Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File:                     1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier:          c2bt64pbHtjbKb01K8SeU0pYHNWW5a62vfEkwnLeCaU=
Subject key identifier:   3B:10:B1:C4:12:40:13:66:9B:7F:D4:D3:BA:E4:A4:C9:32:58:71:D8
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer:       /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial:       019F17F9C1F1B0416D026D5107E9A3EF5521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number:          1906
Signing time:             Tue 30 Jun 2026 10:01:11 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:11 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:11 +0000
Files and hashes:         1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: 0VAWRwpH3cOBhbp0oG/CEFxtgRe7gJmXFn0pKl6e6Qc=)
                          2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:c1:f1:b0:41:6d:02:6d:51:07:e9:a3:ef:55:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
        Validity
            Not Before: Jun 30 10:01:11 2026 GMT
            Not After : Jul  1 10:01:11 2026 GMT
        Subject: CN=3b10b1c4124013669b7fd4d3bae4a4c9325871d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a7:71:b6:f8:2e:2d:b4:c2:2b:8a:a0:23:b3:
                    8b:ac:55:ae:64:4c:00:26:30:a2:2e:21:41:09:8d:
                    f4:f6:7e:88:47:25:d3:f8:7a:9e:b1:af:cc:e6:0a:
                    00:f6:b9:90:7f:bc:b8:6f:3e:06:f4:7f:32:59:cb:
                    cf:ad:3d:b7:f4:2b:d7:be:7c:e0:dc:9b:f7:da:b9:
                    5f:61:3f:f4:e6:eb:09:52:82:29:af:42:ec:89:c0:
                    9d:b9:85:0e:bd:06:ee:b9:3f:7a:e5:f2:60:73:a3:
                    7e:4f:83:b0:55:b4:42:11:0c:17:c3:3a:88:17:08:
                    e6:60:e4:50:bc:54:48:b5:87:2b:9d:fd:bf:2b:3b:
                    ee:3b:d2:50:60:1f:f0:93:5d:9e:8f:c3:c2:3d:79:
                    11:a0:95:16:fe:a8:64:c5:b9:e3:47:3c:4f:e3:65:
                    07:ff:3a:6f:f8:03:2f:60:3f:8e:20:e5:b3:2e:f9:
                    7c:21:90:d9:05:0b:ac:e5:70:05:80:45:8a:0a:ac:
                    23:37:65:e9:da:41:72:46:c0:4b:59:3c:0c:30:99:
                    13:27:2b:c4:84:9f:19:aa:b2:5a:a8:dd:49:dd:f9:
                    dd:b8:8a:64:20:ea:e4:cf:77:da:ac:d7:7d:81:91:
                    43:6c:ef:28:1c:db:8d:89:3d:19:50:44:f3:3a:9c:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:10:B1:C4:12:40:13:66:9B:7F:D4:D3:BA:E4:A4:C9:32:58:71:D8
            X509v3 Authority Key Identifier:
                keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5d:cd:ab:2f:3b:0c:a6:70:52:84:4b:a8:b2:c6:2b:49:5c:
         d1:90:4c:6e:91:31:7c:5d:f3:69:25:d0:e3:39:e1:63:85:e4:
         f8:4f:1a:2b:f6:69:a7:af:76:a2:53:8d:23:57:6c:23:10:43:
         c2:da:62:f5:11:d1:d5:ef:dc:a0:a4:3f:c9:7e:4b:fd:3e:e2:
         37:9a:03:25:e0:84:47:73:28:63:cf:b6:1b:15:36:d3:79:bd:
         c5:01:c0:49:be:1c:8c:1f:d8:54:fd:57:fc:f0:d3:a9:8c:ee:
         04:0b:7a:e0:73:ec:40:19:45:46:56:3c:30:4f:f8:a7:01:5b:
         62:ab:ae:22:91:71:c6:d1:9e:cf:24:54:05:cc:73:c2:70:92:
         f7:bd:f1:3e:72:fc:f8:53:4d:29:f2:08:37:db:25:6a:87:58:
         11:f1:7b:4d:41:b8:4d:91:66:81:0b:ba:f8:a0:b2:f6:db:66:
         4c:54:ca:ba:25:9f:c2:55:e5:89:72:d4:be:1d:40:b7:10:a4:
         2d:44:3a:5c:c1:28:98:a4:dc:ec:30:5b:e3:63:54:f8:a8:45:
         4e:cc:c3:6f:2a:ac:e0:23:72:b9:c2:cf:d8:f3:af:eb:16:df:
         8b:2f:7d:ff:1a:0c:8f:d2:42:39:df:4d:3b:c0:f9:51:aa:7c:
         94:24:6b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:50 2026 by rpki-client