Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File:                     ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier:          FgMdg1d2LJ+EAQ568PyCmSvucFz8imrR7vpY9SsaiO0=
Subject key identifier:   7D:98:00:84:C7:AF:34:D0:C6:E2:C8:52:5E:10:80:EA:6B:BC:2B:43
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer:       /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial:       019F190CBA46665276107C21E5BC086C72C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number:          0860
Signing time:             Tue 30 Jun 2026 15:01:32 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:32 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:32 +0000
Files and hashes:         1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: +skXn0syoaE971Gt6bQ7fH4GYIEi7G1t08cZk2I+d1I=)
                          2: stYBdowOVPO4I6l2lk6N70Rzn-E.roa (hash: YY8VJy7fjrv/nyUerV6XVPDCUnj9z+ve+4ysfFvneOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:ba:46:66:52:76:10:7c:21:e5:bc:08:6c:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
        Validity
            Not Before: Jun 30 15:01:32 2026 GMT
            Not After : Jul  1 15:01:32 2026 GMT
        Subject: CN=7d980084c7af34d0c6e2c8525e1080ea6bbc2b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:48:b3:99:da:d2:0e:16:00:16:4d:6b:e7:
                    40:65:f5:a8:77:f8:78:40:3a:0b:8c:14:4b:22:fe:
                    5a:6e:ac:26:d1:c4:14:cb:88:d5:dd:bc:63:47:44:
                    0a:d6:d1:b2:29:79:f7:c8:3f:b7:e2:a8:06:c8:e1:
                    dd:1b:52:42:03:d5:0c:98:c5:50:ef:6f:03:54:28:
                    2c:81:ca:c3:a6:31:45:2c:d3:fe:71:5f:44:07:0f:
                    6f:19:4e:13:ac:93:21:9d:ee:86:33:6c:f1:80:2c:
                    c8:83:8e:28:d1:f0:8d:1d:81:98:de:c8:56:cb:40:
                    76:e4:4d:bd:2b:9a:57:0f:a0:20:cd:19:5c:b6:28:
                    2b:08:40:e0:e0:e0:21:63:16:3f:9f:5e:7a:62:c9:
                    51:3d:52:a0:d0:70:ad:c5:ce:37:a8:b9:93:c2:ef:
                    b1:33:4b:8c:52:58:49:1e:84:c8:91:d5:71:d2:0e:
                    ec:49:4a:ae:28:31:4a:76:0d:14:5c:f1:e3:de:cc:
                    d2:63:f6:b5:3f:ba:0c:bc:21:c0:06:f6:45:40:66:
                    f6:ef:96:bf:62:0d:62:a2:80:88:ba:0c:7d:f7:e8:
                    fd:fd:dd:41:ef:f0:04:33:e4:b5:95:30:9e:78:7e:
                    d8:2f:68:c6:b5:da:76:cf:d5:be:60:b5:cf:3d:ee:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:98:00:84:C7:AF:34:D0:C6:E2:C8:52:5E:10:80:EA:6B:BC:2B:43
            X509v3 Authority Key Identifier:
                keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a9:cd:52:56:7e:3c:5c:63:e7:2f:42:de:d5:04:9c:b8:89:
         2d:99:21:7f:76:8b:8a:af:70:95:01:53:f0:cc:e9:18:bf:c8:
         9c:8d:9d:5d:64:82:71:c8:33:4a:aa:f1:9b:de:10:19:bc:4d:
         84:74:47:e1:26:01:fc:6e:b1:6e:f0:c3:89:8b:0f:18:ec:11:
         af:b4:02:1c:cd:d8:ba:e7:8f:f4:19:6d:63:59:ac:1e:57:b1:
         8d:2b:cf:0a:58:60:cf:ec:19:12:f3:68:ad:49:3f:b0:98:dd:
         d1:5a:6a:fc:65:e4:6b:56:cb:e8:65:2f:72:d2:f6:a6:c5:d8:
         00:c7:4e:c2:ab:27:75:97:f0:5b:28:67:4a:11:6d:d5:c2:4d:
         da:de:8a:8a:e2:b5:2c:b2:ee:bd:18:83:90:77:23:77:bc:84:
         95:dc:6f:81:7f:0c:4d:47:f9:b5:f6:86:39:cb:be:13:db:66:
         ec:c1:d0:c3:f7:f9:fd:48:dd:fa:b6:4b:34:d1:35:c6:a9:32:
         7d:66:2a:8b:f9:16:93:38:d2:f3:16:82:cb:c5:a5:a3:97:d2:
         d4:60:c2:cc:a0:84:f1:94:59:81:a2:2f:cf:7b:7b:0c:c9:27:
         8c:cf:52:c8:a6:d0:ba:c0:2d:4c:14:b4:4d:03:84:a9:14:8b:
         af:f7:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:16 2026 by rpki-client