Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
File:                     ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft (raw, json)
Hash identifier:          KfVgZvJeMVfmR7Ywn0gbCmjKVdGMC7frizigT6xj3A4=
Subject key identifier:   5F:3A:1F:24:0A:B4:B6:9D:C5:17:DE:14:AE:8F:C1:57:79:37:10:7E
Authority key identifier: 10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
Certificate issuer:       /CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Certificate serial:       019F1943764096F5C712C6C9B056D89EFC4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
Manifest number:          17A5
Signing time:             Tue 30 Jun 2026 16:01:19 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:19 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:19 +0000
Files and hashes:         1: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl (hash: lSIJeV9soRjjosHB6u6f12H7vGbSH6wniiWWPOqmRAY=)
                          2: JXyToVHzoKcPgiftey3VODfKzHA.roa (hash: hh+ZXLITA+1er8CwLKQe1+Z8gZePfKgzblszCECG/4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:76:40:96:f5:c7:12:c6:c9:b0:56:d8:9e:fc:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
        Validity
            Not Before: Jun 30 16:01:19 2026 GMT
            Not After : Jul  1 16:01:19 2026 GMT
        Subject: CN=5f3a1f240ab4b69dc517de14ae8fc1577937107e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:81:4f:4f:22:0c:22:26:34:fc:6d:5e:cd:86:
                    dc:e0:21:ee:44:3c:d6:aa:f3:39:16:63:3f:30:4d:
                    07:fa:df:15:7a:68:89:dc:55:1a:c5:30:fa:dc:5b:
                    b6:d6:83:78:66:0e:05:77:6d:b3:82:3b:8e:c2:42:
                    d9:ad:33:61:14:5e:f7:4f:7e:7c:b6:fb:d6:8c:65:
                    50:78:e6:88:95:c5:e9:cf:2d:08:45:47:3a:72:e0:
                    db:6e:08:1a:07:b6:ca:56:a9:4b:02:0f:6f:a4:5e:
                    c0:d0:52:53:32:8e:b0:90:61:6d:cc:51:5a:24:2a:
                    95:c9:e1:72:38:f2:93:85:aa:35:a1:6d:2f:ba:2b:
                    75:f6:3c:9d:37:db:0b:1b:55:7b:18:ae:60:b1:76:
                    a5:7b:d7:ec:09:b4:05:83:e7:be:56:6c:0d:08:5f:
                    b3:b1:f2:c1:86:8c:94:09:32:44:c0:fa:e9:71:7a:
                    0e:49:cd:cc:27:a6:47:6a:db:5d:89:ec:4e:71:88:
                    66:78:99:60:d5:80:99:a1:b1:41:09:79:72:9f:95:
                    82:7a:59:c7:b5:b7:9e:07:bc:e1:92:a5:48:f0:77:
                    dd:90:bd:d8:e9:9b:53:64:89:1a:0c:d4:42:43:7b:
                    6c:98:54:6a:fb:4c:8a:d6:5b:df:69:27:1b:81:53:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3A:1F:24:0A:B4:B6:9D:C5:17:DE:14:AE:8F:C1:57:79:37:10:7E
            X509v3 Authority Key Identifier:
                keyid:10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7c:c5:d7:21:c9:5a:ed:a1:c3:7f:82:f7:b7:1c:d5:a5:d4:
         bc:24:7e:28:3f:97:e5:3a:54:b9:91:b7:96:b1:ab:de:ba:e7:
         2d:4d:f6:34:33:b6:1f:b1:1d:46:eb:85:d4:20:0f:ea:33:c0:
         6b:de:3a:18:11:92:db:08:7f:bd:1c:66:10:74:77:8b:dd:a1:
         a5:38:00:bf:9b:48:8b:10:1e:6b:a4:de:a1:61:e8:70:da:18:
         a5:fa:c9:a2:70:0c:30:b7:dd:1e:56:f6:ff:fd:c8:56:4c:b3:
         1e:16:c9:40:4b:a4:62:97:95:79:bb:bc:3b:88:a2:d1:ff:ab:
         4b:c0:86:fb:ea:5b:cd:21:2b:01:db:a2:e1:50:19:3d:26:60:
         42:02:e5:20:38:0b:74:c7:d6:b8:a7:e6:5b:d1:7a:32:96:47:
         17:75:11:d7:de:b0:00:90:05:5e:6c:91:15:af:f8:ee:26:74:
         88:f1:e0:0c:d6:28:7f:60:8e:36:2a:62:26:81:45:b6:08:11:
         70:0a:0e:db:b7:df:26:42:53:a2:6e:03:3a:3b:e7:ee:f9:b5:
         54:c4:01:d6:60:e4:4f:fe:6c:50:4a:4c:bb:6d:84:1c:60:d2:
         fa:49:10:a1:ae:ac:9c:f1:62:21:d7:86:bd:54:be:f1:8a:57:
         15:70:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:57 2026 by rpki-client