Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File:                     1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier:          F/eqIrP8uzqiqpVKsy72Tq9KkHkUVgaJy/59LXeGpkE=
Subject key identifier:   63:7C:F4:B2:9C:75:4C:44:D7:D0:33:29:FE:5B:52:E3:9F:61:0F:77
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer:       /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial:       019EC06D6843DB222F93865DA73D2A93332E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number:          11E9
Signing time:             Sat 13 Jun 2026 10:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:55 +0000
Files and hashes:         1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: lTWbw9kXZeSkwBIi29WwR6tsEu4d+5vR9xY0eHkgfBs=)
                          2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
                          3: Bh-T23qknIeIH3OoC5e589rNtKc.asa (hash: fzH1wDHUsYlpNJwrEYlI/LoWVi84gSQemumRr98/KQM=)
                          4: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
                          5: k7K2nGDuPiO7Se_nhxH46pUsKyo.asa (hash: xc6+rKQG4W4vPyLrCUrae4qpuB00CQX79V15oGw6dqM=)
                          6: nH4QGJOU2j3EPIWo9AxW00IQFnk.roa (hash: IWD2BtbqLOYthCXactOhK7e4mOG0DXsr0Rz/2aTPlOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:68:43:db:22:2f:93:86:5d:a7:3d:2a:93:33:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
        Validity
            Not Before: Jun 13 10:00:55 2026 GMT
            Not After : Jun 14 10:00:55 2026 GMT
        Subject: CN=637cf4b29c754c44d7d03329fe5b52e39f610f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:09:68:a0:50:0b:cb:ba:49:7f:33:33:dd:
                    9c:05:38:bd:03:c6:f5:e3:79:9e:ac:1f:ff:ff:6f:
                    20:7a:b8:f0:74:87:19:0c:d9:af:ed:35:ce:80:2c:
                    10:45:25:a8:74:4b:d1:5c:90:3f:0d:83:ed:a7:06:
                    87:84:5f:99:0d:c6:b2:02:33:16:65:83:74:75:c3:
                    b2:9a:67:43:63:c0:4c:f4:52:36:0a:aa:ab:67:bb:
                    5a:22:62:eb:f6:53:b0:26:83:fc:1c:69:ec:90:1f:
                    9b:b2:fd:96:76:82:da:ab:1d:f2:03:bb:31:5d:fa:
                    ff:56:4d:39:9d:4a:49:d7:fe:b6:fd:84:96:a7:b2:
                    d7:e0:c1:26:b6:d0:92:93:6a:a3:c9:ed:0b:c2:14:
                    b6:f3:cb:2e:24:c9:78:8d:e7:ff:ab:21:41:52:1b:
                    69:e4:fb:bf:74:c6:39:a4:5d:27:51:42:5f:c9:39:
                    53:ff:c3:e4:75:45:51:9e:e6:fd:e0:85:81:d3:fe:
                    be:60:fd:e0:db:f0:b0:eb:4e:c9:7b:8b:54:f2:97:
                    c4:e1:e7:fc:b5:57:d3:16:11:30:00:7e:e9:93:06:
                    e9:7e:89:14:82:f6:94:0a:ec:79:60:61:03:23:c1:
                    50:7b:eb:7b:61:90:80:00:4d:08:c0:e3:45:1a:bb:
                    7e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7C:F4:B2:9C:75:4C:44:D7:D0:33:29:FE:5B:52:E3:9F:61:0F:77
            X509v3 Authority Key Identifier:
                keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:0b:bb:a8:1a:51:ca:81:e0:b2:73:3d:eb:0d:90:4e:a2:f0:
         13:28:dd:af:e5:65:cd:02:b2:d1:55:95:c2:22:df:28:13:58:
         3f:b0:1b:53:9f:74:a0:71:ad:5d:f8:49:44:b7:0d:7a:2c:ea:
         1e:5b:91:01:2a:dc:11:9f:23:c4:05:6a:3a:0e:32:bf:50:79:
         74:bf:ef:30:ad:04:40:ae:99:46:f6:a1:85:01:38:0e:24:f4:
         51:82:9d:3f:b4:5a:de:fc:6f:d2:3d:d4:1b:56:46:23:56:e9:
         c8:bf:7a:58:46:ff:34:54:00:c9:bc:a4:94:63:ff:67:9e:60:
         c3:e5:4f:47:14:f2:b6:95:17:b9:91:59:d7:3a:a8:61:a9:d5:
         a1:69:63:c2:2b:fe:45:a7:94:b4:70:88:83:13:06:37:40:9f:
         d1:e6:c4:49:70:23:52:99:7f:2b:dd:29:8b:db:d0:17:ad:d1:
         1c:49:5d:56:6e:f9:84:96:a6:d7:c4:10:b1:c8:76:2e:8a:95:
         c3:31:c7:7c:fa:9c:c0:c8:2f:e4:e9:dd:e8:b6:4d:54:ad:d8:
         45:aa:dc:67:92:b9:01:df:a4:ce:10:87:e0:d0:11:d9:6c:ca:
         67:78:17:06:bf:f6:03:e9:22:a5:60:c1:ab:46:50:dd:1a:72:
         4d:69:c8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:00 2026 by rpki-client