Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File:                     1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier:          ncdLWm2vIvsRm48IBlHJO6PAmlWK6XNAPYhvHk5j7Zc=
Subject key identifier:   3B:E3:D3:87:CD:B6:D6:74:EF:13:F7:FB:16:65:5E:D8:39:0B:B7:BC
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer:       /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial:       019F12D40F0E591193FB031C8E80626A8CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number:          1919
Signing time:             Mon 29 Jun 2026 10:01:55 +0000
Manifest this update:     Mon 29 Jun 2026 10:01:55 +0000
Manifest next update:     Tue 30 Jun 2026 10:01:55 +0000
Files and hashes:         1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: Wclq2eAVal+859Z4KbDo/3Nx14mprnsujKYsGmnhlAk=)
                          2: GB_a4b1kVxMMUZoZCCtwC17cEDo.roa (hash: 33UFtMiUsHKZAxOVuIqQu69SANl3j9uJJ2Mz9LnCmac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:d4:0f:0e:59:11:93:fb:03:1c:8e:80:62:6a:8c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
        Validity
            Not Before: Jun 29 10:01:55 2026 GMT
            Not After : Jun 30 10:01:55 2026 GMT
        Subject: CN=3be3d387cdb6d674ef13f7fb16655ed8390bb7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:41:cb:d3:92:8b:00:a9:7c:c7:4b:87:28:45:
                    d0:ce:30:df:7c:97:61:09:66:0f:f1:ff:62:a3:97:
                    79:dc:9f:b8:f7:86:de:27:1e:97:0a:e1:14:2d:4f:
                    53:55:bc:86:ef:9a:f7:7f:43:56:15:2f:95:13:e3:
                    d1:35:03:7a:f2:31:56:76:39:54:90:1d:49:e6:1d:
                    9e:de:d3:0c:64:2c:2f:ac:8f:4b:a3:c2:86:6b:10:
                    c8:dd:a3:5a:79:02:33:ea:ec:97:58:24:41:e7:e8:
                    9c:96:07:61:ec:47:85:12:9e:63:1b:cc:a1:83:8c:
                    57:00:a9:38:87:aa:d7:de:7e:2b:55:e7:60:53:bf:
                    38:0a:f3:a2:03:a2:84:2b:f6:33:ea:f9:4f:b7:f0:
                    ae:86:f3:e7:c6:e8:81:47:d6:6d:4f:23:f4:28:95:
                    11:51:1a:e7:ac:27:a3:c8:43:6c:cc:2a:d4:b2:e2:
                    fd:d8:9a:38:cc:2a:a1:a3:61:05:4b:67:7e:84:7a:
                    2a:b8:b7:67:80:44:ec:94:70:75:c8:e5:dc:3f:32:
                    d2:41:95:5f:44:fc:b4:47:6f:35:61:e5:42:85:40:
                    b5:e0:9f:9d:35:d8:18:81:d8:ae:47:eb:e5:f4:1c:
                    0e:30:17:46:ff:9f:b2:fc:b5:64:81:15:d8:b7:9d:
                    ee:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E3:D3:87:CD:B6:D6:74:EF:13:F7:FB:16:65:5E:D8:39:0B:B7:BC
            X509v3 Authority Key Identifier:
                keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:04:c6:ba:0b:4f:3e:c0:b5:50:59:dd:82:5a:1c:68:e1:b3:
         ed:f8:bd:b3:2d:03:5a:78:1a:b8:14:5e:27:2d:64:04:f4:d6:
         37:e8:b4:53:72:84:41:f2:c1:c8:3d:1d:a3:4c:ef:07:8d:9f:
         53:c7:33:09:c8:36:1f:70:21:c2:bd:0a:b8:ac:08:8d:3f:4a:
         1b:e7:0f:37:30:d8:8b:2e:78:3b:01:13:a4:eb:64:63:86:14:
         7b:29:56:f2:23:fe:65:b4:20:86:7d:d6:31:d0:95:eb:d7:e4:
         c2:1b:4e:7e:af:13:b9:fe:40:e4:25:13:99:d8:2c:88:59:21:
         31:3d:51:9f:ee:37:39:45:73:3e:4b:5c:5d:33:5f:53:9a:f8:
         d7:2d:aa:2b:ad:86:7d:91:f4:96:c9:b2:68:58:2c:2c:82:0e:
         eb:7a:78:c1:7d:33:9b:ec:11:68:02:08:3b:63:47:74:96:b0:
         69:5b:f3:37:e8:d6:4e:83:61:3b:24:2e:86:69:84:d0:7d:06:
         21:d3:4b:3a:19:79:9b:c6:92:74:a9:cc:8a:e3:c6:c4:a4:e0:
         da:0a:bc:da:9c:78:8e:74:c9:43:76:c7:10:10:f9:ce:66:88:
         a9:f5:f2:80:61:75:fc:0a:17:35:0a:fc:09:83:a0:7c:ab:9c:
         d3:62:63:78
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8S1A8OWRGT+wMcjoBiaozrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTE2OTA5Y2E0ZGEzOTkzNWVhYjlhZjAzOGI1OGE1MjMz
MTIyYjMwHhcNMjYwNjI5MTAwMTU1WhcNMjYwNjMwMTAwMTU1WjAzMTEwLwYDVQQD
EygzYmUzZDM4N2NkYjZkNjc0ZWYxM2Y3ZmIxNjY1NWVkODM5MGJiN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkHL05KLAKl8x0uHKEXQzjDffJdh
CWYP8f9io5d53J+494beJx6XCuEULU9TVbyG75r3f0NWFS+VE+PRNQN68jFWdjlU
kB1J5h2e3tMMZCwvrI9Lo8KGaxDI3aNaeQIz6uyXWCRB5+iclgdh7EeFEp5jG8yh
g4xXAKk4h6rX3n4rVedgU784CvOiA6KEK/Yz6vlPt/CuhvPnxuiBR9ZtTyP0KJUR
URrnrCejyENszCrUsuL92Jo4zCqho2EFS2d+hHoquLdngETslHB1yOXcPzLSQZVf
RPy0R281YeVChUC14J+dNdgYgdiuR+vl9BwOMBdG/5+y/LVkgRXYt53uXwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDvj04fNttZ07xP3+xZlXtg5C7e8MB8GA1UdIwQY
MBaAFPqhaQnKTaOZNeq5rwOLWKUjMSKzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xRnBDY3BObzVrMTZybXZBNHRZcFNNeElyTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMDQ2NmY4LTMzMGQtNGFjOS1hYzE4
LTkyMGI1MmE5ZjZhNS8xLzEtcUZwQ2NwTm81azE2cm12QTR0WXBTTXhJck0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQyLzA0NjZmOC0zMzBkLTRhYzktYWMxOC05MjBiNTJhOWY2
YTUvMS8xLXFGcENjcE5vNWsxNnJtdkE0dFlwU014SXJNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgTG
ugtPPsC1UFndglocaOGz7fi9sy0DWngauBReJy1kBPTWN+i0U3KEQfLByD0do0zv
B42fU8czCcg2H3Ahwr0KuKwIjT9KG+cPNzDYiy54OwETpOtkY4YUeylW8iP+ZbQg
hn3WMdCV69fkwhtOfq8Tuf5A5CUTmdgsiFkhMT1Rn+43OUVzPktcXTNfU5r41y2q
K62GfZH0lsmyaFgsLIIO63p4wX0zm+wRaAIIO2NHdJawaVvzN+jWToNhOyQuhmmE
0H0GIdNLOhl5m8aSdKnMiuPGxKTg2gq82px4jnTJQ3bHEBD5zmaIqfXygGF1/AoX
NQr8CYOgfKuc02JjeA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:30:32 2026 by rpki-client