Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File:                     1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier:          wn0Xn9jCpK/2IU5OoOegpLqAVWdDOquVRdBy/uXwHQU=
Subject key identifier:   C5:45:F4:2A:2E:6E:15:03:6A:CA:56:2D:99:40:AF:63:B7:76:0B:B4
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer:       /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial:       019F11EA51453F8AC13F1CD52B42800A03D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number:          198E
Signing time:             Mon 29 Jun 2026 05:46:36 +0000
Manifest this update:     Mon 29 Jun 2026 05:46:36 +0000
Manifest next update:     Tue 30 Jun 2026 05:46:36 +0000
Files and hashes:         1: 0_t2wQIokLKY2kmf_7_jfNZXtiY.roa (hash: TGSr63wO3aGHJ7YGz4t10QGo266PAEIyzVMQYeVtap4=)
                          2: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: lRABs8Ne5KYAb+/JpTOCGT9avEMzjdxsfnDPLY8ALUU=)
                          3: GXO8Va2YLC7V7aizd3BeOTuhN-4.roa (hash: 0nWtOx7eW6IHu//MDqpxa/7ugR36Yc+2OMdqguEZeBc=)
                          4: Ku_3wi-krLn5NVfaK-lQlkfIQqM.roa (hash: tzGy6knJKrJ/+Tpse/PLPBsuQdf0mdcEtbCEG7Cfzkg=)
                          5: MJUSGXNaON5-u4HtTmGH6ZtrgHA.roa (hash: NNdIzpFlr2gfckuz7+ZEQiokzWnQGJIcuKaYbw6MC/U=)
                          6: jBWcdrxGs1WBnTMg4supmnaZvqw.roa (hash: 4hFJ4SHcnjUVe4H7OnBrjinQ22ICOUAmQmEaGhTqIAY=)
                          7: qhGEEQ0HGWcbgHqPIorSOb9nl0Q.roa (hash: DggCFNvWeU+DQZNC4vJn2wU5MlmsNXtXoMhViia2938=)
                          8: zgTpwMBLyKqEkj41ijMrXIxWx5I.roa (hash: bDKZ2scCeLL0RRlntw0B5EPYnDzEWkQl8FShFksXm3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:ea:51:45:3f:8a:c1:3f:1c:d5:2b:42:80:0a:03:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
        Validity
            Not Before: Jun 29 05:46:36 2026 GMT
            Not After : Jun 30 05:46:36 2026 GMT
        Subject: CN=c545f42a2e6e15036aca562d9940af63b7760bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:94:7f:63:43:dd:45:b2:eb:33:ce:5d:48:bc:
                    f5:84:e0:07:ed:08:bf:0f:e4:19:9a:54:93:53:aa:
                    66:e7:b1:83:64:94:42:0a:61:69:ac:db:54:3f:94:
                    fa:be:1c:04:6c:66:2d:7a:43:74:b0:12:be:fb:be:
                    12:bc:3f:a2:60:4f:e4:e2:3e:1b:1f:db:ed:02:44:
                    de:25:bc:3a:8b:b1:17:91:48:20:94:9b:d9:2f:99:
                    04:31:a7:85:d1:51:c0:b5:b2:68:27:3e:e0:fc:16:
                    13:de:23:9f:16:45:9e:e9:a8:08:c8:46:b5:45:6f:
                    9b:b7:9c:f4:09:b4:fb:c6:a6:e5:37:45:1e:5e:b1:
                    d9:75:19:3c:ef:61:4f:4b:b7:8b:a3:3f:22:f9:26:
                    be:fe:b9:78:24:f7:05:9e:35:c1:ec:2b:8c:da:ca:
                    a5:03:da:b7:e3:f4:2e:d7:57:78:34:0d:cd:b8:79:
                    4a:36:af:ba:38:dd:92:75:02:f9:43:bc:1a:55:66:
                    6d:39:25:70:e2:80:81:9a:19:77:f7:b8:ba:54:ba:
                    7c:e9:3d:f8:cb:fd:f1:2c:fd:3c:46:62:94:57:c0:
                    5e:a1:c6:59:24:43:48:d4:d5:3b:f0:0f:41:ff:8b:
                    ef:58:4c:b0:c3:08:6f:be:b9:2b:69:dc:8f:9d:c8:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:45:F4:2A:2E:6E:15:03:6A:CA:56:2D:99:40:AF:63:B7:76:0B:B4
            X509v3 Authority Key Identifier:
                keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ed:bb:97:f4:4e:79:93:d6:74:db:f8:1e:11:9d:68:4c:6e:
         60:66:f1:07:0b:4c:09:4b:1c:c8:68:9b:75:b4:05:ca:c3:b3:
         f1:3d:48:62:8b:a7:67:f7:f7:b4:3b:a4:3a:e3:85:db:60:56:
         05:09:42:f4:bc:e4:e8:04:7e:8c:b4:e4:88:0b:f4:b7:d5:4c:
         98:89:6b:e6:94:88:5c:45:d0:92:8f:2e:6b:f7:10:7d:f1:91:
         90:c8:2b:42:f9:eb:81:07:7c:20:3a:85:49:ec:be:67:d7:e8:
         c4:d4:d4:bb:d5:e7:c9:64:1d:f7:bb:32:78:a6:a4:ab:7b:e3:
         84:57:c5:36:0f:15:61:fc:cf:6f:23:72:df:91:de:63:70:13:
         26:19:20:f6:43:95:46:a4:1b:73:03:a2:6e:7f:82:87:34:7d:
         5c:d1:3d:27:e1:7f:02:a3:a9:77:fe:8e:ab:56:d0:10:6e:6e:
         3e:8b:9e:86:b7:47:47:69:62:ba:27:51:05:af:a1:90:d4:88:
         3a:45:12:e3:35:f1:8d:da:e4:af:cd:f9:8d:07:78:aa:37:4f:
         64:10:9d:62:d2:94:26:4d:ec:c9:fc:df:05:78:37:d1:76:a1:
         ba:a4:dc:3f:3d:cd:e6:13:cf:4a:ae:00:d6:3c:08:2c:62:17:
         a0:42:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:08 2026 by rpki-client