Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File:                     uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier:          3RaXg3Nyx32I50PLLNcrzWVEyvD8DygCY9uOlyF2S20=
Subject key identifier:   09:12:38:34:26:1A:B0:18:E9:3B:A5:CC:A6:4A:D7:08:4C:1E:0E:18
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer:       /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial:       019F1979E3B19589B3B3C965241BA85EE1A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number:          1793
Signing time:             Tue 30 Jun 2026 17:00:46 +0000
Manifest this update:     Tue 30 Jun 2026 17:00:46 +0000
Manifest next update:     Wed 01 Jul 2026 17:00:46 +0000
Files and hashes:         1: 0sG02fRT--XJolYuZ7_jXyMamw4.roa (hash: YsaXqtsrHkKSzKqIrNyEZ6rkNj200yF1XlYMTQ9by/Q=)
                          2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: Up3TgCQX1dGL0o9q0vQBuWRDCzKg7blUBmYR7gkT4hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:79:e3:b1:95:89:b3:b3:c9:65:24:1b:a8:5e:e1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
        Validity
            Not Before: Jun 30 17:00:46 2026 GMT
            Not After : Jul  1 17:00:46 2026 GMT
        Subject: CN=09123834261ab018e93ba5cca64ad7084c1e0e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a6:4e:25:ea:67:a0:e1:cc:97:57:5e:58:aa:
                    02:53:1b:f3:25:88:0d:4e:a1:5b:6a:3b:3a:74:b0:
                    6c:71:40:6f:24:29:5d:65:00:ed:c4:85:5a:21:3c:
                    59:fa:b6:13:04:70:21:41:42:b9:91:85:a5:29:c4:
                    fb:34:a5:4c:7d:76:d0:d2:01:38:59:b0:32:62:27:
                    27:4e:af:71:58:ae:f4:2b:4a:e3:0c:6f:da:37:fc:
                    a5:29:66:5d:dd:a7:ab:40:5d:6b:c5:ee:99:23:66:
                    8d:c6:bf:43:61:71:d1:e7:3b:b3:32:9a:04:26:af:
                    30:38:0d:b6:0b:06:f1:ef:35:55:66:fc:14:81:f3:
                    f2:91:c0:eb:d7:68:4a:d7:d8:48:4a:77:4e:54:11:
                    62:b9:45:ce:51:1f:12:a2:4a:13:15:4b:67:bb:d7:
                    11:64:fb:92:e9:f5:ca:24:b1:f1:4b:04:d3:72:98:
                    89:66:de:a2:0d:8f:96:bb:05:12:6f:7d:a2:2a:1c:
                    4b:f3:26:32:50:e0:b8:f4:0f:19:ba:b1:d6:9b:68:
                    38:16:48:09:51:68:21:86:08:f6:41:d4:8f:70:a8:
                    d8:44:37:0b:5d:c9:85:9c:73:5f:f2:0d:86:4f:e8:
                    ec:05:0b:a8:6e:02:55:fe:62:c2:c7:aa:58:0c:7c:
                    ad:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:12:38:34:26:1A:B0:18:E9:3B:A5:CC:A6:4A:D7:08:4C:1E:0E:18
            X509v3 Authority Key Identifier:
                keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:4b:7d:0f:38:5a:40:02:d6:5e:87:bf:5b:73:3b:ed:23:db:
         5b:85:9c:45:53:f0:e9:91:97:e4:fa:ab:36:c1:12:1d:5e:81:
         f7:a7:a6:81:98:0a:62:00:70:3c:5e:7a:fb:13:7c:1a:25:74:
         02:23:98:bf:6a:5a:14:06:9e:f9:74:54:60:83:c0:d3:a6:b4:
         81:8e:50:8b:38:1d:fb:76:2a:27:7f:e2:2b:63:c0:8e:e6:4a:
         cb:d0:93:71:d7:73:10:a2:5a:45:84:29:9a:99:a0:47:fa:3a:
         13:a1:29:74:c7:58:5d:fe:63:bc:b3:be:e3:00:cd:52:db:30:
         3f:04:9b:84:b0:c2:88:f5:6e:a3:1c:cc:b2:fa:cc:8d:58:4f:
         45:e4:b1:d0:1f:c6:1b:84:b2:97:f1:11:fd:80:32:8b:b4:e8:
         7f:48:e9:bd:ff:e6:8c:94:b0:0c:97:00:87:d3:73:47:c6:b0:
         47:44:13:93:96:d1:90:67:d5:5e:f5:45:b3:f2:19:4e:dd:4a:
         73:34:0d:53:09:ef:0e:89:87:f9:e3:5b:d4:5c:8d:92:38:93:
         08:05:49:de:94:88:92:67:bb:1c:65:46:57:64:e0:8b:3f:07:
         70:4e:ee:b2:44:3b:b5:c5:ef:31:12:f6:bb:99:dd:e6:07:75:
         3a:a7:64:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:52 2026 by rpki-client