
         af:3a:16:6b:1e:84:dd:5d:e7:e7:b0:d5:2d:15:2d:af:24:e9:
         a0:6f:4a:d8:6f:1a:48:76:32:91:3c:65:09:97:24:6a:83:da:
         c9:e1:84:dd:3e:e5:13:10:6b:5a:86:12:ef:f7:d0:e7:d7:a4:
         c1:ab:52:da:61:7f:94:ac:53:26:60:5f:c3:83:6d:85:e1:49:
         d9:60:33:31:31:71:f5:23:7f:37:1e:4e:37:d1:de:01:dc:20:
         42:6f:87:5b:09:8d:ca:2c:77:c8:1f:4f:5c:fe:a9:3b:33:13:
         00:5c:94:c9:fa:e4:4c:05:2e:c7:a5:ca:47:8b:c1:96:58:51:
         46:bb:42:6b:12:ed:16:ff:be:1e:81:9e:64:1a:4c:fe:c5:8c:
         b4:c1:52:1b:98:44:f3:31:25:17:bc:19:eb:61:66:61:9a:ab:
         50:35:a3:86:b3:a4:d0:fd:29:c0:01:ea:c7:18:95:92:2d:6a:
         08:ba:ff:bf:2c:33:32:dd:5e:9b:f1:40:b6:06:de:f4:10:93:
         b5:96:e2:c1:98:f1:aa:ad:a8:0a:9e:89:90:2b:59:58:03:19:
         f8:00:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:00:28 2026 by rpki-client