Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File:                     793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier:          FnbDHZU1PJMpilC+KFQK+LfXLbDUtE6HPapUWtG+bUo=
Subject key identifier:   82:12:32:BB:3C:94:41:5F:41:62:0C:7E:95:14:7E:1D:71:DF:BF:48
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer:       /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial:       019F194385346FEFE472FFFB9A98A317258F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number:          1984
Signing time:             Tue 30 Jun 2026 16:01:23 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:23 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:23 +0000
Files and hashes:         1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: egpCDHn5BG/OOlVwvlphgOGAihwt02tmZtUPyToi254=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:85:34:6f:ef:e4:72:ff:fb:9a:98:a3:17:25:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
        Validity
            Not Before: Jun 30 16:01:23 2026 GMT
            Not After : Jul  1 16:01:23 2026 GMT
        Subject: CN=821232bb3c94415f41620c7e95147e1d71dfbf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:9b:75:43:ec:50:87:cb:26:3e:cd:fa:81:
                    f1:3f:c3:b1:9b:26:97:95:bb:4d:f6:3e:0d:f6:98:
                    d6:b4:cc:a7:17:01:8a:3c:87:f7:69:8b:4c:c7:4a:
                    d3:b1:39:84:46:29:61:70:e4:a4:15:25:c4:08:5e:
                    46:ae:6a:18:51:f3:fb:58:e4:8a:fc:9e:ec:11:43:
                    66:3d:27:12:8c:d6:31:6a:ff:c7:c6:fe:6c:eb:36:
                    2c:aa:37:75:22:5d:e3:2a:fa:8e:70:09:28:32:6a:
                    ce:ee:9a:67:61:08:e6:8d:db:16:d4:bf:b5:7d:46:
                    34:5e:a7:52:73:df:0f:f8:3e:52:72:ff:58:c4:2d:
                    70:95:a8:d4:17:07:e0:e8:68:ac:21:42:a0:c9:a2:
                    1f:f5:67:1a:f3:c2:1f:88:2b:f6:07:68:56:7c:76:
                    b3:2d:fd:8f:f0:61:41:c8:9f:a1:99:28:85:18:12:
                    64:8d:5f:2b:22:63:e3:72:f9:70:c2:10:45:f3:51:
                    8e:75:1a:36:13:33:b7:5f:06:14:f1:c1:fe:bc:fd:
                    fa:e8:9a:f2:19:a5:72:36:07:70:ac:f5:b2:ac:fd:
                    41:f6:a4:90:66:80:62:f8:1d:a5:ad:7c:0b:ed:2a:
                    30:e8:1f:0e:d2:83:80:7b:3e:3b:3a:00:c0:94:59:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:12:32:BB:3C:94:41:5F:41:62:0C:7E:95:14:7E:1D:71:DF:BF:48
            X509v3 Authority Key Identifier:
                keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:34:66:ed:84:b0:c6:f0:95:0a:39:c1:fd:8a:de:90:e9:56:
         bd:08:66:c2:c6:bc:a1:85:54:5d:a0:31:15:09:b5:51:6f:4b:
         a0:5c:63:42:9f:10:40:f7:d2:21:ca:74:b2:0f:e1:88:72:88:
         4a:48:44:f5:54:0d:3d:dd:92:b7:b4:8e:cf:82:5e:59:e8:30:
         2a:d3:f5:b3:3d:22:bc:e3:61:63:88:df:9c:71:09:4a:41:5e:
         b4:09:51:a1:3f:d7:82:0c:5b:a8:c4:07:07:73:85:40:fd:1d:
         49:79:5f:f3:f6:78:6c:82:29:8c:5f:e2:f6:c9:05:af:a7:27:
         3f:92:f5:08:a3:05:a1:74:06:05:54:8f:98:57:b4:9e:83:35:
         28:11:78:01:9b:47:b8:50:fd:49:8a:98:8d:b9:cb:15:a5:27:
         36:9d:09:2e:f4:ce:f8:08:d4:03:35:c9:5f:fc:4a:27:7c:fc:
         d0:ae:dc:ff:f2:f7:ea:00:98:dc:fd:49:45:91:48:7b:78:df:
         b2:8e:76:25:00:56:28:62:61:e0:5f:d7:3c:ff:2c:f5:74:5f:
         aa:ec:aa:7a:97:95:86:a5:6c:73:de:08:46:02:dd:1a:61:68:
         12:1d:fa:b3:ce:34:f7:41:64:60:5b:94:f7:56:79:02:d8:2c:
         db:f9:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:18 2026 by rpki-client