Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File:                     g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier:          alY8g4us1bjZRNmkeNHOeh4mUO7zsidFJ/Uw+NPYqtY=
Subject key identifier:   3C:F3:31:22:CF:57:9B:F6:30:92:6B:70:63:0C:42:5D:A7:44:23:54
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer:       /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial:       019F10E4E84B489D3801798EFF2738CE62AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number:          1987
Signing time:             Mon 29 Jun 2026 01:01:04 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:04 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:04 +0000
Files and hashes:         1: 4vogBCHvVhbK8N2sbK3joTZSar8.roa (hash: pJFApZIgzEg6Z5G8+ARw6VHXe5cVu/+xIPiV86FoPSo=)
                          2: 7lhE6bzZhG0C5CmBmaI7HzYPl8s.roa (hash: ToooYHL477UW9eXXr8dqX98p19Eo18MQyb6sYa2XGsM=)
                          3: TsBKJ5VG1iOHqte2doC7OTdW_hw.roa (hash: KJo9UiYoALbrSsQU23bvnMkU2vT+dKNpE5NMA+Hvo6E=)
                          4: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: 11WpCK4YjxnX2rf6XtJGBYTj00770S1DJ+vLXdJNylM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 22:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e4:e8:4b:48:9d:38:01:79:8e:ff:27:38:ce:62:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
        Validity
            Not Before: Jun 29 01:01:04 2026 GMT
            Not After : Jun 30 01:01:04 2026 GMT
        Subject: CN=3cf33122cf579bf630926b70630c425da7442354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:04:5e:a0:94:05:cb:35:26:90:d3:87:7c:
                    2a:ba:4e:a0:f9:ab:cf:57:48:33:e7:26:f9:a5:82:
                    f4:96:2c:a8:8d:12:3c:1e:f0:4d:8f:e7:a6:16:bd:
                    85:4d:9d:ec:f3:e3:80:ba:e6:f7:08:f3:da:99:8d:
                    e6:ca:8b:ba:93:8b:61:a1:a1:d4:4e:01:56:32:94:
                    b1:a0:47:1c:76:fd:3c:f1:84:fc:5b:1e:ec:2a:f6:
                    78:bc:d9:e7:a5:f9:3b:d3:23:58:d0:40:5c:7c:f2:
                    04:b6:22:18:6d:ba:c4:f6:42:a1:5c:0a:2a:d3:18:
                    b6:c7:99:e1:f7:9f:58:13:17:e2:52:72:56:48:99:
                    14:3e:76:74:ed:4c:6a:1d:e6:b6:30:5f:fc:05:ab:
                    cb:96:a4:42:c7:27:37:f8:bf:8c:1d:c3:06:12:cf:
                    7c:19:84:14:11:fb:a4:84:86:64:05:66:30:90:18:
                    b4:75:f9:89:4a:bf:b6:f9:3f:86:56:f4:06:4c:53:
                    9a:6c:c5:6e:95:fa:6b:98:c5:22:f9:3b:36:ae:aa:
                    01:e6:22:73:8b:17:6e:f2:7d:55:24:dd:78:7a:14:
                    e3:50:eb:49:3d:06:eb:27:94:3f:14:dc:c5:a3:78:
                    6b:df:e6:4c:20:6b:86:9b:0a:b3:21:7f:34:d1:78:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F3:31:22:CF:57:9B:F6:30:92:6B:70:63:0C:42:5D:A7:44:23:54
            X509v3 Authority Key Identifier:
                keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c1:2f:05:90:38:ff:7e:4c:85:47:84:99:2b:0b:28:fa:4d:
         a9:9a:a2:f0:2d:67:b6:f0:01:43:c1:17:54:8e:70:4d:97:5c:
         45:e9:25:d1:87:37:4d:8a:a7:21:8b:78:51:5e:c3:bf:c9:ae:
         41:f3:2e:b3:6b:61:1a:aa:a7:56:96:a8:52:66:93:89:a6:dc:
         57:ce:e3:dd:c0:c6:6d:d8:9d:af:1e:08:4d:3a:57:6d:b1:9d:
         fb:85:b9:37:5a:95:5d:2d:af:4b:25:61:77:9a:59:60:01:e0:
         c5:a9:87:e6:50:2c:92:03:e4:37:14:fc:39:a6:76:8d:8f:84:
         e4:e3:4f:7d:69:55:05:b5:0f:a6:1d:f4:c7:4c:b7:5d:4a:77:
         86:df:1c:e7:48:3f:27:dd:6c:be:77:fc:be:15:62:f8:7b:85:
         8c:2a:2e:33:13:dc:4b:aa:94:ed:0e:23:16:22:76:df:5e:9b:
         a3:72:65:38:85:f2:d7:2b:68:62:ed:4c:8f:6c:84:5f:1a:fe:
         f0:81:45:52:55:52:d1:66:93:32:b8:ba:9f:34:bf:a9:5a:8e:
         ce:97:b1:75:f2:94:9a:d2:1d:32:92:31:c4:93:c5:5a:57:5b:
         5e:c6:c6:ff:12:dd:9c:57:d5:4d:97:97:8b:3a:2c:3b:ab:f0:
         90:ba:80:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 06:53:23 2026 by rpki-client