Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File:                     rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier:          o/mz2+APjBP0nyG7N1u/fZsgfuuG+irvRJX8tEAKrIo=
Subject key identifier:   FE:E0:CC:C2:3B:69:4C:8C:79:8B:84:A1:E3:8E:00:B1:61:83:F8:7D
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer:       /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial:       019EB8456A8920F1E3AD067A3C0E4641E51C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number:          1971
Signing time:             Thu 11 Jun 2026 20:00:17 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:17 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:17 +0000
Files and hashes:         1: L--nog6xEzatgFx0vve4F3aMfqg.roa (hash: bT7m47/vJSRP8Nb+CoGFbdUeEIOeotqAaMuhhj16mOg=)
                          2: UWUWF46MigK1a0cd003CguBbQdc.asa (hash: 8MF1DQrDAZ7AsSrFu9a41jWtJfGtyeySnSqbPCLIeLA=)
                          3: dCesxMMj3iimdYMAKtjCOo7VCaw.roa (hash: rBIdWhYFqNkTi4VSYSHXSoz7Tccn1BMFaCDizvKANgE=)
                          4: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: 6anU0J5+IHS21XDehyGI6vXIQPCN6zZnMZKjqujb/k0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:6a:89:20:f1:e3:ad:06:7a:3c:0e:46:41:e5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
        Validity
            Not Before: Jun 11 20:00:17 2026 GMT
            Not After : Jun 12 20:00:17 2026 GMT
        Subject: CN=fee0ccc23b694c8c798b84a1e38e00b16183f87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:cf:31:0f:77:aa:81:fa:4f:22:ce:dc:da:
                    78:98:9f:bb:ad:84:0a:2d:32:b8:b5:5d:7f:63:ae:
                    89:fb:f8:d0:a9:f8:59:be:9a:7b:5c:f4:4c:7f:0d:
                    7f:28:63:ca:88:1d:7f:6e:84:42:96:36:e9:88:61:
                    7b:c7:9b:69:87:67:cd:d7:c7:0c:7d:85:89:92:8b:
                    02:b5:74:22:7a:82:15:52:a0:be:22:ee:11:b2:1c:
                    65:62:d1:2d:cb:98:d8:cd:52:aa:ca:a7:b8:43:fc:
                    88:2c:12:d6:ab:53:09:0b:3b:d1:50:0c:08:99:4d:
                    b2:f0:7f:ef:5a:bb:32:d6:8f:d9:f2:40:45:13:e6:
                    01:d0:fc:4c:5f:4c:7c:1e:34:4e:53:7b:5e:ec:6d:
                    72:69:8b:de:67:31:9a:29:d7:b8:b3:7c:f2:f0:39:
                    a8:6d:d5:5c:dc:f6:da:e6:5c:42:5a:57:cd:53:82:
                    71:89:9c:9b:0d:86:e1:4b:aa:fd:cc:a3:4a:55:fc:
                    11:3a:b6:24:54:5b:3c:b7:79:4a:aa:d6:15:42:ab:
                    09:36:29:eb:aa:ab:a9:c0:57:82:a6:da:22:49:1d:
                    c5:63:6d:19:1e:23:2c:3f:fd:82:ae:8d:b8:d0:64:
                    b2:10:c6:28:30:f5:31:24:95:fe:d5:ad:b2:25:a3:
                    10:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E0:CC:C2:3B:69:4C:8C:79:8B:84:A1:E3:8E:00:B1:61:83:F8:7D
            X509v3 Authority Key Identifier:
                keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b4:fe:1a:ed:7d:bf:1e:d0:a5:66:bb:92:1f:81:8d:5d:fb:
         33:30:4e:5e:d3:32:18:2f:0e:2a:0b:2e:26:6a:b6:c0:d3:7b:
         c9:d9:73:d3:be:57:79:41:ce:1d:94:fc:61:b3:95:3e:5b:d1:
         38:32:18:e8:69:aa:84:20:d6:9c:ae:2a:db:c3:de:fa:54:d5:
         e9:90:2c:bd:b2:78:64:72:92:0f:94:d7:d7:f1:bf:12:2e:bf:
         c7:47:9d:45:68:7b:fc:1c:98:d4:c6:73:b5:e9:eb:a8:94:27:
         f5:4c:ad:89:43:96:6c:fe:5b:89:b7:60:d0:c0:79:94:8f:e5:
         9a:53:62:f1:46:6d:d7:c2:20:fa:56:95:93:79:e2:7a:9d:0d:
         96:6f:21:59:91:e1:95:56:dc:8d:70:dd:28:ee:00:4c:b4:fb:
         06:00:62:8d:28:e3:6c:d6:95:1b:17:1e:22:98:ab:4f:e2:1f:
         96:be:26:ea:39:16:0d:6e:a8:cb:6d:3f:7f:62:9e:07:9f:ed:
         52:37:27:07:05:7c:86:e4:cb:f1:a2:bf:32:04:85:54:f6:08:
         d0:b0:d0:a0:fa:d6:a4:c2:5f:0d:fd:2c:90:5c:3e:1c:dc:37:
         69:29:29:c6:4f:68:e2:ae:b4:01:57:5c:e1:55:91:87:f9:97:
         1f:7b:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:58 2026 by rpki-client