Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File:                     08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier:          BjaknweF51I84+Ikn9tgo7ks5zHLETfwyFFcnE90ois=
Subject key identifier:   74:75:C8:A8:A4:57:F3:95:5C:F7:7A:91:B8:18:63:90:8F:E1:C4:C8
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer:       /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial:       019F1942FFD48032B4EAF9FDEE941BA775BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number:          198B
Signing time:             Tue 30 Jun 2026 16:00:49 +0000
Manifest this update:     Tue 30 Jun 2026 16:00:49 +0000
Manifest next update:     Wed 01 Jul 2026 16:00:49 +0000
Files and hashes:         1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: pTlZucGNRT8aOVo5gCzuGrvcO6F+UQI/HLusmQ4sr4M=)
                          2: TkVIENg5yxh_iBn69iwP-Gzs7M0.roa (hash: XN4b40QKJDQSEm8B3f99MTAbjS4H9rL0ddzhBtlCaKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:42:ff:d4:80:32:b4:ea:f9:fd:ee:94:1b:a7:75:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
        Validity
            Not Before: Jun 30 16:00:49 2026 GMT
            Not After : Jul  1 16:00:49 2026 GMT
        Subject: CN=7475c8a8a457f3955cf77a91b81863908fe1c4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:44:b0:ce:72:49:6f:24:55:15:f7:25:84:57:
                    7d:2c:0b:e4:d5:ea:3e:9b:63:78:93:44:b3:28:b2:
                    ce:a3:9f:6e:50:97:0a:d7:a6:ba:c3:c7:a6:e8:b6:
                    12:59:38:2f:5e:20:7b:56:2e:0b:4b:4c:6e:1f:eb:
                    23:c3:63:72:07:cb:fe:4d:5a:1c:aa:09:5d:0d:85:
                    a4:a9:6d:0d:de:a2:8f:ec:00:0b:0b:c1:48:74:6b:
                    94:22:92:a3:9e:1a:f0:d1:a6:3d:65:bf:c8:71:f9:
                    48:5f:13:c9:17:ed:69:8a:c3:c9:44:e6:bf:c8:78:
                    fa:c3:cb:f3:c5:68:21:b4:bc:c7:54:bd:fe:0b:79:
                    6b:56:7b:2e:fb:8c:90:00:c9:e8:24:96:d2:b4:26:
                    8a:93:69:49:89:a3:d7:79:44:f1:e9:3e:25:75:47:
                    0a:54:83:1d:c9:7c:9c:aa:77:6d:6c:37:93:0a:09:
                    30:d2:e5:2a:aa:f5:18:d2:69:52:a7:15:27:ef:3f:
                    38:a5:be:43:43:11:de:47:3e:e4:a8:1b:18:f9:b0:
                    c8:67:18:24:0e:61:19:ac:1f:f1:01:be:6a:de:c5:
                    76:b8:4f:1e:a2:dc:c4:02:7d:35:47:b1:77:2b:6a:
                    2a:0f:b1:fc:c1:73:3e:d3:5c:8e:a4:d0:41:99:1a:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:75:C8:A8:A4:57:F3:95:5C:F7:7A:91:B8:18:63:90:8F:E1:C4:C8
            X509v3 Authority Key Identifier:
                keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b7:d4:88:b1:50:82:ff:5e:09:43:63:3f:22:3f:b8:c7:84:
         bc:cc:01:49:fb:6f:0a:9a:ce:16:c9:17:ac:59:80:3a:23:21:
         ec:6f:1f:c5:0f:e4:4d:86:38:f7:75:d9:b3:78:47:31:41:f2:
         2b:ab:a6:9b:80:3a:31:f6:43:f9:6a:7e:1c:6d:0e:80:4c:e3:
         3f:2d:8b:e8:ce:67:63:9d:72:2b:d0:7f:06:1f:8a:19:ff:18:
         4c:f7:6c:6b:f0:09:76:07:2a:22:c1:96:69:46:e3:48:9f:60:
         2f:aa:3a:3b:0f:6b:0e:21:2d:00:05:46:c6:66:2b:de:18:2f:
         ff:4e:52:99:8c:d4:51:32:b9:0a:a7:90:c4:bb:37:a6:9f:f7:
         d9:9e:15:d3:b9:20:de:38:9b:e9:1b:ce:cb:ea:85:68:65:4b:
         b0:cf:f6:cb:97:36:b8:a9:76:83:67:ca:d8:bc:7e:b8:6b:d3:
         09:fc:fa:37:d6:9c:ab:38:c2:b8:d8:eb:1f:ea:a3:9e:48:29:
         77:f6:30:60:24:04:f8:75:97:bb:66:4b:02:c4:0b:29:b6:d4:
         c2:51:19:c0:59:1a:b8:0e:b7:80:70:4a:8d:92:94:d8:69:03:
         4d:98:62:41:c0:78:d9:18:84:32:78:5b:f4:36:1c:2d:5a:d4:
         ca:b8:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:19 2026 by rpki-client