Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
File:                     CjC2NdNXRo1_ky0-H1nVNzz59GU.mft (raw, json)
Hash identifier:          iOKeU3Mn/pKBqIK8cHXTaLfC0CleXs4ZnLTOXxVA+rQ=
Subject key identifier:   30:72:30:A5:39:A8:EA:EB:88:76:6D:45:7F:AE:60:15:CC:9A:A3:44
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Certificate issuer:       /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial:       019F10E4BA827828E957285C0D017AEA27DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
Manifest number:          1993
Signing time:             Mon 29 Jun 2026 01:00:53 +0000
Manifest this update:     Mon 29 Jun 2026 01:00:53 +0000
Manifest next update:     Tue 30 Jun 2026 01:00:53 +0000
Files and hashes:         1: 6vhp1ce20Y_L8eUU8Vs3lpXvUZA.roa (hash: ElRNIc4H9+nY8ihpL9VNMuMoFDZmouO2HJPvAis8eGA=)
                          2: CjC2NdNXRo1_ky0-H1nVNzz59GU.crl (hash: c7oknDkaZfyHJPI1ECEpOe2VKoFDVbxOEPpoVKEhehg=)
                          3: Jf6R_SXdBBCUhKX4mzDZLMiBJQk.roa (hash: SifU3rjYSstOzSyjjAgOfjY8aPan6w6IRltT7xNrspI=)
                          4: LDJyoOJGhIQqTxKt1w79LsiZZfg.roa (hash: t4Q1h/nG4uIRyIAkGMCLliaY/6jicJDu6HhTUCv2w5w=)
                          5: _7MSmPfHZMozoiPWYFBRiwIJjBU.roa (hash: l1CgCUWmNH0+Aq4gowYZKQx+xrYM6E0A7d7Mcviy/Zk=)
                          6: bR0XPH7F_jPk4chFPnkPIIniMJs.roa (hash: OMfK2Wtg88NIYCYy8HYbWAyizHBgcI12Ed35Gu0quac=)
                          7: rPAuBKaHRRCQxAsJEJoI2PAvcMs.roa (hash: bYljlXb82Oeh+Kr8lA/+ad26mdki7j4+BH52eXf/BbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e4:ba:82:78:28:e9:57:28:5c:0d:01:7a:ea:27:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
        Validity
            Not Before: Jun 29 01:00:53 2026 GMT
            Not After : Jun 30 01:00:53 2026 GMT
        Subject: CN=307230a539a8eaeb88766d457fae6015cc9aa344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:87:b6:0c:24:e5:2d:b2:ca:21:99:ce:59:
                    32:74:ab:66:42:af:64:2c:61:71:73:0d:97:99:60:
                    c2:b0:08:84:f4:53:7e:04:0d:17:93:c6:3d:21:eb:
                    e3:7b:d0:8f:eb:e7:0d:a1:fb:b1:c8:0e:37:0e:32:
                    e5:2a:1d:aa:f9:1d:54:ec:54:79:5a:e9:16:d2:7a:
                    5d:13:61:c4:46:72:9f:60:e9:44:ef:75:31:8f:51:
                    1a:b9:0e:82:af:3e:3c:a9:11:e1:a4:ab:bd:d9:bd:
                    ed:cd:e3:70:d1:b6:cf:f4:00:93:ff:78:44:18:9c:
                    81:f7:ca:f2:b4:42:18:44:e8:f6:ef:7e:b8:aa:bc:
                    21:22:a5:f4:d2:c3:d2:5e:7a:64:e0:ec:aa:26:97:
                    61:35:f5:a8:96:2d:46:d8:f6:99:5b:1c:a2:7c:7b:
                    f7:a6:39:46:d7:00:2b:2f:a2:31:b7:14:a8:7f:23:
                    ba:fb:8f:c0:da:ae:0a:9a:ba:75:ae:f2:31:99:f5:
                    5f:76:fb:10:43:fa:68:12:45:19:d8:cb:9b:0b:e8:
                    db:21:4b:43:3b:c1:65:d8:33:fc:c6:1b:63:2c:e0:
                    b7:58:b2:81:d1:dd:44:59:e8:c5:b5:f3:0e:e7:c7:
                    f6:c9:47:cf:fc:4e:5e:af:9e:ce:45:97:02:d2:e0:
                    99:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:72:30:A5:39:A8:EA:EB:88:76:6D:45:7F:AE:60:15:CC:9A:A3:44
            X509v3 Authority Key Identifier:
                keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:cd:af:90:ca:c5:28:98:67:32:8a:28:68:7b:3d:ba:9f:ac:
         ec:c7:2d:6d:c7:9a:bf:35:85:86:4a:04:e1:34:0d:dd:d7:f5:
         e5:6c:e5:00:82:29:d3:0d:6c:89:1a:14:f2:6d:cc:58:21:93:
         0e:e1:7e:e4:28:6d:cd:55:74:eb:9a:df:b8:4b:d3:d1:b8:c0:
         eb:dc:c9:6f:40:cf:e4:01:cf:8e:4b:f1:4a:fc:79:1a:84:9f:
         72:60:8f:f0:84:3d:6f:fa:6b:51:5e:39:4c:c9:c3:9f:5c:76:
         b0:f9:15:0b:5f:6c:b6:aa:02:74:b3:4c:52:63:25:95:38:71:
         e3:16:a6:4c:67:79:93:67:c0:18:83:2b:93:dc:6d:98:b8:5a:
         fd:e3:51:44:b4:d9:7e:e7:0b:5e:7b:1f:a4:f2:d5:eb:16:0e:
         64:8c:24:7c:40:1b:1b:98:48:62:47:fe:73:be:3d:79:a3:38:
         cd:62:13:4c:54:34:28:08:ed:a4:0c:29:9a:18:90:1c:fd:aa:
         12:5c:59:80:8f:07:02:73:e4:72:23:01:29:a4:13:2f:c9:10:
         8e:9f:ec:64:20:cb:3f:a8:fe:c5:c8:1f:65:06:ad:5d:5d:39:
         13:29:09:86:f6:26:d7:a8:23:de:57:7b:5d:5a:d4:a0:7b:7e:
         88:c8:ab:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:11:25 2026 by rpki-client