Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File:                     1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier:          AuqfHpXb22sZs+69ghnh7TYNrPv/jPqubnZqS6jPSaE=
Subject key identifier:   50:83:1E:7D:A7:E1:9C:19:59:1D:C2:FC:82:18:36:14:76:73:26:24
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer:       /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial:       019F189EB0EE7617549AD5FD52317C98E492
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number:          1998
Signing time:             Tue 30 Jun 2026 13:01:20 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:20 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:20 +0000
Files and hashes:         1: 0xrZEj05nZklKXgoWScPIF2_55I.roa (hash: /xHv98UagMpY7p7/l707cOwppDtpfGRBySWTV/pX6Bo=)
                          2: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: 5I8isnYutA+g1sNRY9t/SSMJvMBhGtm0tpiFSdZWdNo=)
                          3: 2_chmdN9KFFBZIvF9VY89f23PGs.roa (hash: oIVNlGlquIUtlwcT49BOjBM2tIxXAOLbTnaR8cakqIw=)
                          4: oSGKhwEc_oyA4GgI1H0hJOveCVI.roa (hash: 1SINNHx3FHxT/JXf8IpEHqdou86CS2g7FnWo+nB+dSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:b0:ee:76:17:54:9a:d5:fd:52:31:7c:98:e4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
        Validity
            Not Before: Jun 30 13:01:20 2026 GMT
            Not After : Jul  1 13:01:20 2026 GMT
        Subject: CN=50831e7da7e19c19591dc2fc8218361476732624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2e:33:2e:7a:d5:d6:44:ec:f0:e8:ae:a0:c4:
                    e3:7b:5b:5b:6a:38:bc:0b:2c:d5:1e:fa:19:82:92:
                    59:cf:53:b8:7d:46:ae:2f:8f:25:ab:d1:16:e2:50:
                    a2:74:48:e6:b6:8b:48:35:17:93:67:e8:4d:c4:b6:
                    d7:4e:b9:aa:03:cf:85:08:8d:f9:b4:a0:c5:7e:84:
                    99:ce:bc:67:2c:bd:a1:b4:f0:0a:33:04:09:39:ef:
                    6f:24:6e:0c:8c:4e:08:6c:f3:7d:32:41:6f:5a:c3:
                    65:ba:2c:a6:7c:21:df:53:b6:98:fc:7c:9b:19:08:
                    85:ed:2c:6f:ec:e8:fd:01:eb:b4:1b:6b:42:7f:7b:
                    64:c4:af:f1:d7:1b:22:bb:7a:6e:c7:64:a6:ca:32:
                    5b:69:8b:d6:2e:7d:be:b9:7f:b7:8e:2f:6c:d3:b9:
                    ce:b5:ae:82:dd:ae:b9:fc:3c:50:f9:1d:20:ee:1d:
                    09:63:e0:96:8a:7f:31:ff:37:21:90:30:f1:27:55:
                    52:53:a6:73:45:be:23:32:44:5f:63:b3:4e:d0:27:
                    2c:90:a1:70:e3:ca:f6:4c:0d:bf:47:c6:25:5a:c5:
                    33:e5:f9:86:e9:af:4e:0a:e9:63:7e:90:de:e1:e3:
                    9d:2f:23:cc:a3:b6:d5:0c:7c:37:a1:8a:b5:ec:1c:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:83:1E:7D:A7:E1:9C:19:59:1D:C2:FC:82:18:36:14:76:73:26:24
            X509v3 Authority Key Identifier:
                keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:7c:87:19:49:7f:1b:11:b9:ef:15:2b:ce:39:d1:63:f8:25:
         1f:f0:5e:92:33:24:a5:fb:a5:1f:45:1e:b9:6a:cb:33:7c:e3:
         f9:7f:9f:6e:b0:aa:80:37:2d:5d:69:b3:3a:22:72:cd:ba:31:
         85:c2:b3:a5:5b:29:c4:ac:70:85:53:45:1a:c7:40:8f:1b:bd:
         be:5d:a0:19:5e:f2:ea:06:1b:ad:ad:ef:4c:fd:c3:ff:51:87:
         03:f9:c0:3c:d1:9c:e1:0f:e9:95:ed:1e:a5:6f:08:60:de:b3:
         6e:96:ca:de:e8:11:ec:58:f6:4f:dd:68:92:38:34:6e:64:ec:
         7a:80:bc:7c:e3:2f:ba:5e:20:bd:d8:fa:3e:f1:ed:7b:4c:7e:
         64:e3:8c:1a:18:6f:ad:28:07:85:86:48:01:23:dd:1a:f1:fd:
         97:15:bf:14:68:fc:d9:7c:c2:1c:2a:60:d1:32:7f:77:60:37:
         58:28:7b:b8:bb:bb:71:28:94:5f:95:00:db:79:2c:22:2b:73:
         bc:22:56:39:f6:c9:2a:25:6a:12:83:1c:09:d7:6c:e4:a3:ed:
         f3:14:2b:8c:08:fc:3e:94:7b:4e:85:2d:b2:a9:44:87:da:4f:
         4b:40:84:63:ba:ae:ba:4f:4b:e3:93:bc:1b:13:6a:8f:fb:ed:
         cb:7a:8a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:29:57 2026 by rpki-client