Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
File:                     Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft (raw, json)
Hash identifier:          pL92uA0zNalHb08wWddb7V5rMJGKKRzcqTOBCoQy73Q=
Subject key identifier:   AA:CA:8D:86:76:17:2E:6B:73:C6:98:B5:FB:84:5C:4B:05:85:1B:E2
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Certificate issuer:       /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial:       019F18313018B8D668A2BDBCEE721E0F06D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
Manifest number:          191F
Signing time:             Tue 30 Jun 2026 11:01:44 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:44 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:44 +0000
Files and hashes:         1: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl (hash: h4yFM1c7iPAlZcd7mw+6PzK0B7Xc0yveoSUTmIb69g0=)
                          2: Zc7RAD61b3xRcuabvmN1GFsZbp0.roa (hash: RGQxjIX7DwiOFHJJRcT6xixymhoBKc/5U/SMHLcBocE=)
                          3: tInv3pdN12lO0HutSPRlUsoAZFs.roa (hash: KzYnf/5cndcX07CYcYQPy6531MI9wF8VxnC9Gs3B49U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:31:30:18:b8:d6:68:a2:bd:bc:ee:72:1e:0f:06:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
        Validity
            Not Before: Jun 30 11:01:44 2026 GMT
            Not After : Jul  1 11:01:44 2026 GMT
        Subject: CN=aaca8d8676172e6b73c698b5fb845c4b05851be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:66:be:c4:f3:be:f9:bf:4b:75:e0:98:88:
                    c3:d9:0f:b9:00:81:e1:d0:55:ef:de:88:e0:78:ad:
                    55:e5:69:90:fa:54:1d:bd:c3:38:5a:1b:18:d2:ac:
                    11:04:61:fb:ce:16:71:38:cd:b3:eb:43:13:06:dd:
                    46:33:7f:00:c8:43:54:ea:79:52:4d:3a:20:07:cb:
                    7c:b1:d3:2b:95:24:19:c4:5d:4e:9d:51:7d:f6:10:
                    44:0d:60:26:90:43:d7:a9:e6:48:8f:72:1d:05:3b:
                    35:77:2d:e1:0f:a0:0d:f2:01:36:6c:9c:f7:27:20:
                    70:67:26:6a:41:7a:9d:99:b6:df:9c:87:65:82:07:
                    15:98:18:7d:b2:10:7e:cd:77:c7:79:b4:91:b6:23:
                    88:ac:b1:a9:68:bb:af:ab:95:50:00:1e:e5:ef:ad:
                    94:80:26:f6:cd:f7:ad:b2:10:5b:83:57:30:29:d3:
                    f9:61:8e:a7:f7:4c:79:b2:26:73:76:ab:88:7f:49:
                    36:54:72:09:76:15:1e:51:13:b7:8c:0b:fa:84:c1:
                    26:f4:9d:8f:43:27:a6:40:1e:ce:be:53:42:6c:23:
                    9e:d6:1d:b2:0d:7d:cc:26:93:fa:6c:93:6f:03:aa:
                    9b:83:d7:03:25:fe:e2:87:d6:a5:47:ab:83:d9:b5:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CA:8D:86:76:17:2E:6B:73:C6:98:B5:FB:84:5C:4B:05:85:1B:E2
            X509v3 Authority Key Identifier:
                keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:09:56:01:dc:44:13:fa:ae:51:e9:69:67:34:cb:ae:69:d6:
         2e:ac:bf:f5:07:d7:28:bf:86:2b:24:2b:76:56:b0:30:18:16:
         9c:52:be:66:8f:89:5d:41:7f:34:c3:fd:87:d3:4f:47:a9:98:
         20:33:2b:fd:31:4b:a6:d4:00:2f:f6:0d:94:32:91:45:43:dc:
         74:be:5d:50:bb:b9:7f:23:8d:6b:d3:25:e7:d9:8e:d7:ec:d0:
         48:28:1f:e8:cb:22:18:bf:70:32:10:83:25:48:7f:bd:d3:ef:
         e3:f1:2a:08:a1:19:42:74:3b:f8:b9:29:6a:00:57:c7:43:bb:
         2f:e5:3e:a0:90:b1:f5:d4:67:a0:7f:3a:e2:79:85:72:60:9d:
         96:ee:72:66:d7:45:67:c7:49:10:da:b0:0b:cb:26:55:79:2a:
         bd:06:42:b8:84:22:77:c6:b1:50:bb:f1:4e:db:8f:cb:49:b5:
         a6:3f:ab:cb:94:90:70:40:f5:53:b6:0a:7a:79:11:43:78:6e:
         fc:5b:bf:71:5b:88:82:58:c6:c2:32:2b:1d:7e:59:f2:0d:88:
         dd:8f:f9:0c:ae:48:27:75:ba:d2:7a:85:8e:e7:8e:1b:ef:d5:
         96:ca:2f:64:d7:70:f9:80:c2:d2:02:60:75:7f:23:af:75:38:
         be:ad:c4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:11 2026 by rpki-client