Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
File:                     SeRO7qJladDdvQ6GN_Es9QWk7ek.mft (raw, json)
Hash identifier:          p0BK/LIYIE6IA2RlPHPWWAZ85SiDZ9RUHB9h2BUbzE0=
Subject key identifier:   DF:6E:5E:84:BD:D0:97:C1:11:8C:1F:42:9D:44:AF:4C:DE:B8:84:34
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Certificate issuer:       /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial:       019F129CB70E3EA4149CFDAC322EA3CD8F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
Manifest number:          198F
Signing time:             Mon 29 Jun 2026 09:01:28 +0000
Manifest this update:     Mon 29 Jun 2026 09:01:28 +0000
Manifest next update:     Tue 30 Jun 2026 09:01:28 +0000
Files and hashes:         1: GeUW--hPT8o2pnbr6vUqN1nL0I4.roa (hash: /hKRpfPYym/y7mfH6PMx7JCo0hOLOhMMO2ioAJ8i8ac=)
                          2: LviMRn9_ALWXEXh18KS7ROO3kbY.asa (hash: mlRj/x3uwzMDAiQwgunweAXCBmQ8b/GoPuwWY6Ee+SY=)
                          3: MzCp_EhdHcpKPhvDpuOgeT8wOGQ.roa (hash: cWyQP57tffmbuPRh8jXrqPR/aGo4VRBu/ka+8DAvu8Q=)
                          4: SeRO7qJladDdvQ6GN_Es9QWk7ek.crl (hash: 5Vw8M34t92MfhzlAgqVsh5hwpc2b8B3hIH/l+vsi2qo=)
                          5: hEoypnAbDinC0QGassGs76xtnAw.asa (hash: xkbrTyJaG9QSCNIjm8fjAkbI7ZEMVBfs8nTofEueXdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:b7:0e:3e:a4:14:9c:fd:ac:32:2e:a3:cd:8f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
        Validity
            Not Before: Jun 29 09:01:28 2026 GMT
            Not After : Jun 30 09:01:28 2026 GMT
        Subject: CN=df6e5e84bdd097c1118c1f429d44af4cdeb88434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:f4:47:b5:f8:82:6e:b9:59:ce:b7:97:b9:
                    5f:e3:51:f1:9f:ab:7c:38:56:a1:91:de:76:31:93:
                    f4:25:6b:c9:40:51:d1:c4:e9:53:a1:51:a2:64:bf:
                    e3:81:a5:2f:a9:8a:16:e6:eb:77:a5:c8:47:b3:5c:
                    df:1b:a1:7b:c4:c1:53:55:f9:5c:6b:53:7f:a2:f8:
                    c5:75:16:d8:57:6c:ba:cd:15:b2:04:2f:04:3e:c0:
                    26:ee:a3:84:c9:02:c4:d0:6d:06:eb:4e:a5:29:5d:
                    ee:23:c2:7a:02:ec:cd:91:1b:10:9b:c5:32:13:e0:
                    2a:6d:0f:c6:10:ff:6e:d0:6f:cf:ca:35:8f:7d:9a:
                    04:b3:28:a1:8e:1c:ca:26:f4:fc:50:7b:a8:59:a2:
                    e0:5d:be:62:78:4a:e0:54:ad:fe:47:70:84:9b:37:
                    ef:2d:dc:74:be:f0:d7:94:3a:ec:ea:67:b7:6b:6d:
                    81:0f:cf:57:6c:a6:32:b1:be:fe:37:7a:d3:1b:1c:
                    45:ce:6b:ec:00:c9:ec:91:19:de:cf:f5:8a:08:13:
                    ff:af:4a:2e:bd:a5:2f:a5:65:4e:fc:6d:21:ea:ca:
                    3e:40:ee:d5:e2:e0:c7:0f:b8:52:18:8c:04:be:6a:
                    ba:89:83:f7:12:38:c0:e6:09:2a:e0:86:36:af:b5:
                    9f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6E:5E:84:BD:D0:97:C1:11:8C:1F:42:9D:44:AF:4C:DE:B8:84:34
            X509v3 Authority Key Identifier:
                keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ca:c9:b1:9a:27:4b:16:5c:c4:36:97:d2:3b:2a:31:3d:03:
         60:51:fc:16:55:35:96:88:de:5e:de:7e:69:27:39:10:b7:b4:
         70:95:ef:c8:fb:2b:6f:17:d8:fb:a9:2b:e3:db:57:1d:4d:65:
         8d:d9:15:23:b0:ba:ac:eb:36:2d:c5:6f:33:39:44:cb:c7:9e:
         54:07:03:ff:cd:71:aa:ad:48:b5:b5:9d:63:70:2c:e6:a1:43:
         6d:c0:08:5b:b0:b9:69:8c:3c:f7:9c:41:61:26:77:ae:5c:37:
         77:20:1c:ab:2f:ab:1a:49:15:58:2d:17:f3:58:49:1b:d5:77:
         7f:5d:ee:74:78:15:c1:d4:87:86:0f:99:e8:de:dc:2a:d4:14:
         5a:cd:5a:8e:ed:43:47:91:3b:d6:c6:ba:9d:9d:20:5a:64:15:
         8b:06:79:b6:8f:eb:59:af:01:66:8d:fb:e5:e5:a1:57:e8:b2:
         29:fb:02:c5:47:81:cc:46:47:75:82:e6:fb:56:a0:cc:12:5e:
         de:bb:0e:a6:1d:c8:dd:77:52:5e:8b:21:38:ab:1b:ed:60:a8:
         40:5c:a2:66:81:16:ad:59:04:48:47:f5:6a:2e:f3:a3:b0:98:
         5c:7c:fa:4b:ac:96:c0:76:12:95:29:2f:9b:b1:37:4e:ec:ce:
         82:86:58:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:52 2026 by rpki-client