Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
File:                     0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json)
Hash identifier:          IeSg1Dii+ATzoyM0+QYvbyOOLcdFp1c6QAG/GCywO60=
Subject key identifier:   3C:31:81:E7:38:73:B5:B3:BB:79:60:83:09:70:38:C9:8E:E8:EB:70
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Certificate issuer:       /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial:       019F17F94CF00BAD52E18F3F8B64B0A1C3A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
Manifest number:          1049
Signing time:             Tue 30 Jun 2026 10:00:41 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:41 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:41 +0000
Files and hashes:         1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: YUIVUV55ICPQmk/APyOsnND9tvDMX1QwfArdMEtmmV0=)
                          2: MipuBL2VGxmcxz7-wPC6PIvzlC0.roa (hash: pbdG1q6RrelOu8y48wOuYlZBSQEt24vc2iBxdFAT4TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:4c:f0:0b:ad:52:e1:8f:3f:8b:64:b0:a1:c3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
        Validity
            Not Before: Jun 30 10:00:41 2026 GMT
            Not After : Jul  1 10:00:41 2026 GMT
        Subject: CN=3c3181e73873b5b3bb796083097038c98ee8eb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:36:e3:4a:76:f7:69:a0:d0:bb:a4:89:1f:
                    e5:57:d3:a5:8a:b1:22:8e:db:c0:7a:00:09:a2:b5:
                    c1:7c:0c:f2:56:c7:00:e7:b0:71:0d:03:1c:b0:88:
                    0b:39:32:9f:d3:ce:77:63:9d:00:d3:16:2b:7a:53:
                    25:59:c0:31:67:22:40:5b:2f:ac:a5:34:2a:30:2e:
                    be:cb:71:f7:75:10:d3:eb:9f:23:bd:ce:50:5f:ae:
                    a7:53:d2:8d:f8:2a:ed:1f:df:ff:d8:2c:2d:f4:e3:
                    00:5f:8e:49:e9:b7:18:53:bc:96:a3:03:14:22:87:
                    26:58:54:c4:31:0d:c4:28:ee:6c:f6:d6:13:bf:e5:
                    0a:cb:06:3c:af:f6:c0:11:0e:70:68:9f:8e:dc:b6:
                    b3:04:35:a8:cd:90:06:a8:4f:ff:bd:55:1a:a0:cc:
                    15:37:8b:22:47:9b:e4:63:33:bb:90:ec:30:85:c1:
                    d9:8f:38:2e:5b:d3:81:cd:7b:4e:13:56:ec:ce:e4:
                    c5:5b:d0:5c:c2:7d:ec:8a:1c:b3:7d:e4:06:0c:5d:
                    bc:02:b2:7e:23:b7:1b:bc:52:27:89:ca:dd:53:5a:
                    1d:4c:49:87:b8:8b:da:3d:37:19:9d:0b:80:60:99:
                    34:92:42:07:9b:bd:0d:10:4c:39:d0:40:d6:dd:44:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:31:81:E7:38:73:B5:B3:BB:79:60:83:09:70:38:C9:8E:E8:EB:70
            X509v3 Authority Key Identifier:
                keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f0:e0:62:a6:38:7d:a2:d8:3f:8b:6a:3c:15:bf:81:d5:d6:
         42:5a:ec:d3:c4:d3:69:3a:74:76:d8:e2:64:6d:ea:f0:e7:07:
         54:4d:2d:56:a1:63:d9:f2:36:b0:3e:d2:2d:28:f9:43:46:1f:
         5d:a8:1f:0a:b2:ba:6b:68:05:10:18:49:fb:1d:18:ee:b6:53:
         23:ce:8e:93:c2:8b:d8:07:6b:14:7b:d4:98:88:d0:54:02:97:
         67:a9:3c:9c:7c:65:a3:1f:e4:d4:88:ca:b6:42:6f:29:01:20:
         d1:9d:85:3d:50:13:43:86:98:6e:b9:59:6a:4d:be:50:c5:72:
         42:4d:19:28:7d:59:f0:0f:d4:bb:13:16:de:f8:1b:94:b3:bf:
         c9:1a:3c:fc:8d:f7:aa:67:8f:9d:f5:3b:d2:2d:a2:09:8f:c4:
         1f:3e:8d:6f:67:b1:2e:47:b4:71:17:fa:b4:50:3a:a3:83:ca:
         96:d3:57:95:dd:75:e5:42:68:c8:de:c6:9b:43:cf:6a:75:27:
         c7:03:2c:9c:7a:3c:03:9a:b9:2d:cf:36:c8:85:aa:b0:da:54:
         ca:1d:a4:4f:fc:4c:dc:ac:e9:5b:98:b7:68:a6:ab:41:51:d8:
         00:d7:ba:bb:f4:9b:18:06:7b:a4:f2:f7:01:a1:22:d4:2f:0d:
         ad:14:2a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:20 2026 by rpki-client