Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          zEJy3GGW3Ziz+LAU86R9jTHw8Ro9bmh9GsaNSZ6U4lg=
Subject key identifier:   FA:50:D0:DD:99:19:65:57:0E:52:32:D8:54:E1:B1:80:1D:7D:A8:D7
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019ECCA8FFEB6120903412998E30B262EE28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          1965
Signing time:             Mon 15 Jun 2026 19:01:28 +0000
Manifest this update:     Mon 15 Jun 2026 19:01:28 +0000
Manifest next update:     Tue 16 Jun 2026 19:01:28 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: t1s2jaLlZF0bi4/LXkyrof1kjKfYwqn0UOS0aoBQgps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Jun 2026 19:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:cc:a8:ff:eb:61:20:90:34:12:99:8e:30:b2:62:ee:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Jun 15 19:01:28 2026 GMT
            Not After : Jun 16 19:01:28 2026 GMT
        Subject: CN=fa50d0dd991965570e5232d854e1b1801d7da8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:ee:7d:e9:a9:40:62:e4:14:b2:fc:2d:f1:
                    66:fb:71:51:6f:d6:9d:bf:e0:78:fe:69:e0:57:90:
                    ea:2b:92:a3:f3:45:76:88:7e:9a:f4:74:52:f6:08:
                    fe:12:6c:60:8f:87:cd:d0:b2:be:9e:29:4b:4d:f9:
                    21:bb:f7:f2:8a:28:97:ac:ed:ff:52:33:74:43:bf:
                    fe:b0:40:05:61:d2:13:f1:fb:22:ce:45:0a:72:95:
                    24:3c:c7:f7:5d:fe:24:f4:88:f7:a9:0b:68:5d:bc:
                    89:15:30:89:a3:1a:a5:75:a9:03:97:fb:d2:36:1c:
                    7a:ab:8a:7f:0b:43:b0:55:e2:1f:e5:f3:c4:5c:70:
                    94:67:58:a9:db:f4:93:65:a6:25:5b:8b:64:cf:04:
                    17:b7:72:7c:05:5c:14:8c:74:08:2d:6a:e4:23:a7:
                    e5:47:32:bc:b7:51:12:00:fe:c9:29:98:4e:5d:95:
                    80:47:29:88:5b:b4:d4:b8:61:a5:ab:c9:f8:55:2a:
                    5b:5a:a4:da:0a:ea:d0:c2:61:bc:e3:56:45:cc:53:
                    20:ed:c3:51:fe:1f:4c:dd:d4:db:37:19:6f:30:15:
                    0a:31:63:20:8a:1a:ee:dc:d7:28:5c:96:a7:89:e8:
                    d1:ef:64:d5:04:02:42:4c:c7:65:0e:27:89:27:61:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:50:D0:DD:99:19:65:57:0E:52:32:D8:54:E1:B1:80:1D:7D:A8:D7
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:39:4c:46:00:1e:ac:29:8c:5f:a4:df:a1:a6:9b:7a:f9:
         1f:82:dd:91:0d:5e:48:42:3a:ee:1b:ad:f0:0f:81:4d:f6:54:
         5a:0d:1c:ab:15:52:c0:da:c1:bc:c6:14:25:ed:d8:3b:f4:d7:
         78:51:22:01:f0:56:f1:a3:dd:53:92:d5:f3:87:d7:af:27:24:
         db:9c:bc:29:8a:1b:cf:e8:e2:c8:43:a3:68:0e:5d:57:d3:1e:
         a5:a2:ca:c0:29:aa:44:5a:3e:5a:04:22:b2:61:31:85:eb:1d:
         e9:b2:f0:a6:a9:1a:fd:ba:de:a0:02:47:eb:28:3b:01:0f:95:
         3d:ef:3f:34:54:8a:b2:fa:08:58:8b:87:5a:db:21:e9:59:91:
         57:66:45:74:e0:c6:8e:1d:e9:66:19:7c:1f:45:77:c2:9b:1b:
         59:90:be:55:1d:d6:c6:3f:30:77:af:51:c4:0b:60:02:1d:ad:
         2a:2e:a8:5e:03:ad:79:61:f9:6b:c4:c1:5e:f1:39:82:e1:7c:
         3e:94:62:41:9b:41:2d:3a:33:db:92:f2:b8:f6:e6:d5:3f:e6:
         6b:bf:a2:44:a2:e9:ed:d0:8a:53:58:90:80:e1:d3:f1:9e:49:
         d1:50:66:7c:c3:5b:3c:0b:9c:ef:75:28:03:42:40:f6:d4:a0:
         94:24:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 04:47:37 2026 by rpki-client