Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
File:                     60GVbRLcuYK-1HqfrEp-SOd4fHk.mft (raw, json)
Hash identifier:          KAX2vRwJ1+JHFjKTjF1b/1d/sFqpEkHV+XUUaYjYeog=
Subject key identifier:   0F:D3:73:B7:D0:77:72:3F:8F:29:CD:A4:00:C4:D2:80:9B:C3:9A:DD
Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
Certificate issuer:       /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Certificate serial:       019F17C2674DEBB506EAF1246A67053A69EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 09:00:44 +0000
Manifest this update:     Tue 30 Jun 2026 09:00:44 +0000
Manifest next update:     Wed 01 Jul 2026 09:00:44 +0000
Files and hashes:         1: 60GVbRLcuYK-1HqfrEp-SOd4fHk.crl (hash: Io6oD5qfxEqeM229xLixLnyBpMA7HAb80muZwTILQXQ=)
                          2: rQtAzEA3IuNuehdcnThK_xXRMt4.roa (hash: cRYFONZaNIX4ZtEkAVHlLM1U8vITX1Zqs8J2LZhQlqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:67:4d:eb:b5:06:ea:f1:24:6a:67:05:3a:69:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
        Validity
            Not Before: Jun 30 09:00:44 2026 GMT
            Not After : Jul  1 09:00:44 2026 GMT
        Subject: CN=0fd373b7d077723f8f29cda400c4d2809bc39add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:1a:2b:fb:f4:7f:d3:66:7c:b6:07:52:6b:
                    71:01:26:c1:56:14:cf:8d:b6:dd:71:06:13:80:dd:
                    8f:98:7d:f2:34:03:99:fc:98:fc:76:88:3a:26:05:
                    5b:15:2d:f8:3e:dc:ee:36:58:24:5e:fd:82:0d:0a:
                    bd:57:45:05:83:26:29:d7:4f:d9:33:06:a3:7b:43:
                    51:1a:bf:53:8d:74:08:df:2c:a9:30:fa:a9:62:4f:
                    07:ba:b7:8e:53:f0:41:d7:c2:c3:a5:5c:bc:f2:1d:
                    62:3d:25:11:81:6a:65:11:98:a2:ed:4e:5f:b7:f9:
                    42:df:10:b6:09:51:67:25:48:dd:f0:47:4a:2c:8c:
                    5f:c3:7a:cc:8c:d0:71:f1:86:fa:df:3a:3b:a3:91:
                    17:a7:79:49:a6:0f:45:70:d0:aa:94:97:e9:db:98:
                    43:6c:9c:09:1d:c4:a5:82:81:df:e0:4b:45:71:cd:
                    36:d7:8c:9a:95:78:00:b7:ce:93:40:33:71:3f:8b:
                    d0:13:36:e8:8a:47:48:f8:44:79:df:b6:67:1d:25:
                    b7:f9:94:03:c6:4e:b0:07:9e:bd:6b:01:94:29:58:
                    45:a9:b4:32:e1:0a:77:7f:a1:0d:b8:4e:45:18:c0:
                    95:e0:cd:a2:0f:90:0d:7d:12:0c:c0:2d:db:89:25:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D3:73:B7:D0:77:72:3F:8F:29:CD:A4:00:C4:D2:80:9B:C3:9A:DD
            X509v3 Authority Key Identifier:
                keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d4:2e:20:2d:d7:66:f0:64:cf:68:7a:81:76:6d:e7:a7:70:
         07:7e:af:e2:5d:54:b8:f8:42:2d:a5:3d:98:24:c5:d1:e9:b0:
         1c:3f:51:eb:c4:b1:dd:06:56:5d:fa:4b:eb:02:23:d6:2c:b2:
         3d:26:7d:33:34:19:ce:84:6e:7c:61:5e:86:4d:92:da:3b:9c:
         0f:81:cf:ec:f3:3d:86:78:6d:82:cc:6f:fb:43:c3:42:ff:2d:
         f9:66:43:01:bf:02:19:69:8b:32:6b:05:c7:2c:0c:60:8a:f6:
         12:a8:19:d9:29:f8:e5:1d:77:6c:6b:4a:ec:18:de:9a:25:88:
         c4:76:3a:a3:53:b9:a6:f3:f1:06:1e:f3:b7:ec:26:5a:c1:5b:
         b1:08:97:82:2f:92:13:2b:d3:e9:82:be:a9:8e:04:43:f2:62:
         6d:5d:c1:90:d9:bb:a8:8f:0c:51:c2:42:76:e7:dd:29:3f:13:
         f9:c9:30:f6:41:87:3e:12:e3:2a:0b:c3:df:ca:82:98:bd:d3:
         c3:20:8a:d8:74:c1:65:c8:88:76:89:f8:e2:aa:e9:4c:0a:ae:
         5a:74:8e:7f:3b:f4:6e:3d:d6:60:e3:c0:f4:ea:7d:cc:01:9a:
         19:ae:5e:1f:3c:22:b9:20:11:a4:24:fe:d2:cc:18:b3:33:15:
         51:55:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:10 2026 by rpki-client