Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
File:                     Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json)
Hash identifier:          JwFOukBWIeCbabe2XjEj+9OpaYMx12awuzdeFRacQqk=
Subject key identifier:   B2:3D:8E:75:13:F1:12:2D:CB:86:20:6E:6F:5A:6E:4C:91:12:40:7F
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Certificate issuer:       /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial:       019F17C22C65401E3D20A5205812CED1C5D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
Manifest number:          0E21
Signing time:             Tue 30 Jun 2026 09:00:29 +0000
Manifest this update:     Tue 30 Jun 2026 09:00:29 +0000
Manifest next update:     Wed 01 Jul 2026 09:00:29 +0000
Files and hashes:         1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: CwsRfyAOIaCYw1tG8zpWJeNIGzFIws/JjqDcN9yv+cM=)
                          2: eNLpsW8xm79yedbOa3QWuydVW40.roa (hash: A6X88q1hQaY/wfcLvXZ84b3udePUqPcCyXEXa/OfiTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:2c:65:40:1e:3d:20:a5:20:58:12:ce:d1:c5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
        Validity
            Not Before: Jun 30 09:00:29 2026 GMT
            Not After : Jul  1 09:00:29 2026 GMT
        Subject: CN=b23d8e7513f1122dcb86206e6f5a6e4c9112407f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:91:82:a7:10:c9:e4:5f:0d:4d:98:24:98:55:
                    46:69:06:38:5e:1f:13:5f:b7:d2:3d:9d:eb:b4:ba:
                    87:b3:a6:99:d4:4a:e3:8a:b3:54:95:8d:50:4d:2c:
                    6f:d8:3c:b4:b0:04:db:4a:ed:32:ca:45:57:f1:99:
                    32:66:83:52:29:89:d0:ec:f1:19:47:d0:3e:56:ec:
                    63:89:a3:38:62:18:77:57:f8:61:79:fe:32:bb:33:
                    e0:8e:aa:58:41:80:10:ee:ad:ad:5f:f2:1b:19:3f:
                    8c:35:ad:e9:53:59:aa:c2:06:ea:47:28:91:15:4a:
                    1e:91:90:a5:db:dd:37:6f:62:db:29:42:e8:f7:cc:
                    d5:b2:08:74:88:53:dc:f1:f7:06:e3:f6:bf:ac:97:
                    36:04:6e:28:a9:2b:69:81:64:65:bb:c1:b0:6c:99:
                    c1:4f:ec:32:c7:ec:4f:ff:54:67:6b:a0:66:a1:bf:
                    42:b0:a5:46:62:38:a9:d3:16:ce:b0:de:9f:5d:fb:
                    2b:6f:58:80:97:42:16:f0:e4:41:2a:d8:4b:fb:fe:
                    3d:08:b0:c8:9a:4e:b8:da:fd:90:0f:e6:9c:37:88:
                    85:67:36:a1:f2:c8:36:c3:5d:e8:ea:db:90:be:3e:
                    55:d4:27:23:c6:a2:7c:2e:e4:86:66:2e:0f:1c:4e:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3D:8E:75:13:F1:12:2D:CB:86:20:6E:6F:5A:6E:4C:91:12:40:7F
            X509v3 Authority Key Identifier:
                keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:28:13:dc:9d:ac:d6:2d:80:43:99:38:cf:a3:ca:8f:d8:57:
         f7:80:19:af:ca:e2:7f:48:7c:a2:c3:8b:7f:83:36:ed:c8:11:
         1f:ff:b5:59:c6:dc:4d:7b:9b:8f:a8:af:86:41:5c:8c:8e:58:
         54:8d:d3:27:58:1f:61:68:b2:c7:8e:81:9b:a7:3b:8b:e8:b4:
         bd:55:51:94:2e:45:ab:45:41:4a:24:26:11:d1:f4:08:a2:09:
         0f:4e:93:32:63:5b:ed:55:c3:a2:ab:ca:d5:05:91:90:fc:63:
         f7:8a:69:eb:50:07:83:e0:64:8d:a3:e7:2b:e6:7a:fd:d0:39:
         26:b9:4a:70:c9:0c:4b:b7:75:c2:7b:f4:96:cb:24:11:60:a1:
         f6:95:34:7b:04:3d:df:8e:10:ea:af:2c:3e:6a:e8:7a:f2:30:
         66:ea:1e:50:bb:d4:0a:a1:3f:42:16:9f:de:91:c9:5e:ee:d5:
         81:99:5f:e3:9d:86:a1:bd:0a:65:c3:9b:be:ca:24:a1:de:6b:
         a7:41:50:f0:d4:42:8b:ed:9d:44:be:7f:2f:f3:9c:74:a8:f2:
         5d:bd:17:b8:03:9f:fd:aa:cf:e7:3e:36:cc:1f:3b:43:34:08:
         61:d0:3a:fd:15:c5:f6:de:00:68:52:e2:be:7c:14:c5:bd:70:
         cd:d4:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:37 2026 by rpki-client