Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File:                     arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier:          ZIstD5IRl6Z7g6+ShhLZevYG9XHLXzKeaECUd5/EskI=
Subject key identifier:   48:E0:26:81:3D:51:A6:FC:A5:95:7B:DE:1E:CC:AC:C3:93:67:DC:5F
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer:       /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial:       019F13788355E8FA52808D4E3241C77B8137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number:          1987
Signing time:             Mon 29 Jun 2026 13:01:32 +0000
Manifest this update:     Mon 29 Jun 2026 13:01:32 +0000
Manifest next update:     Tue 30 Jun 2026 13:01:32 +0000
Files and hashes:         1: Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa (hash: 27DbT/Z3cUUe4baBVw7qCM3X7YQ/wmFv1tv5corfTU8=)
                          2: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: nqOnRUDn5CpAWRo9fPYUzJ+fM+pvK4XifaHoz4MGmQY=)
                          3: lYp-YR5agUeBIpPproziS51g9ek.roa (hash: 9jFyVnGeTg/IMXlqGgWRdiaBnJrjVXxu+HDus3oW3gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:78:83:55:e8:fa:52:80:8d:4e:32:41:c7:7b:81:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
        Validity
            Not Before: Jun 29 13:01:32 2026 GMT
            Not After : Jun 30 13:01:32 2026 GMT
        Subject: CN=48e026813d51a6fca5957bde1eccacc39367dc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9c:0c:cd:24:f8:77:a1:27:60:10:2f:a0:6a:
                    77:e5:cf:f8:7d:ce:af:69:00:cb:e5:fc:12:bb:28:
                    02:c4:12:80:a1:b3:e1:55:de:ec:12:fd:7b:d3:15:
                    10:49:15:da:08:49:50:e9:2b:96:2f:80:fd:24:82:
                    fa:61:89:3c:7a:04:77:27:a2:e3:06:6d:46:5c:33:
                    61:69:ce:a6:c8:88:74:cb:d6:53:09:e7:5a:a3:a7:
                    8d:4a:24:03:b0:39:8b:93:27:91:48:11:de:98:0a:
                    6b:02:db:9e:3c:1d:3b:1b:76:ad:d5:1e:4c:3c:ca:
                    be:70:85:1c:8a:8a:75:06:76:94:ce:0e:ac:df:99:
                    0e:33:18:d8:da:20:1c:13:55:cf:e0:00:1b:5c:ef:
                    d3:88:23:23:b9:38:89:f4:c5:4a:1a:55:df:33:15:
                    21:45:dc:b1:7a:8d:87:64:f1:4f:36:99:94:13:da:
                    cb:28:dd:77:15:07:18:c2:8d:94:65:35:83:39:5e:
                    59:9e:f0:96:2e:74:d9:e6:ea:da:54:bd:36:51:6b:
                    bd:0c:b3:be:81:eb:94:bf:a0:58:13:7a:76:c5:8b:
                    ac:f6:84:20:5e:6b:68:fd:c0:7c:4a:4d:f5:0b:ef:
                    75:74:65:30:37:87:c5:a7:13:a6:32:66:b3:6b:1e:
                    ff:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E0:26:81:3D:51:A6:FC:A5:95:7B:DE:1E:CC:AC:C3:93:67:DC:5F
            X509v3 Authority Key Identifier:
                keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:6e:d6:f2:20:e8:72:77:88:be:9a:48:85:17:a3:84:49:
         32:79:64:a2:69:e5:86:f3:64:01:af:e2:73:c6:e2:00:e2:b2:
         09:48:bc:87:70:9d:8f:67:42:4e:1e:63:b6:ff:5b:68:bc:7c:
         94:89:47:15:fb:8a:53:8d:aa:b7:1c:5b:4d:17:e5:49:10:1e:
         82:b8:42:f2:79:10:f1:4b:93:dd:a5:18:d8:53:e9:85:fc:a2:
         33:fa:f5:b8:c7:10:8a:a0:43:54:bf:fb:9f:6b:76:47:62:04:
         7b:6c:46:08:7d:4a:11:c2:13:cc:74:a4:1b:a9:99:56:46:81:
         79:76:5b:61:81:f1:13:75:01:6b:68:6a:6a:fd:dd:ea:7d:e9:
         62:d3:24:3b:26:e5:ac:4e:67:ca:d8:03:7b:3a:62:ac:65:a9:
         09:18:37:92:69:5a:28:c1:5a:47:c4:5b:a7:93:67:55:b5:a4:
         70:d9:44:ec:00:63:b9:44:7c:89:9b:8d:9a:aa:4c:9d:2e:d1:
         9e:5e:f3:aa:6e:ef:27:33:41:89:46:fc:91:05:fe:f2:09:b3:
         3d:df:bd:50:88:a3:a7:0e:a5:61:e5:45:53:d3:bf:3d:77:8a:
         c3:a1:45:77:0d:ca:d2:da:2b:52:d2:ff:43:c4:23:20:15:20:
         c0:27:1a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:43:38 2026 by rpki-client