Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
File:                     Dm2P132t49P5bLSZMZSMJymtoN4.mft (raw, json)
Hash identifier:          SfpLPPktxJA3P5gt7+BYA+YKFpSRMKPq17ZiseK0Y2s=
Subject key identifier:   58:78:59:57:C7:7B:DD:BB:2B:3B:92:B8:F8:70:37:35:56:AC:E5:B1
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Certificate issuer:       /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial:       019F189EA91E2B8BBD5AD6368769A090904F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 13:01:18 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:18 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:18 +0000
Files and hashes:         1: Dm2P132t49P5bLSZMZSMJymtoN4.crl (hash: 6rDQ1RfaZdFgnuVMhiT1gUrjGIbiPmTxev8Uk8ld6Pk=)
                          2: DzslbHixmzBYrsPf_coOdi4vCac.roa (hash: VreYJplCemlpCEq1mBOMn3xaebIevlMt/pCSqFrimOU=)
                          3: ROslS2q2gassZHFsPyNfMnp6lnQ.roa (hash: KypsIjFPEkDmNdlDZHjTDjD0J5MLcaB0s63R8Glt4Zo=)
                          4: iglWtYkBC9ngDdbZompM_rZYncA.roa (hash: nTTJKP/icYG9HF3qJuhxJ0nRjLYKtjmOl9gPDGv0VMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:a9:1e:2b:8b:bd:5a:d6:36:87:69:a0:90:90:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
        Validity
            Not Before: Jun 30 13:01:18 2026 GMT
            Not After : Jul  1 13:01:18 2026 GMT
        Subject: CN=58785957c77bddbb2b3b92b8f870373556ace5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:ec:86:ba:a3:1b:9d:69:1b:09:ad:28:51:
                    10:5a:26:ee:0a:2b:8e:24:66:74:16:31:4e:84:f0:
                    c3:8a:82:b1:7c:cc:76:a6:9d:4e:f9:01:80:5f:15:
                    55:1d:98:47:99:b8:87:99:07:c3:03:7a:26:ac:d8:
                    ee:18:7f:b1:aa:bb:01:01:94:7d:ec:0f:7c:88:e9:
                    14:de:74:90:77:7f:f0:87:77:4a:e0:5b:d4:28:d9:
                    28:1b:57:0f:d8:3a:22:e7:07:5c:45:9d:fe:a6:6a:
                    1c:51:1a:51:5a:5b:15:02:5d:dc:e7:53:c4:bb:0d:
                    1d:fb:ef:38:0a:62:3e:0a:da:4e:e4:d5:d5:d9:58:
                    7a:37:67:37:22:97:69:a1:21:18:53:6f:c8:62:6b:
                    ae:57:2a:7c:50:0b:4e:f2:d5:90:7b:20:9a:56:91:
                    3b:87:b7:7e:9b:88:0d:95:62:c4:f2:a5:f7:d1:65:
                    b8:8e:bb:36:2d:86:1d:a1:36:0a:e2:d8:ab:e4:a8:
                    6e:48:da:55:a6:0f:d3:81:27:e6:2f:6b:2d:3e:2c:
                    b3:c0:6f:a5:f0:7d:df:73:cb:aa:09:6e:de:82:87:
                    e9:ea:04:f3:f3:e5:4c:44:45:a9:6e:87:7f:f8:74:
                    6a:52:08:f9:f5:ad:e1:ad:10:cd:db:23:b9:aa:54:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:78:59:57:C7:7B:DD:BB:2B:3B:92:B8:F8:70:37:35:56:AC:E5:B1
            X509v3 Authority Key Identifier:
                keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:66:5d:df:69:06:43:d3:f3:cd:74:e7:ca:4d:2f:48:19:7a:
         a9:50:02:9d:4c:52:e6:eb:ce:40:48:42:89:a3:46:68:d7:d5:
         58:74:4c:32:21:d4:c2:a5:69:4e:a0:8c:c5:e0:18:4c:77:50:
         93:9c:e4:5f:d7:a6:3c:3a:d7:50:a0:0b:12:38:ef:f5:26:bc:
         ad:7b:12:bf:f1:ef:b3:49:c3:8b:12:d0:71:89:9b:ec:c9:40:
         b0:0a:9f:d8:b1:f8:74:7e:d3:17:85:50:0a:9b:21:01:f1:14:
         23:c2:37:b3:e0:e5:fc:25:17:0e:27:a1:9a:55:78:fe:30:cf:
         f6:b9:cf:e9:8d:ea:5d:ae:b6:a4:11:b3:e1:3e:d8:6a:70:f9:
         d7:8d:a6:58:01:3a:cb:25:bd:3c:da:08:d9:e3:5d:85:cb:ce:
         6e:85:6b:49:de:66:19:2a:8c:87:88:44:88:00:ff:c8:e0:63:
         8d:98:54:2a:62:53:92:69:8f:a4:17:81:18:a7:7c:d8:b9:29:
         dc:c4:40:c7:a0:e9:f7:7d:f5:ec:fd:6f:09:67:84:79:81:56:
         82:92:c3:56:8a:cd:a5:08:52:4e:83:8d:de:36:ca:66:62:03:
         c7:27:c2:3e:1e:16:4e:a9:a9:2f:2f:59:c3:7c:c8:00:ef:06:
         75:53:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:43 2026 by rpki-client