Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File:                     1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier:          vHSfVpLE9MmertkOmWXxRGWlNvEikbnD2N493vQ+uGs=
Subject key identifier:   F7:28:53:BC:7D:5E:E2:B2:52:F2:37:FE:AF:D0:A5:99:DF:EC:55:38
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer:       /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial:       019F183135BA080998F18A624B5AC597EB57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number:          090B
Signing time:             Tue 30 Jun 2026 11:01:45 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:45 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:45 +0000
Files and hashes:         1: 0P1RjYkUunzUVQsRql-6_fKRzc8.roa (hash: QQ0zolHUVpVnhMPlw+ijSEm88671++BfofXDGkViKYk=)
                          2: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: 2NoR3e2tC375fB34nOZDG4jzGpmd0WQtr05xgCHgBSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:31:35:ba:08:09:98:f1:8a:62:4b:5a:c5:97:eb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
        Validity
            Not Before: Jun 30 11:01:45 2026 GMT
            Not After : Jul  1 11:01:45 2026 GMT
        Subject: CN=f72853bc7d5ee2b252f237feafd0a599dfec5538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:4f:1f:27:65:d6:45:01:6d:73:a7:7f:b3:
                    9f:d6:2c:d9:a9:0d:67:bf:d6:95:96:8d:a3:e6:e5:
                    e4:6e:b1:70:e1:45:0e:5a:31:7d:b4:00:d2:0b:fb:
                    20:4e:a5:f8:f6:be:31:e7:85:90:0c:3c:ef:f6:57:
                    e4:34:45:98:ab:a4:30:87:6c:43:19:c7:73:f1:7b:
                    19:de:4d:fc:0d:47:94:e3:19:1c:cc:6f:e4:1a:1d:
                    30:a2:33:2a:3f:d6:b8:30:9b:ba:41:a3:0f:64:ed:
                    b9:cf:2f:24:00:85:e6:e3:14:f0:27:66:bf:26:09:
                    35:2a:11:1d:5e:98:bb:7f:65:6f:e2:fa:1f:7b:b2:
                    91:9f:6f:d8:cb:c5:8e:2e:d1:d4:b2:5e:f1:32:f9:
                    67:27:07:53:3b:6e:e7:16:37:0e:f4:46:2c:a4:af:
                    eb:1c:d7:b3:ac:c3:59:da:8d:97:1a:4b:8f:bf:51:
                    75:13:4b:cb:6f:ba:ba:66:a0:11:b2:c4:d0:f7:b7:
                    5d:4f:f7:76:ac:54:74:1c:81:63:e6:c2:4f:dc:d7:
                    69:af:a8:ff:fc:0d:f4:3c:e1:ae:5d:fd:88:35:44:
                    db:42:85:02:c5:34:b6:57:34:ba:e2:10:b7:1f:28:
                    3f:d7:7d:37:df:9b:93:36:63:60:6d:ec:60:d3:ec:
                    24:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:28:53:BC:7D:5E:E2:B2:52:F2:37:FE:AF:D0:A5:99:DF:EC:55:38
            X509v3 Authority Key Identifier:
                keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:04:f3:2d:a5:df:43:a2:c0:33:f5:db:70:18:63:b4:d4:c8:
         41:41:2b:be:b1:37:09:46:25:3e:84:0c:a4:4d:a8:84:40:5a:
         6f:a3:b8:fd:4d:bf:8a:60:0e:67:61:11:c3:90:8d:53:82:3f:
         51:91:43:ec:e3:05:f9:68:c8:6d:71:4e:fe:e0:f8:d2:79:69:
         49:fb:cb:b5:ec:ae:ca:0b:c0:4a:9f:dc:18:81:75:50:b7:f8:
         e2:7a:ad:cb:db:e9:be:70:13:81:61:a1:f7:c0:43:52:76:09:
         8e:2a:aa:47:81:1f:fb:f9:d3:03:1a:ca:ad:b9:76:d6:fd:19:
         32:ba:05:08:25:b0:91:50:4b:e8:eb:35:36:15:e7:71:f7:74:
         2b:4b:f0:af:71:e8:b2:87:f4:b2:2c:bb:f0:e8:d2:ca:79:38:
         82:e4:f3:c6:68:07:67:20:5e:58:ad:25:21:b0:80:ee:46:bf:
         93:d7:da:b2:11:cf:f6:3e:5b:e3:df:e1:2c:e0:f8:19:20:df:
         13:88:29:1b:d7:79:48:90:2e:26:b4:03:58:60:fc:4f:0f:dc:
         09:9d:d9:08:ee:9a:af:c5:03:17:d7:87:56:ab:14:0d:c8:36:
         87:0b:71:c7:55:32:2a:a8:72:5d:85:06:35:c9:90:b4:5a:32:
         11:fa:ec:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:11 2026 by rpki-client