Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File:                     NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier:          K80f6gUtsCQeupGSixiJ2cF9ksqVDDPmBzserPXAOhg=
Subject key identifier:   FD:58:AA:F9:DF:DB:76:BA:92:93:61:2E:17:4B:7B:07:2C:78:0E:2F
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer:       /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial:       019F18676AF5FF652EBEA49D1E5F1E04EA67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 12:00:58 +0000
Manifest this update:     Tue 30 Jun 2026 12:00:58 +0000
Manifest next update:     Wed 01 Jul 2026 12:00:58 +0000
Files and hashes:         1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=)
                          2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: fBPqGfmx4aIUg/yqMDijBHafHGDMNEmwxkvI3WllRGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:6a:f5:ff:65:2e:be:a4:9d:1e:5f:1e:04:ea:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
        Validity
            Not Before: Jun 30 12:00:58 2026 GMT
            Not After : Jul  1 12:00:58 2026 GMT
        Subject: CN=fd58aaf9dfdb76ba9293612e174b7b072c780e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:25:c7:c8:f9:a4:99:10:e4:77:91:6c:01:
                    81:b5:36:a2:5c:65:24:ab:35:3b:ff:6e:45:f2:41:
                    f9:ed:74:88:3e:a7:0a:82:10:20:ee:0a:37:d9:8c:
                    c7:68:92:1d:f6:48:97:2b:b6:ee:5c:dc:33:6d:47:
                    47:d1:c0:a2:00:c3:48:9f:be:92:e4:da:67:9d:91:
                    e3:20:01:7f:8a:db:17:c2:40:68:fc:a4:b6:04:60:
                    82:2b:15:ca:2f:90:87:c4:93:48:5f:94:6f:ac:3e:
                    18:c2:39:c2:fa:ca:c7:d2:04:5d:ef:e9:3f:de:b8:
                    7a:ee:e4:71:39:db:56:13:a0:aa:66:83:26:b7:ed:
                    c9:f9:75:19:45:c8:70:66:b0:3b:82:bb:46:57:8c:
                    ce:6f:14:50:0b:dd:6f:ff:ce:1a:3d:67:71:e0:29:
                    79:11:70:15:94:75:91:a0:d6:f4:c1:d4:ac:a2:17:
                    69:d5:19:92:63:c3:b0:00:f1:17:2a:28:b5:b1:c2:
                    ee:63:97:80:81:e7:f7:5a:f0:bb:31:62:d4:6f:dd:
                    75:61:d9:97:e0:36:0d:46:a5:02:6e:f3:d0:6c:80:
                    b4:a9:ec:49:ac:29:79:29:f8:f4:3a:6a:a0:97:9e:
                    2b:33:3f:37:f7:8b:f6:1a:7e:49:fe:3d:bd:55:b0:
                    75:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:58:AA:F9:DF:DB:76:BA:92:93:61:2E:17:4B:7B:07:2C:78:0E:2F
            X509v3 Authority Key Identifier:
                keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:30:d5:3c:1d:f2:f4:3c:6c:79:83:0f:02:8e:07:45:a9:ec:
         a7:a6:ea:84:4a:bb:cf:e5:e7:57:b9:92:a5:0c:ab:96:da:1e:
         3d:4d:20:ad:61:07:22:a4:3c:4a:d4:9f:bc:ed:a2:05:4b:d5:
         78:2a:27:64:b9:ae:3e:78:5c:fd:8b:b1:2c:49:a4:12:6e:7c:
         18:7a:28:f0:4c:66:a4:77:4d:b9:ca:a6:ce:84:74:9a:ea:cf:
         c5:d5:61:91:5a:c1:d9:a3:08:91:73:05:ef:43:1b:8e:d2:5d:
         17:68:bd:39:26:fb:f5:a4:18:6a:ca:d7:eb:7b:ee:17:26:df:
         bf:d2:88:47:e8:d9:ca:10:fc:a9:cd:22:5a:0a:1e:f2:7f:b1:
         ab:52:24:94:79:0a:69:31:44:55:ee:0f:d3:33:f8:8a:9a:a9:
         94:c3:c3:09:da:83:b1:12:a5:26:3b:98:38:7c:a3:70:67:f2:
         4c:e6:98:fe:2a:55:58:ef:dd:cb:9c:f8:1f:c4:6b:b9:8a:f1:
         53:68:35:e1:8b:50:e6:af:c9:37:c9:4e:74:27:67:b7:15:38:
         16:66:a8:51:2f:75:79:84:fe:e3:32:e5:14:a9:fa:67:fc:a0:
         f9:b0:8a:fc:46:e2:96:12:3b:b8:55:32:4d:3b:fe:17:51:a7:
         5f:12:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:23:46 2026 by rpki-client