Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
File:                     DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json)
Hash identifier:          tdgbKVCDeTYWlhRAlVrybVk5NncP/SecatGFgXZI3Yw=
Subject key identifier:   02:29:4F:11:8B:2F:E0:CF:43:76:D6:25:0E:D9:03:9D:4D:63:FA:A6
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Certificate issuer:       /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial:       019F17C28EABC090D824D8811958E67591F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
Manifest number:          198D
Signing time:             Tue 30 Jun 2026 09:00:54 +0000
Manifest this update:     Tue 30 Jun 2026 09:00:54 +0000
Manifest next update:     Wed 01 Jul 2026 09:00:54 +0000
Files and hashes:         1: 1-KiwJ7_SOfhMSL1wh3lOIzJdqf0.roa (hash: Q/Tsqdd7rd4T6xRRkiE1SIt+/mkcRs5YGJIeO2ihizo=)
                          2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: 5Iru+PqINevCOkhTEsdVbba7EEEFem31S7IALIPQhjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:8e:ab:c0:90:d8:24:d8:81:19:58:e6:75:91:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
        Validity
            Not Before: Jun 30 09:00:54 2026 GMT
            Not After : Jul  1 09:00:54 2026 GMT
        Subject: CN=02294f118b2fe0cf4376d6250ed9039d4d63faa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:44:7a:f7:c2:4b:63:95:87:64:91:37:28:
                    ec:d8:e3:f8:7d:5b:06:83:13:0f:b0:0d:ff:ce:16:
                    8b:d8:8d:89:65:1c:9b:c3:a4:c7:e9:1c:4b:8b:ce:
                    1f:3b:66:b1:e5:c5:4c:e1:8f:61:f7:17:da:1b:d8:
                    36:ff:f6:cc:80:31:1a:64:d5:b4:3a:71:c2:21:c3:
                    92:cb:4b:ed:af:96:1a:cc:14:56:9b:f1:35:b1:d5:
                    d7:13:ac:fb:2a:9a:9c:a1:f4:6a:23:1a:c8:5a:ac:
                    c1:32:8e:a5:b5:e3:58:66:f6:2c:b7:9d:c1:4f:43:
                    38:0d:7f:18:25:92:9e:90:11:bb:e6:03:49:2d:22:
                    02:c8:21:bd:31:6e:48:d8:f9:ca:33:9a:65:88:28:
                    45:5c:6d:6b:77:95:a0:af:8d:8c:24:9f:11:dc:18:
                    1a:83:12:e4:a9:d0:02:60:b0:9b:36:07:10:18:fa:
                    c9:b1:36:1e:18:79:ca:33:85:7f:23:2d:41:fc:19:
                    26:bd:9f:a3:46:2d:1c:83:33:f7:85:29:e2:a6:56:
                    d5:e4:99:71:8f:21:ea:7b:c6:64:0c:83:eb:dc:71:
                    4b:c3:5a:23:c1:c2:21:4c:49:66:7e:4b:89:e4:65:
                    c3:9e:90:5f:3e:38:f5:fd:6a:7e:0c:0c:3b:1d:12:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:29:4F:11:8B:2F:E0:CF:43:76:D6:25:0E:D9:03:9D:4D:63:FA:A6
            X509v3 Authority Key Identifier:
                keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ab:b7:8c:c6:3c:c4:42:cf:cd:41:94:08:68:e1:fc:c3:77:
         8d:34:a0:47:db:39:f2:db:e2:a8:56:9f:92:47:b3:55:39:a5:
         db:ab:2f:83:24:8f:8f:71:0f:c2:18:c0:e3:21:56:c6:63:b1:
         4e:37:63:2a:c3:28:75:18:36:91:0d:48:ce:25:d1:05:29:14:
         7d:d2:19:03:c4:2e:09:f0:b8:c1:81:67:87:16:3b:44:13:63:
         d6:84:9c:bf:41:70:f2:41:3b:e7:e5:6f:4e:7f:2c:c1:83:a5:
         b2:51:61:65:53:44:3a:6e:f7:89:ed:ad:85:5d:c2:05:21:09:
         cd:c5:12:86:09:22:f0:fb:72:57:7e:b8:2a:cb:22:1b:37:fa:
         2b:d3:8c:0c:6f:ac:a4:02:30:c4:83:ea:f6:68:ab:c0:3f:6c:
         fb:21:9c:e3:27:3c:f0:5d:c3:27:51:2b:73:00:cd:cb:66:cb:
         16:fb:64:e5:e9:49:e9:ce:f7:c3:83:a7:2c:5d:3a:87:09:0b:
         3c:ec:bf:c2:98:1e:ce:22:97:64:a3:18:85:d8:69:71:ab:b9:
         0b:a2:8c:86:14:84:7c:db:6d:c8:0b:b9:3c:55:ce:d3:24:ce:
         71:c7:77:5e:69:d5:13:47:03:47:31:a7:71:9a:29:fb:52:9e:
         b0:7b:75:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:52 2026 by rpki-client