Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File:                     1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier:          cK6PqYhd1bBxjbcoxLEb0fdiWhc2M6yz5Xq2FFVsYY4=
Subject key identifier:   F0:6B:0E:C3:B2:5A:09:E4:A1:51:DF:B2:0F:94:E7:4E:09:39:59:0C
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer:       /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial:       019F189E66944FC30C4DBCE5F1D089C446FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number:          10CF
Signing time:             Tue 30 Jun 2026 13:01:01 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:01 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:01 +0000
Files and hashes:         1: 0sUgrxZJElJI75bHc4PMJv-m6Hg.roa (hash: 2W0uHz9I3ibHN2TiwFffgNpABHgMMaB3ZZQbo22uvH0=)
                          2: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: Pkv9L4CNLGQvJVq7vFQC8ZcD4ZHVFTZL1AAQFkSwNK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:66:94:4f:c3:0c:4d:bc:e5:f1:d0:89:c4:46:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
        Validity
            Not Before: Jun 30 13:01:01 2026 GMT
            Not After : Jul  1 13:01:01 2026 GMT
        Subject: CN=f06b0ec3b25a09e4a151dfb20f94e74e0939590c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:bb:c9:46:90:3e:ea:c1:63:7c:e4:fa:bd:
                    94:44:57:e3:06:c4:f4:79:33:3c:e2:b9:d7:69:29:
                    d4:49:fe:e6:a8:f4:72:90:16:f7:ee:9b:ca:5a:68:
                    9c:e9:b2:59:5a:35:2d:35:b5:8a:ae:63:7b:5a:cc:
                    d8:38:28:b5:5f:a3:b9:22:85:09:5b:db:04:93:64:
                    bb:31:38:77:9f:20:67:50:eb:f7:1c:fd:a7:e5:a2:
                    1a:4a:20:7c:dd:c7:fc:42:d4:78:66:d5:9e:3b:14:
                    c5:a0:52:89:09:f6:41:48:db:e6:eb:d2:42:b4:c0:
                    cb:9c:5f:ae:98:46:45:73:78:d5:c9:fc:e0:52:e4:
                    e0:cc:cf:25:91:fa:15:98:eb:e1:67:1a:69:67:b2:
                    0e:eb:20:c4:4d:bd:4a:40:7f:21:59:cc:0f:58:38:
                    b1:0d:03:8e:15:5a:0c:c1:3c:f8:78:fc:87:2c:64:
                    5d:65:db:89:c3:cf:14:ee:b0:11:ed:1a:51:ec:ee:
                    ef:8c:17:c7:a6:3e:02:36:27:2c:be:16:09:33:8b:
                    d4:82:74:4b:d5:64:c5:85:4d:fb:64:07:67:33:9c:
                    82:ff:89:84:23:06:3f:1c:ab:80:3b:a3:b3:fc:90:
                    8e:56:5c:4a:9a:d4:a0:a3:d0:2a:83:d5:59:48:58:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6B:0E:C3:B2:5A:09:E4:A1:51:DF:B2:0F:94:E7:4E:09:39:59:0C
            X509v3 Authority Key Identifier:
                keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a4:c5:89:7e:ce:be:42:da:38:8d:33:99:a1:c2:c7:0d:69:
         80:3d:1f:00:b3:52:28:39:16:74:b1:aa:d5:04:a9:b2:3f:38:
         2e:f3:b4:0f:1b:c6:dd:46:3c:da:0b:1f:20:b6:c9:32:af:44:
         12:cd:09:2d:69:be:44:cc:79:97:35:95:81:f1:bb:42:a5:f7:
         7e:8b:3b:31:f2:72:4b:d0:cb:02:b3:85:21:09:73:45:b3:c1:
         3b:ff:d5:0c:ff:de:b4:55:92:fd:96:a9:59:e0:cb:35:71:51:
         0f:4f:e3:50:04:34:fc:4a:a4:9a:30:89:4c:fc:82:43:cf:26:
         f4:95:b6:84:04:ef:cc:4d:d3:24:60:b2:fb:33:be:9f:a7:a8:
         60:a9:41:f2:33:cb:00:af:c6:8e:11:5a:89:b3:1a:c4:b2:e0:
         d6:21:7c:6b:0f:e0:e1:29:d9:a0:fb:c3:e4:ac:3b:18:18:d9:
         4a:75:79:57:3d:97:67:df:81:54:95:9c:03:72:af:b3:e8:77:
         d0:19:02:d7:38:1c:24:4f:b0:63:fe:ff:40:18:78:bc:0d:da:
         1e:ae:85:9d:db:8d:ee:77:a6:29:b6:55:79:be:ab:9a:2f:16:
         dc:cf:54:07:f9:84:8c:55:58:c1:98:57:0e:83:12:2b:ae:17:
         fe:b1:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:28 2026 by rpki-client