Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File:                     1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier:          utH4DKet+Pbt5dRMxmeUcJ6LM0GVWBM9UBI9e/PuB3Q=
Subject key identifier:   3D:CB:1F:9E:F0:97:90:8B:D1:8C:B3:85:D2:A1:64:58:45:3C:AF:4E
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer:       /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial:       019F126527E9F12AE5C7064F69DB3CB28B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number:          121D
Signing time:             Mon 29 Jun 2026 08:00:46 +0000
Manifest this update:     Mon 29 Jun 2026 08:00:46 +0000
Manifest next update:     Tue 30 Jun 2026 08:00:46 +0000
Files and hashes:         1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: tbQcWc0JyIc5oRo9N8uYo7qxC6PU0v0T7iqBSvr8caI=)
                          2: 9GKzto8F8VSvC2cabKjYXdbXzwM.roa (hash: 3PzwakewoGlY9+PpIdZTrhAHAsAZ3tnyJrCLep3Ietc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:27:e9:f1:2a:e5:c7:06:4f:69:db:3c:b2:8b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
        Validity
            Not Before: Jun 29 08:00:46 2026 GMT
            Not After : Jun 30 08:00:46 2026 GMT
        Subject: CN=3dcb1f9ef097908bd18cb385d2a16458453caf4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:0c:ff:b3:52:aa:3e:03:c6:19:ab:40:a2:
                    e5:41:4e:e2:a2:56:1c:54:cf:44:63:2e:78:23:da:
                    b4:4a:c9:a0:d4:17:c6:1a:41:de:d7:34:b7:1a:4f:
                    07:ba:f5:79:a4:81:cc:16:b6:e3:6a:8d:45:09:26:
                    04:fc:09:ca:71:a5:db:7f:59:f1:96:86:48:62:6e:
                    45:c4:44:2d:7d:20:4f:c8:6e:a7:1c:85:1f:89:7a:
                    ae:6a:c8:3d:a1:12:6c:f8:13:53:ad:d0:ff:8d:c8:
                    ea:ee:f1:35:6d:e0:79:15:81:3c:f9:0b:d9:eb:b5:
                    20:0e:e7:f2:56:33:d2:d5:c9:79:ad:bc:bd:05:ea:
                    22:0a:e2:4a:60:d7:f8:df:c8:23:4a:fa:4e:8b:17:
                    73:63:33:bf:bd:0b:b5:3d:1e:44:91:fa:d5:d5:6a:
                    c2:3f:b5:b8:d3:22:18:bc:0e:11:c0:49:4f:fa:f9:
                    2b:e6:27:2c:66:6b:0d:4e:2f:52:8b:f8:50:f9:6f:
                    64:19:dd:26:cb:b1:cc:d6:1a:e8:e0:2b:09:79:5a:
                    81:89:c5:4a:0e:18:3a:09:72:11:b7:bd:65:ea:6c:
                    d6:cb:d4:91:17:b6:b4:b4:73:81:11:92:a4:94:0e:
                    fe:fd:1c:1b:d7:1a:97:6b:34:3c:20:0d:f1:cf:16:
                    c2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CB:1F:9E:F0:97:90:8B:D1:8C:B3:85:D2:A1:64:58:45:3C:AF:4E
            X509v3 Authority Key Identifier:
                keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:d2:12:96:25:59:9d:a5:0f:3f:65:f7:b2:71:35:76:e8:69:
         aa:c8:4a:b7:e7:75:87:db:f5:5b:59:2a:8b:e4:3d:fd:f6:b4:
         1e:c3:75:4b:4b:f6:f7:dd:82:fe:3e:ad:07:2e:89:43:34:d3:
         78:6e:ab:90:59:21:d3:f7:f4:6d:7f:6c:c2:47:39:cb:f4:55:
         e5:bc:ca:31:2b:b8:b0:e7:f9:a4:ba:c1:9d:ca:0b:7c:cf:c5:
         ac:3a:16:6a:5a:ad:c6:ce:c8:42:c9:5c:30:c4:d4:50:75:bd:
         64:e8:ba:75:7c:a4:86:4d:e6:9b:a4:4f:90:91:cf:74:2c:57:
         d4:6c:eb:7d:f1:69:83:65:03:b4:9b:2c:17:f0:45:14:f0:38:
         d5:59:df:c7:94:45:4b:7f:4c:6b:10:43:66:53:a4:c1:5e:71:
         5b:1c:82:1d:95:27:b2:ed:bc:e4:0d:8a:17:e9:fe:2e:53:f8:
         e6:88:2b:07:02:54:e8:23:1a:e6:81:e8:9c:b4:7d:2d:56:25:
         28:53:f9:20:00:28:e6:5f:e8:74:03:9c:5f:1d:1d:90:7d:34:
         a9:81:f5:0a:16:98:23:a1:b7:4d:5c:95:b4:73:31:94:04:74:
         d0:71:15:38:cd:37:f9:57:50:2b:e8:53:bf:cd:d6:c2:a5:6f:
         45:3e:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:31 2026 by rpki-client