Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File:                     1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier:          txeVNVJ64s7cp5WTn6WAlE1i+x8kRiGCHqa986gaqoE=
Subject key identifier:   AB:83:4B:2F:E6:F0:5D:32:43:DB:E8:2B:0D:C3:49:2C:69:48:24:87
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer:       /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial:       019F10E52E095F1EBE8613987F6D8039BCF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number:          198C
Signing time:             Mon 29 Jun 2026 01:01:22 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:22 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:22 +0000
Files and hashes:         1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: uuglpfDkwgh5cKgmkDGEX0KQ4bk+N8h+9ZL2gIL337o=)
                          2: 26QbXt6b5zHilNs1q7yDX1cYMsk.roa (hash: Tt6aUkRO9JUaW0NjcmeQVqAa3xnUCz7lJRJu/2xB7IE=)
                          3: Ezcrtmwo4iwn5JbCMNVESXorExE.asa (hash: QvhpQm5ictpOGI0Idhy4A39NC9Kpsm0fYAvwcjaUI04=)
                          4: ML7UkJFE6LlihRpTm5h-PoqRSVs.roa (hash: g+qfBPw45UpoVjFRiQZEbaH4MwvqddJi1qo+sHrhaFE=)
                          5: eU7ipBheHWkpemRqitvR9YpXrt4.asa (hash: jtdQZM+91cfrM18Rhgx+NL45kKIXn9gnr1VUiwGfKOM=)
                          6: lGdnHQ9JzbcCAf7aCdi2AtQWylc.roa (hash: /SsAkMvFx9VtM23+Xr14ddTXFb4dIacWZgb2bJ1bpX4=)
                          7: sk3Ng7M09_merP38zbn6ZinhfyY.asa (hash: Hg4VBYh1/4iAG5ztUnRTsrSfK7i/9u4qOnxuxq++vNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e5:2e:09:5f:1e:be:86:13:98:7f:6d:80:39:bc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
        Validity
            Not Before: Jun 29 01:01:22 2026 GMT
            Not After : Jun 30 01:01:22 2026 GMT
        Subject: CN=ab834b2fe6f05d3243dbe82b0dc3492c69482487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:23:9d:4a:c1:50:d2:9b:bf:3e:9c:c5:46:
                    0a:86:24:db:cf:23:bf:a4:3a:dd:23:3a:59:7b:0e:
                    7c:15:6d:2f:67:dd:40:a6:32:6c:3a:59:93:ee:54:
                    3e:c4:bb:58:60:7b:c1:73:19:61:85:11:0b:e7:8d:
                    d8:82:02:63:a5:3f:f1:c8:13:11:23:83:ea:a4:36:
                    f6:92:d0:c3:bf:0a:c0:39:24:6e:20:22:67:0e:b4:
                    9c:84:9b:08:5f:70:97:b8:f6:0b:00:de:33:48:af:
                    29:78:c9:f3:5c:53:99:91:eb:93:4f:d4:98:b0:55:
                    cc:33:96:c5:f8:57:fe:7a:83:9d:bf:dc:31:4e:fd:
                    ba:34:09:e8:b7:48:71:cb:31:05:72:2c:ad:a2:46:
                    bc:6a:fc:43:24:9b:00:80:20:18:fa:3e:cc:24:d9:
                    2d:56:b8:2f:f9:2b:d0:45:bc:b9:a0:8d:00:94:8a:
                    cf:16:24:38:ec:29:b8:fb:73:7b:20:1e:da:fa:ef:
                    65:49:9a:c7:df:2f:24:a7:4f:ba:11:2a:b4:b1:b1:
                    b4:56:5f:fe:9c:bf:6d:4f:e8:fa:f4:93:92:60:ba:
                    26:25:aa:2e:a7:da:c4:fd:f0:2c:3d:48:17:bc:bf:
                    98:81:f1:31:89:84:27:97:f6:1c:4a:0e:66:b7:93:
                    ba:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:83:4B:2F:E6:F0:5D:32:43:DB:E8:2B:0D:C3:49:2C:69:48:24:87
            X509v3 Authority Key Identifier:
                keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:67:86:8d:2a:ba:39:16:f1:1c:10:3f:87:c8:75:ec:89:6e:
         03:79:c3:2f:b9:01:0d:12:dc:cb:5a:1f:dd:b5:07:07:bc:9e:
         bd:f7:7e:58:16:96:6f:fe:7c:2b:4d:59:06:c1:39:c9:f2:14:
         53:11:44:40:79:22:f3:a4:55:b3:04:63:1c:78:a1:b4:1d:87:
         d7:98:e7:10:a6:e6:d8:7f:fd:06:ba:9b:83:74:a6:20:02:06:
         41:de:6e:e2:b8:e2:62:73:0f:8a:fc:cb:0e:37:0a:60:5a:16:
         37:3c:90:78:dd:f1:51:c6:7e:fa:6c:82:c1:7c:80:96:f8:90:
         9c:d9:ed:5e:2f:39:e3:33:31:d0:c0:e8:66:ff:64:da:0c:32:
         9a:f8:cc:f6:73:bf:34:72:5e:6b:48:0b:9e:a1:54:bd:e7:8a:
         30:f8:02:cd:91:9b:92:0d:21:c9:ff:d0:89:26:b1:1b:32:1d:
         ba:e4:df:a9:e0:30:13:f2:13:01:93:27:65:a7:bb:a3:d1:49:
         4f:06:75:da:0c:40:d6:e2:39:81:23:68:6b:6e:d4:30:4f:a5:
         4f:7f:30:c9:dd:75:26:2d:37:3d:4b:2a:fa:30:6f:b4:0f:fc:
         fd:09:5c:6f:13:24:e6:ac:7a:db:d3:33:07:f8:38:81:b9:7e:
         98:81:df:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:30 2026 by rpki-client