Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File:                     10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier:          zpw96bN6ReFPEVpFox/oDKEARZbuZIbQeoiqYudSpyE=
Subject key identifier:   F5:86:D8:4A:82:A7:90:23:F2:8A:A7:55:4D:31:9E:14:AE:2C:09:79
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer:       /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial:       019F190C6F096B7170CE43D31BF6E071844A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 15:01:12 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:12 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:12 +0000
Files and hashes:         1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: //YIXG1G7e77pqxS6C7fR+EOPCWQrMA2X21BO7/qITk=)
                          2: bxelCDFcvnlj3q_RHWvXRa9LBvo.roa (hash: 3ikPYI75wofgR7u+U2mor2EPydTGzEdXUY4L1ZgdpHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:6f:09:6b:71:70:ce:43:d3:1b:f6:e0:71:84:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
        Validity
            Not Before: Jun 30 15:01:12 2026 GMT
            Not After : Jul  1 15:01:12 2026 GMT
        Subject: CN=f586d84a82a79023f28aa7554d319e14ae2c0979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:64:fe:91:e2:2d:02:9c:e0:5f:cc:14:e3:
                    40:6f:ac:e5:18:a6:0a:3f:2d:36:b0:2c:4a:88:f7:
                    af:61:7b:88:ed:aa:71:5d:7a:74:ab:0b:74:95:8f:
                    7c:4d:73:72:53:c5:09:d0:a3:a3:5f:61:16:bb:3b:
                    5e:0a:46:61:f2:36:a7:da:a8:1b:f8:f9:c2:e2:5f:
                    5b:eb:88:65:08:6b:b0:39:ae:77:67:cf:1c:1d:29:
                    df:d3:d1:b4:2e:72:6a:58:3e:de:64:30:e0:5b:1f:
                    e0:c9:bb:72:5d:fa:aa:fd:3a:cd:3e:93:33:7f:08:
                    05:10:ea:da:75:4e:a8:e6:9b:d7:a8:86:02:a1:b7:
                    6f:31:7c:12:0e:8d:70:bc:93:a2:a8:8f:9e:dc:af:
                    55:e3:66:66:c9:57:65:31:b7:64:ae:82:78:13:28:
                    ff:17:a2:61:bd:0d:7d:1e:7c:b0:f0:81:6d:e2:90:
                    eb:db:57:58:86:ab:62:df:4d:c0:86:56:36:60:0d:
                    8f:d7:47:ea:94:cf:fe:11:18:64:41:17:35:c9:dc:
                    ae:7e:7e:cb:4e:34:84:ce:9a:04:e6:bc:f7:ae:69:
                    57:bb:da:87:72:75:e3:6b:62:af:f1:bc:9b:d0:43:
                    95:58:46:64:2f:c6:d8:43:c8:3b:68:f7:29:a2:f7:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:86:D8:4A:82:A7:90:23:F2:8A:A7:55:4D:31:9E:14:AE:2C:09:79
            X509v3 Authority Key Identifier:
                keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a6:f2:06:23:fa:59:4f:a8:9a:ec:ca:1e:db:b5:12:22:3d:
         3d:ec:ce:ba:ce:a9:5d:de:2f:77:34:8d:34:8f:5b:60:2f:91:
         22:d6:84:28:42:5e:c2:69:1d:2b:6b:ef:3a:56:31:a5:06:80:
         c4:ff:0e:f2:28:95:10:97:61:0f:6f:28:9f:69:8d:87:2c:0a:
         85:f8:5f:0b:b7:e4:8e:fb:ab:4b:be:af:e3:f6:d1:70:91:f9:
         be:b2:50:f3:8d:f1:60:22:1d:1d:77:77:cf:6b:86:f4:41:da:
         b5:10:79:ee:9b:2c:67:23:27:15:b8:6a:37:eb:23:c8:84:0c:
         54:26:c6:e9:77:f9:65:ca:b8:c0:71:9c:ae:9f:af:35:03:df:
         89:b5:b1:41:99:05:4d:3e:6b:66:40:7c:02:4a:ef:01:4a:67:
         bc:7c:aa:3b:f8:35:3e:ae:05:23:43:e1:65:10:d0:88:28:96:
         23:7f:06:27:26:b7:b6:65:bd:f3:00:bc:3f:1a:30:3f:37:f7:
         6a:c2:d1:ff:15:41:56:6f:cd:8e:9b:b4:f2:91:1d:9c:98:6d:
         9f:6c:98:0c:86:42:f5:d9:92:ad:cc:92:71:2a:56:7e:8e:4f:
         d5:84:58:23:7a:6b:13:2a:9d:fc:76:29:2e:d9:a9:e4:ec:f3:
         6d:1e:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:21 2026 by rpki-client