Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File:                     v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier:          8bA00w6HLh+Cj31S1DB9IR8ZIt1qXSikrFSJ00sscmI=
Subject key identifier:   E0:99:7D:E3:01:70:39:B8:09:D7:7A:98:FA:B2:24:96:F8:E3:D9:F3
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer:       /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial:       019E2023D243FD673E70B868C802155721D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number:          10E2
Signing time:             Wed 13 May 2026 07:01:18 +0000
Manifest this update:     Wed 13 May 2026 07:01:18 +0000
Manifest next update:     Thu 14 May 2026 07:01:18 +0000
Files and hashes:         1: hRhNZPtmJg0KwdjuoZkk93sBP2c.roa (hash: Iux9M/ga92AaPnB9SKUAzQYgctGbOPAarQ3+UfPCjro=)
                          2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: pQg52GJ9BzqsneSKxG0cZa16RypqRLyVrU//miB3u74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:d2:43:fd:67:3e:70:b8:68:c8:02:15:57:21:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
        Validity
            Not Before: May 13 07:01:18 2026 GMT
            Not After : May 14 07:01:18 2026 GMT
        Subject: CN=e0997de3017039b809d77a98fab22496f8e3d9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:91:14:ed:58:65:cb:72:11:73:34:ce:83:
                    1d:1d:65:cc:3f:6d:40:df:22:36:74:2d:82:a1:17:
                    9f:09:53:42:b5:80:cc:bf:5e:63:b1:33:ad:16:a9:
                    69:fd:d4:7d:45:2c:3a:28:a4:70:06:15:49:e0:64:
                    f5:70:c9:3d:b4:39:29:aa:9a:16:25:03:79:55:0d:
                    f6:51:7a:26:4e:c1:16:43:ed:3b:d2:43:0d:21:bf:
                    0e:bc:16:ba:11:98:3e:06:0e:7f:15:fa:92:23:c4:
                    7b:32:0a:5a:a9:62:f3:8c:4e:a7:a0:5f:a8:89:be:
                    22:f6:d5:70:f9:74:65:62:97:e1:36:77:13:3b:7c:
                    d0:bb:10:82:7c:7f:fb:f4:2c:20:90:95:49:7d:59:
                    33:e2:20:16:cf:ae:1d:72:aa:0f:12:3a:31:79:99:
                    62:c7:d4:1d:0c:81:70:cf:32:da:f1:24:9b:b6:45:
                    b9:aa:f2:d1:23:4e:eb:7f:a2:96:c4:58:da:8f:af:
                    a5:b5:7e:f9:bd:a8:f9:59:76:8e:f3:6f:40:7d:9d:
                    98:f4:87:b0:d1:e9:19:71:bb:ad:a5:16:79:86:cc:
                    51:27:a9:d3:38:34:6e:28:3e:23:b8:41:41:37:91:
                    52:78:8e:8c:ec:f8:6e:9e:94:e2:04:14:bb:88:af:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:99:7D:E3:01:70:39:B8:09:D7:7A:98:FA:B2:24:96:F8:E3:D9:F3
            X509v3 Authority Key Identifier:
                keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:01:a8:2e:2f:bd:41:4e:d3:34:74:e9:8c:71:5c:85:b5:a9:
         8c:a8:37:4d:61:25:a5:cd:6a:a2:ea:50:13:9d:5d:c8:65:03:
         80:41:76:7c:df:e8:66:5a:2d:61:05:1c:a4:99:6c:89:f0:aa:
         a5:e8:1d:a8:73:7a:e8:b5:b7:ed:06:01:1c:25:39:81:87:22:
         a7:db:0b:c3:f2:2a:92:75:8c:72:52:5c:5e:a2:74:e5:5c:09:
         b7:e1:3a:c8:65:1e:dd:7f:83:72:48:b5:78:b5:bc:0e:dc:b9:
         3c:65:da:02:6f:67:9a:ec:70:c8:ac:ec:ea:81:1b:5c:ca:0d:
         17:5a:50:90:f5:56:ae:2b:32:d9:45:15:c7:a6:44:77:6e:ce:
         7e:46:59:8e:ce:cc:f2:d1:01:25:84:39:55:1e:f0:82:d4:58:
         82:a0:49:cc:01:28:b3:b6:94:b2:1a:62:38:03:1d:f1:ac:c6:
         ee:b8:d0:13:76:f2:f7:97:ae:34:e4:aa:ef:c7:3d:88:53:47:
         9d:bf:81:8c:da:70:10:6f:1a:16:ff:3b:9b:55:05:ac:88:ef:
         e1:00:06:12:c8:ab:18:be:24:5e:4c:45:84:a8:8a:f5:89:69:
         da:b1:7b:eb:98:0c:b0:72:7f:ef:c5:7c:a2:34:30:50:90:e7:
         02:05:d7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:14 2026 by rpki-client