Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File:                     I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier:          dlO9tJt2JtUSXXd30rlqxzVDf0xQIyjP1NvxnqxefG4=
Subject key identifier:   D7:A6:E0:49:3D:E4:E4:6E:6C:F2:B9:BA:98:E9:FF:12:BD:80:2F:48
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer:       /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial:       019F1265D70E030AE3C2C1D2E8F0DA164950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number:          198B
Signing time:             Mon 29 Jun 2026 08:01:31 +0000
Manifest this update:     Mon 29 Jun 2026 08:01:31 +0000
Manifest next update:     Tue 30 Jun 2026 08:01:31 +0000
Files and hashes:         1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: P53kpE3ggcxoIyu/ASTj22Rj8rO4aB6YEvUCe34IDkc=)
                          2: OnKBtwyvSQXenD2TFYRv7-EZThE.asa (hash: BYl5J46d6e9LW3J6fkLa75ROxvNZoL/fmWrmEBx/+H8=)
                          3: eQagxd9y-zyf15AwiGOUqcIDYX8.roa (hash: 4Aq8ZIMpmBNLem9RkyeMnEc3h/5SZq5EDRDofy2Q8qw=)
                          4: t-vXa-FgBTExEw8Y2W6I04Ekx28.roa (hash: 1+raPg9CaPP7aRjV7XG3ZL5fmpSDQMaNl0GRs/xqZ3k=)
                          5: upnWlRa5n55UGIS-uedbjFxnuTc.asa (hash: VoYN03JzVjSDUqUBzQyjBuxdD0CesiCZ5FDXvsUuaMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:d7:0e:03:0a:e3:c2:c1:d2:e8:f0:da:16:49:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239c45e43625522080aec53952989a13a28abd00
        Validity
            Not Before: Jun 29 08:01:31 2026 GMT
            Not After : Jun 30 08:01:31 2026 GMT
        Subject: CN=d7a6e0493de4e46e6cf2b9ba98e9ff12bd802f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:85:dc:24:b8:eb:2f:85:3b:97:c9:cf:b3:
                    71:e0:97:c3:53:31:c1:66:71:b9:22:d4:79:ce:56:
                    8f:77:b3:65:75:2f:f4:92:f7:19:3c:7f:83:b6:7f:
                    90:e1:9a:8d:8a:7a:89:9a:14:8f:c1:b2:59:49:b3:
                    69:06:3b:03:35:83:e2:ec:bd:9b:df:7c:11:8a:9b:
                    ce:8c:20:66:2f:28:e2:2b:6e:7b:e3:76:74:ba:7c:
                    98:8c:7e:9a:13:4d:2f:34:11:21:76:b9:53:a5:50:
                    24:5a:b1:a1:72:ae:86:1a:51:46:37:26:58:5c:d6:
                    85:75:7c:61:3d:51:b5:ee:75:74:a2:43:8b:d7:bb:
                    34:59:43:23:00:a9:61:13:95:17:51:58:8c:e6:5c:
                    74:18:11:c7:39:a7:17:95:01:3c:d5:0f:5b:21:c3:
                    29:ec:55:db:27:ce:24:1a:b7:ac:4a:37:41:f4:be:
                    f9:c2:9f:20:98:cd:7f:68:62:0a:e6:8c:c6:2a:1f:
                    4c:aa:91:61:9d:9f:a0:f5:d1:3c:c5:3f:df:e5:3d:
                    5f:0b:33:ce:75:58:a9:40:26:ab:ec:c6:69:9f:93:
                    63:e8:93:93:3f:45:f1:43:c8:07:41:24:97:2a:15:
                    e2:f4:eb:59:92:46:74:47:f8:40:d0:2e:e8:60:a6:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:E0:49:3D:E4:E4:6E:6C:F2:B9:BA:98:E9:FF:12:BD:80:2F:48
            X509v3 Authority Key Identifier:
                keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b5:47:8f:c3:6b:31:61:62:29:e1:a9:8b:da:98:62:24:9f:
         e4:d9:08:06:6c:4f:41:d3:65:dd:0a:ba:fe:a0:91:e5:d3:c2:
         31:ae:4f:98:8c:0a:33:7f:9b:fd:c9:a1:21:96:0f:87:37:4d:
         5f:73:f6:0c:5f:e5:8c:ca:24:74:1e:c0:fb:2a:29:21:3e:9e:
         d6:7b:b9:19:dc:b2:ac:e9:a8:c4:8a:64:b0:e8:ae:9d:91:2f:
         8a:b4:98:19:61:fc:fa:5c:81:aa:d7:c9:c9:ea:da:70:cf:35:
         5d:98:30:24:55:e6:3b:84:13:5e:0d:ee:ad:ca:4e:80:86:6f:
         5e:2e:8b:54:48:79:ad:1b:67:5a:01:62:90:f5:78:73:ee:57:
         44:81:71:c2:4f:a6:8a:d7:11:4a:b6:2f:82:d1:f6:0e:93:b6:
         5f:9f:b9:ba:17:dd:1c:99:16:8e:19:fb:8b:f7:4e:18:09:88:
         51:9e:50:b9:84:43:61:4e:0d:6b:ec:d9:74:dc:78:1d:ed:19:
         8b:63:0e:bd:fd:c0:37:28:62:c6:51:3e:29:08:e2:a7:6e:b9:
         3e:ac:d4:99:f7:69:87:b5:20:5b:de:21:a2:52:1b:a9:d4:45:
         9a:62:f0:fb:c2:88:83:96:c4:3e:12:3d:5b:05:7f:c5:34:83:
         2e:53:87:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:04 2026 by rpki-client