Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          gW9fbPZvhCR268XzrE5RIy/RFK/bRBo4JLB6ZZvCTig=
Subject key identifier:   5D:9F:CD:42:6D:5D:37:31:86:C3:C6:E6:DD:B7:AA:77:EB:77:24:25
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       019F194320535CA2CA8B2F64FA99C008679D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0ECE
Signing time:             Tue 30 Jun 2026 16:00:57 +0000
Manifest this update:     Tue 30 Jun 2026 16:00:57 +0000
Manifest next update:     Wed 01 Jul 2026 16:00:57 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: V6CKWUT8R6W/AvfTTIULsgztLqsfM2BqRJMuttSS1Q8=)
                          2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:20:53:5c:a2:ca:8b:2f:64:fa:99:c0:08:67:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Jun 30 16:00:57 2026 GMT
            Not After : Jul  1 16:00:57 2026 GMT
        Subject: CN=5d9fcd426d5d373186c3c6e6ddb7aa77eb772425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:9d:2f:b9:fe:ae:fd:37:4e:8a:e5:18:7e:
                    33:3e:8d:2b:38:88:6c:2d:77:ea:24:9c:4d:01:0a:
                    f6:f5:b7:2d:82:7b:5b:f4:ca:4b:5e:33:d1:9f:94:
                    d7:46:95:a7:b9:2c:f5:ba:00:fa:15:95:36:d7:a6:
                    66:7e:21:8a:dd:b5:aa:88:57:b4:8e:09:bc:3e:50:
                    d7:61:6b:91:23:86:82:50:93:8b:b9:94:c7:ee:ba:
                    85:40:9a:3a:f6:ef:58:74:f1:89:21:a1:86:0a:28:
                    72:fe:58:13:9a:64:ca:58:4c:b8:60:0e:ab:4e:f9:
                    46:1c:ab:c0:6b:2c:db:b0:ef:78:59:6c:c4:08:1b:
                    34:9a:7f:aa:46:5a:c7:07:b9:60:17:66:96:5f:d8:
                    f8:e2:ca:50:40:f5:b6:23:0c:47:50:5e:d8:aa:24:
                    89:af:0e:1e:f5:d5:e6:aa:64:09:a2:d5:37:98:a0:
                    24:ac:9e:eb:96:26:6f:af:fb:fb:0b:a6:02:f5:03:
                    cc:eb:bc:c1:63:88:69:82:f3:bf:ea:f9:2e:cd:50:
                    41:bf:fe:f3:1c:47:bb:06:28:86:70:01:75:c6:b5:
                    ee:78:05:3a:fb:f1:fc:e1:dc:97:a2:41:e1:fb:e0:
                    cb:01:f6:df:aa:74:f3:26:a6:4d:54:69:71:e1:93:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9F:CD:42:6D:5D:37:31:86:C3:C6:E6:DD:B7:AA:77:EB:77:24:25
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:15:9c:8e:16:23:b8:58:7e:71:1d:64:5b:47:e1:b1:79:b6:
         2d:b4:70:12:e8:fe:6d:39:05:16:4c:ae:2b:67:d0:69:80:6b:
         ce:a8:47:e0:96:c1:30:3f:4d:b2:1a:aa:26:6f:d6:7f:9d:3c:
         b8:18:8b:16:a3:c6:01:45:b5:a5:eb:e6:c1:34:5c:ed:5f:eb:
         1a:84:23:e6:fe:1c:08:20:52:b4:6b:d8:0d:23:09:32:dd:5b:
         ce:51:87:51:24:e9:b2:d6:35:6f:48:ee:08:4c:10:51:c7:36:
         84:9e:1f:70:88:1d:f4:d1:e4:7d:81:ad:75:6f:de:fe:d2:bc:
         a9:e4:3e:c0:cc:1f:91:9e:db:9b:36:a3:f2:84:b6:d5:67:7b:
         4f:20:3c:bd:2a:da:38:b1:59:61:4a:9c:71:7a:fa:2c:44:4b:
         83:d4:78:1a:d6:3e:47:d3:a7:98:37:7d:0d:ed:96:e7:b6:92:
         c2:b2:95:53:2f:34:1a:44:73:19:7b:1b:e4:86:cb:90:f3:6d:
         e1:88:7d:dd:26:9d:74:cd:01:4b:ad:ec:67:c6:3d:0d:7f:ae:
         e3:17:5c:09:bc:be:8a:b2:c2:1a:85:29:4f:81:ce:f8:a0:f3:
         0b:b5:27:07:26:d5:0a:bf:a6:3c:cd:31:76:c7:77:a5:7d:5e:
         a2:88:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:12 2026 by rpki-client