Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File:                     H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier:          Fsgz6x0PAxQYF++QiULxQhvVxpGMlIwgYT9yGneH4Fk=
Subject key identifier:   AE:6B:55:33:74:28:B2:E3:3D:33:59:D7:80:EE:A3:08:32:C5:46:43
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer:       /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial:       019EE7B1E5FB37CEB2FBDAB6ECBA92AB80F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number:          0C68
Signing time:             Sun 21 Jun 2026 01:00:56 +0000
Manifest this update:     Sun 21 Jun 2026 01:00:56 +0000
Manifest next update:     Mon 22 Jun 2026 01:00:56 +0000
Files and hashes:         1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: GPwC0zq4EL4W6sz8eXFwRLP0peKjuay1mokajDBKDDQ=)
                          2: izo4UDdC4mpQkmyWIGDJxTunxWE.roa (hash: nGq0zWnIwQfu9LNAcwYVVr+irG2rx0o9SiWP5Vb3sPw=)
                          3: sCQK0hD61FJAM1RWBV01BmeoHq0.roa (hash: 2nCV/DvBky7socAFisrJxsyWYsp6XWUMeNmIdiwZJuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:b1:e5:fb:37:ce:b2:fb:da:b6:ec:ba:92:ab:80:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
        Validity
            Not Before: Jun 21 01:00:56 2026 GMT
            Not After : Jun 22 01:00:56 2026 GMT
        Subject: CN=ae6b55337428b2e33d3359d780eea30832c54643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:0d:a6:c7:c0:e6:dd:cb:73:de:6f:03:5b:
                    c4:7b:71:36:86:e2:35:c5:fd:58:8a:f0:7c:3f:81:
                    7f:21:e3:ab:35:b8:13:65:55:ca:d3:ff:cc:65:64:
                    26:9a:21:ee:1a:aa:4d:9f:2b:bd:c1:02:12:9d:16:
                    d2:ec:b6:9b:28:7f:cc:d0:cc:4a:bf:39:ae:c1:79:
                    ad:bc:7b:a1:d7:29:a5:ec:dd:fa:fb:62:83:f7:ba:
                    da:12:41:e7:ed:f2:b5:05:b0:98:be:71:cc:07:93:
                    0e:c1:27:53:7f:e9:dc:76:2d:d5:ca:47:12:8d:20:
                    0c:fd:76:97:82:20:c9:0b:a7:82:c3:40:df:e0:70:
                    b6:b2:21:a6:a6:55:b8:2b:e5:d4:41:a2:ab:43:6e:
                    a2:a4:2f:11:a3:d3:64:6c:2d:1d:48:13:ea:0e:48:
                    68:db:c4:52:c7:58:bf:13:d0:c1:21:2c:e9:f8:93:
                    ab:a2:15:19:30:d5:af:4b:ae:03:52:13:80:d7:32:
                    e9:41:43:bc:ad:c6:1e:14:1f:7b:a5:8f:7f:74:7d:
                    39:50:48:5b:f7:be:78:0b:6a:d6:5f:6d:96:b1:e3:
                    81:cb:e7:a3:ac:73:fe:03:3a:aa:c5:e2:28:06:fe:
                    ed:fc:31:d0:ed:92:d1:59:03:1b:4f:85:70:19:77:
                    2a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6B:55:33:74:28:B2:E3:3D:33:59:D7:80:EE:A3:08:32:C5:46:43
            X509v3 Authority Key Identifier:
                keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:62:72:50:f1:f4:8a:9d:30:18:57:d0:e8:b6:8e:2a:36:a9:
         d0:7b:3a:5b:1b:27:58:1f:40:57:20:15:ae:f5:9f:03:49:db:
         02:f7:53:f0:12:dc:5f:72:33:22:20:9a:dc:39:a1:e0:d5:ac:
         8d:1a:19:9f:9f:eb:74:22:cb:5e:ea:85:e0:21:ba:e0:f9:82:
         ae:61:f4:3e:ab:2d:13:88:1b:b0:58:e5:2f:43:0e:86:66:a6:
         6f:5a:db:91:3d:1d:6a:08:cb:e8:6e:6c:d1:e1:33:68:3f:6b:
         d2:ef:d6:9a:1e:2d:64:61:02:96:6e:35:0f:22:62:5d:56:83:
         8f:c0:16:84:c4:23:5d:22:52:61:c6:ff:0c:66:95:83:18:13:
         8a:7f:d3:f3:95:e2:86:e0:6d:13:cd:dc:10:03:0d:cb:28:f5:
         48:13:e0:46:99:af:7c:30:dd:4a:12:4b:04:76:42:ed:a9:71:
         38:b3:91:b5:46:dd:52:6c:a0:cb:68:56:6a:e8:d0:94:f5:35:
         0c:18:e4:bd:b7:89:2b:86:90:44:52:f0:71:e2:ed:de:93:1f:
         26:31:5e:84:54:4c:1f:c6:78:2d:39:d0:5c:10:18:20:8b:69:
         73:d2:d3:54:dd:ef:25:30:57:bc:93:54:a2:1f:e3:14:4c:c9:
         ff:42:d2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:38:31 2026 by rpki-client