Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File:                     ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier:          BYcSgXEteYJvyA6WSVAIFZraE8kdXKDxuizn90jf7kg=
Subject key identifier:   BE:34:C5:AA:A4:C9:DD:63:4C:0C:25:C0:CA:59:8C:06:00:AD:6A:B8
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer:       /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial:       019F19B110DEAEDE6685DBFB5A126F63C717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number:          17D9
Signing time:             Tue 30 Jun 2026 18:01:02 +0000
Manifest this update:     Tue 30 Jun 2026 18:01:02 +0000
Manifest next update:     Wed 01 Jul 2026 18:01:02 +0000
Files and hashes:         1: ElW47ObyfnNKPgKpwIJenZynEps.roa (hash: MYYtJ2cX574IGimZRbIB/INbKI/GwnvZia+SyQYKKgY=)
                          2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: KJ7kQsENCZZKgrRIeU+NJWojhzNEbYxE+23BSTWqF6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b1:10:de:ae:de:66:85:db:fb:5a:12:6f:63:c7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
        Validity
            Not Before: Jun 30 18:01:02 2026 GMT
            Not After : Jul  1 18:01:02 2026 GMT
        Subject: CN=be34c5aaa4c9dd634c0c25c0ca598c0600ad6ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:f7:12:a6:c9:a7:32:a5:2b:f7:42:5b:87:
                    75:91:9e:ae:39:02:b3:df:ed:0c:ec:d9:19:47:23:
                    fb:0a:92:b8:30:9f:dd:5e:2c:4f:d8:7b:cc:31:87:
                    57:69:3a:17:85:0a:76:ef:16:76:c7:be:d9:66:55:
                    4d:ec:17:b0:22:32:95:3c:16:2c:69:ad:ce:24:26:
                    93:17:4c:81:aa:54:99:81:53:33:ee:ca:27:4e:80:
                    1d:98:84:17:07:d9:d0:9a:c7:ac:94:6e:d0:c1:7f:
                    8b:0f:89:ba:43:50:ba:0f:38:1f:6f:ae:f7:9c:ff:
                    e2:59:6c:e6:0c:74:50:93:51:b2:e8:5e:be:d9:d3:
                    99:88:1d:19:5a:90:14:b9:d5:e5:db:e3:3f:73:57:
                    9b:d5:29:9d:14:1f:be:f0:d3:fe:a6:d6:5a:bc:7c:
                    c2:bf:4d:9d:39:4c:1c:e4:40:df:ae:3b:de:8a:64:
                    5f:23:1b:da:79:3f:20:04:23:a9:b4:43:f0:e5:1d:
                    d9:1d:72:c7:bf:d2:63:98:c3:3e:01:d8:59:f9:40:
                    8c:e7:03:2c:e6:2e:4f:bf:0d:48:d9:cd:15:89:64:
                    af:01:0b:db:ca:af:09:67:5e:9c:f2:f9:8c:67:e0:
                    10:ec:4b:6d:47:bc:dd:6b:63:2a:f3:1b:66:1f:38:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:34:C5:AA:A4:C9:DD:63:4C:0C:25:C0:CA:59:8C:06:00:AD:6A:B8
            X509v3 Authority Key Identifier:
                keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:82:e1:be:67:00:51:79:40:2f:53:6d:78:dd:bd:9e:63:
         4f:90:05:cc:e2:0d:71:47:11:20:2d:e5:7e:cd:b0:0a:0c:1c:
         86:af:90:0b:b2:f8:bb:b9:f5:20:e2:27:07:ff:98:d8:48:ab:
         5d:93:3f:84:de:14:3f:6b:7f:cc:6c:73:b7:03:b8:70:78:b8:
         83:f5:04:2b:33:6a:88:34:fc:98:03:02:8d:c5:b9:7f:cd:b7:
         04:70:a3:2c:44:9c:c1:3a:84:fa:4b:59:19:18:ed:e8:54:7b:
         c6:cb:0a:18:f8:a2:63:78:af:3b:6c:33:39:b0:d6:84:b6:f9:
         4d:ad:81:71:4e:c8:26:15:7c:78:36:ef:c0:ee:7a:9f:7c:b1:
         0a:2a:33:ca:51:4a:96:63:1d:7b:c6:ae:53:3d:b5:e6:8c:24:
         c2:15:27:1b:86:07:63:0f:8f:b3:43:d6:90:b8:ef:89:21:59:
         68:81:29:4c:96:2e:0e:a2:cd:6d:e2:41:55:1a:4e:59:6c:dd:
         fb:42:e4:59:a6:c5:f2:43:f8:aa:a2:3f:9f:64:45:b5:e1:43:
         63:a3:09:46:fd:bc:1d:e3:98:5b:d5:ad:48:41:c4:82:98:e9:
         91:20:43:c4:94:bf:ac:51:ba:b9:9c:b6:b5:71:37:c8:91:33:
         3b:b7:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:30 2026 by rpki-client