Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File:                     1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier:          TA+b42qCWeClIkbBIyCEoqTwsbFRKay3cMudxnjqSIw=
Subject key identifier:   1E:E9:82:EE:C3:BB:71:0D:18:DA:0A:AF:D1:51:E8:B6:49:33:2B:2F
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer:       /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial:       019EDC53587F8323EC9240302D919EC20174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number:          0CC3
Signing time:             Thu 18 Jun 2026 20:01:50 +0000
Manifest this update:     Thu 18 Jun 2026 20:01:50 +0000
Manifest next update:     Fri 19 Jun 2026 20:01:50 +0000
Files and hashes:         1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: Sa1LIsqEifHhlFbRk9alTaYub0PcC2N76EqXRnapRFM=)
                          2: ERk4GXsIm4eHgca_Hp8ZDKKXt6M.roa (hash: dcFF9g5BS39gpPUrlypM3KPzuStbqdjSPSt1zZxl6YU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:53:58:7f:83:23:ec:92:40:30:2d:91:9e:c2:01:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
        Validity
            Not Before: Jun 18 20:01:50 2026 GMT
            Not After : Jun 19 20:01:50 2026 GMT
        Subject: CN=1ee982eec3bb710d18da0aafd151e8b649332b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:80:36:5e:9a:f7:b7:21:66:94:b0:27:d3:
                    ef:bf:58:04:df:3f:e5:fd:80:52:87:1d:d2:8f:04:
                    84:f5:fe:6c:ce:c5:ee:d3:80:0a:2f:69:5b:7a:63:
                    15:02:2b:07:db:17:d7:17:29:5d:8d:04:bd:f7:49:
                    ba:1c:17:91:3e:07:df:b7:84:11:c7:42:d6:65:a4:
                    f5:f9:de:d6:2c:47:3b:26:51:48:9f:a0:16:63:d9:
                    5b:97:c2:08:b0:dc:a9:5e:e5:d0:ce:8a:76:26:92:
                    d1:b0:10:a1:54:0a:71:e1:9d:d5:12:a5:71:02:d0:
                    37:4e:7d:8e:99:d1:57:5f:45:2c:73:dc:25:c9:5f:
                    33:a9:dc:2e:11:78:bd:00:54:f2:30:0f:2d:86:82:
                    88:c6:1f:f5:aa:ac:73:90:34:4d:f1:1d:0e:83:28:
                    54:b5:e7:29:b1:a1:b1:1d:1f:d3:4e:f0:61:f3:f3:
                    59:04:40:60:a2:58:1e:33:fd:92:ae:d9:53:fb:ed:
                    19:c1:66:0f:31:20:df:68:48:9d:2e:9c:12:01:a3:
                    85:f8:57:25:2b:90:fe:a4:9a:ba:db:d3:84:94:31:
                    f5:a6:a9:50:7a:27:d3:55:e0:88:97:aa:74:0b:96:
                    89:bb:e3:50:b7:6c:54:e5:2f:72:a3:96:4f:fb:02:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E9:82:EE:C3:BB:71:0D:18:DA:0A:AF:D1:51:E8:B6:49:33:2B:2F
            X509v3 Authority Key Identifier:
                keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:03:a8:26:8e:29:c2:8b:8b:19:97:80:21:ea:ef:72:21:
         20:e4:a0:46:ca:e0:86:05:12:73:fc:fc:26:26:df:dd:c9:d9:
         b5:a9:a7:9b:f6:e0:5c:58:2d:20:a1:e9:62:b7:9d:21:df:d2:
         ea:8e:37:20:11:8f:d1:40:f8:75:6c:90:3e:32:f0:a5:be:02:
         bf:77:dd:6a:45:8a:63:f9:eb:23:97:2f:28:79:1e:63:d0:dd:
         56:ef:ca:5f:d9:c3:b0:8f:04:02:81:c2:19:3f:76:51:3d:db:
         92:c9:49:a2:1b:71:41:83:36:a0:63:8f:03:49:c8:eb:78:22:
         f1:4e:9a:d1:28:a7:58:7c:d3:8f:73:77:b6:e5:96:ee:b8:cd:
         d8:ad:6e:7a:52:36:1b:83:00:93:c3:09:7b:1d:e5:ad:d1:53:
         bd:d5:ec:cf:6d:cc:ec:72:85:0e:a2:28:fc:e4:a4:2d:f7:d3:
         38:15:3b:ed:9f:37:10:f4:d9:6e:96:c7:a8:b3:cd:e9:9e:e3:
         54:9a:6e:d2:7f:12:26:1c:ef:d1:84:ef:a3:2a:70:ae:8f:14:
         d1:24:1f:d6:72:6d:91:44:d8:2e:96:fb:b4:1d:25:a2:77:07:
         09:8d:4c:c7:b0:b0:f6:a0:03:94:4f:33:73:bd:54:ac:a5:1e:
         b1:51:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 04:31:52 2026 by rpki-client