Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File:                     iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier:          YvP7KFokY0tIJU2zV5ia1WDaixokzFcN+yfbGZfjFwc=
Subject key identifier:   B4:07:DC:EE:6B:83:5B:2B:62:57:AB:4B:C8:5D:B6:0D:8C:72:65:F9
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer:       /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial:       019EB80F17A841E4019455FF702A4F81AFC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number:          1957
Signing time:             Thu 11 Jun 2026 19:00:57 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:57 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:57 +0000
Files and hashes:         1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: X+nbXF4fLy9UOEGaAlNCnKJaDX89kcWd8fXUaHPI5fw=)
                          2: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (hash: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:17:a8:41:e4:01:94:55:ff:70:2a:4f:81:af:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
        Validity
            Not Before: Jun 11 19:00:57 2026 GMT
            Not After : Jun 12 19:00:57 2026 GMT
        Subject: CN=b407dcee6b835b2b6257ab4bc85db60d8c7265f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:59:2e:47:69:0b:85:73:f8:55:b4:6a:1a:3f:
                    9a:38:37:3f:5c:e5:33:28:1b:12:f4:25:e8:66:6a:
                    fd:b8:6c:69:9c:47:e2:88:39:4e:48:d4:ca:91:06:
                    3e:da:72:98:20:99:a3:52:44:1a:ec:f8:4d:e1:5d:
                    f1:79:dd:df:92:75:5e:93:87:5b:e4:1f:cd:52:22:
                    fe:35:85:a4:89:ee:c9:79:46:14:a0:ed:a1:fe:85:
                    87:e1:22:a0:68:d1:fc:62:73:30:46:3e:f1:60:cd:
                    42:5a:ab:9f:e4:29:23:3b:6d:34:02:ee:fa:ce:64:
                    fc:b1:59:e0:3c:7b:f9:20:1b:9d:6b:af:cd:7c:63:
                    65:01:1e:50:20:19:c9:18:a1:be:b5:fe:81:e2:b5:
                    d5:2e:a5:0b:87:46:65:cd:8c:ad:37:fe:e5:6c:1f:
                    8e:7a:29:ad:49:08:b9:66:3c:f7:36:f4:ba:5e:98:
                    44:2c:8c:33:23:05:5e:e7:d8:d9:0d:35:3a:22:13:
                    8c:ee:bc:a6:d4:3c:62:06:f6:21:ad:8b:30:7c:a7:
                    74:db:15:e5:77:cd:4a:4c:15:31:d2:b0:4b:b3:82:
                    87:96:e7:9c:60:30:02:14:94:1f:f0:54:0a:7a:9a:
                    90:72:5b:c4:82:64:b3:b1:d0:b4:04:1b:21:69:f6:
                    0a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:07:DC:EE:6B:83:5B:2B:62:57:AB:4B:C8:5D:B6:0D:8C:72:65:F9
            X509v3 Authority Key Identifier:
                keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:52:ce:0e:9d:87:ff:91:55:7d:60:91:b4:e3:64:19:c7:aa:
         a2:63:ba:3b:c5:79:34:75:6e:07:04:56:8c:9d:fd:ca:16:41:
         d5:ee:c9:cf:b3:04:05:6f:b4:5d:84:43:4d:3c:17:4f:57:a0:
         b5:a3:33:01:03:d1:67:d2:2b:9c:69:f3:1a:1b:16:5d:0b:20:
         3c:c4:99:87:3e:01:82:84:71:b5:20:34:c7:50:82:32:b8:57:
         fd:81:a7:63:c9:25:1a:75:70:50:34:9a:5d:19:d5:cc:fc:47:
         c2:38:97:50:31:d0:26:69:96:10:e8:f3:71:ac:42:0d:09:df:
         e7:ee:d9:ce:ca:2a:a7:45:54:6e:63:3c:d5:19:0a:73:f9:9e:
         66:81:96:04:d4:c4:f2:05:5b:18:4c:87:80:94:a6:7c:2f:fb:
         c5:bb:01:54:81:5d:24:9e:b2:ca:7f:20:ed:ed:f4:5d:ae:14:
         73:d7:07:cc:98:bd:90:69:2b:92:93:d9:38:5c:3e:15:af:8c:
         a9:87:16:0b:84:be:49:ea:59:8b:71:10:3f:5e:f9:c9:ea:25:
         19:2e:7e:88:48:3f:0f:75:32:b2:34:03:d6:b9:08:b4:c9:12:
         07:91:ed:dc:a4:07:02:66:c8:da:a2:8c:a1:48:39:0e:d7:00:
         db:df:32:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:46:47 2026 by rpki-client