Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File:                     1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier:          C7IwNS5nkOZTL7GWN9VVj5jdRT6e2Fe90ZIAQC4IvQg=
Subject key identifier:   7F:7D:A6:A5:CA:E3:31:C3:1E:5F:98:BC:17:B7:4E:EB:59:09:6C:7E
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer:       /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial:       019F17C2C9481926FB75CF2D0C5F01314072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number:          1439
Signing time:             Tue 30 Jun 2026 09:01:09 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:09 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:09 +0000
Files and hashes:         1: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: 8ekMoeAyiyxSA4LaNaEVhtpS4htNPJrXCgEiSWG0q6M=)
                          2: ysWkHcC4m8dES9G1oMzcknx5ywc.roa (hash: XtvZJNZbz5U46btMQCpXBJcIu+lpBGoaLYth/6jGpzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:c9:48:19:26:fb:75:cf:2d:0c:5f:01:31:40:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
        Validity
            Not Before: Jun 30 09:01:09 2026 GMT
            Not After : Jul  1 09:01:09 2026 GMT
        Subject: CN=7f7da6a5cae331c31e5f98bc17b74eeb59096c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:9a:2a:ff:c1:bd:d5:75:f0:f1:86:2d:c2:
                    bf:76:d4:94:24:a3:bc:d7:a9:1d:20:df:00:a1:a4:
                    1e:d0:50:b7:2e:82:e9:62:d7:00:0d:8c:d6:9f:39:
                    80:f2:b7:15:5b:8b:13:1d:7f:65:91:36:e7:41:6a:
                    05:e3:72:25:a3:07:4a:65:d1:a8:e0:9d:f9:31:00:
                    fa:10:a6:e9:50:83:05:23:9e:3c:f9:14:d8:4f:0e:
                    a5:e7:45:04:c4:7d:81:95:1e:95:d8:9c:21:c7:c9:
                    f7:0b:f0:cf:80:df:ae:8b:63:a6:81:6c:a0:11:ea:
                    86:95:ee:84:ec:81:05:da:36:d7:19:ef:f6:26:06:
                    21:81:1c:ad:5c:82:07:4d:82:ba:14:dd:86:f0:94:
                    44:55:1d:21:5c:52:0b:35:c9:11:d4:c5:5a:de:51:
                    6f:ab:dc:07:50:58:ac:16:04:15:cd:ab:ac:e3:be:
                    27:bb:62:c1:ea:8f:f4:b9:cf:12:6e:57:e0:2f:ca:
                    0e:6f:fd:69:b4:f7:6f:c7:db:ae:53:03:f0:6b:95:
                    54:be:92:80:00:ed:5e:40:84:c5:61:68:cc:56:6c:
                    49:dc:4c:a1:c9:6f:2e:80:2e:c5:e1:9b:c6:b2:4f:
                    0e:4c:6e:18:12:bb:8a:91:9d:3e:2d:04:66:4a:7b:
                    c2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7D:A6:A5:CA:E3:31:C3:1E:5F:98:BC:17:B7:4E:EB:59:09:6C:7E
            X509v3 Authority Key Identifier:
                keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:49:e3:8d:51:a3:fc:81:52:cf:48:1e:f2:38:f0:9a:85:
         41:17:71:c7:e0:7c:26:20:84:ad:f1:d0:05:3c:53:4a:51:ed:
         4d:69:ae:7e:3b:fa:39:0e:f4:f3:26:8f:66:a7:fa:50:1a:99:
         a2:f6:d9:8b:60:4b:d9:99:6a:cd:56:6a:3e:94:d4:85:c5:54:
         eb:db:3d:a1:b1:59:3f:31:66:fd:e8:e8:13:d8:7c:60:c5:cc:
         e5:cd:de:cd:e6:d4:05:e3:dd:da:be:c2:f1:3a:00:e3:71:b9:
         43:83:0c:f2:0d:ab:fb:97:56:9e:57:c6:89:46:89:55:02:70:
         a5:ac:22:b2:c1:f2:97:0d:5d:47:52:a3:34:e5:62:cf:28:d7:
         5b:3b:7a:cd:74:77:ea:ac:cc:be:40:06:38:2b:8f:d3:c6:38:
         71:db:fa:d5:ac:42:21:9c:79:3a:19:ab:31:05:f4:84:82:8d:
         e7:12:bb:6d:0e:81:c8:9c:59:27:12:be:06:7b:72:e0:79:2f:
         91:bd:08:cd:f7:a1:73:19:48:90:e0:40:cc:61:4d:d3:cd:db:
         c9:a1:7f:e8:c5:65:8d:23:af:03:b5:3d:66:62:ba:ac:7d:b2:
         35:2c:b4:c0:e1:33:37:79:2d:cd:48:54:5d:5e:72:72:11:0f:
         c8:9f:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:09:35 2026 by rpki-client