Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
File:                     00J0yPw5e9vGx1haFcgyErBQIh8.mft (raw, json)
Hash identifier:          G2i1hEXQZ1GkIIWpY3nQkxQKP/0t5RFi4QbkfEYWdZE=
Subject key identifier:   FC:DA:4F:B5:22:36:BF:85:B1:57:D8:22:0B:8B:24:A5:0E:73:54:C4
Authority key identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F
Certificate issuer:       /CN=d34274c8fc397bdbc6c7585a15c83212b050221f
Certificate serial:       019F1943A8948EA025B05453EC3051BC7639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 16:01:32 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:32 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:32 +0000
Files and hashes:         1: 00J0yPw5e9vGx1haFcgyErBQIh8.crl (hash: VIGjYEpj/1PYQg4092igDWbvPdsi7b41fwmKk1GZGuw=)
                          2: i6kBtCsAIrjCwUpHjGwj5ys2Jrk.roa (hash: zMudQcER0t4uUPhQ5L2fTWT4s9Z4p0bv0wrDyCzzObY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:a8:94:8e:a0:25:b0:54:53:ec:30:51:bc:76:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34274c8fc397bdbc6c7585a15c83212b050221f
        Validity
            Not Before: Jun 30 16:01:32 2026 GMT
            Not After : Jul  1 16:01:32 2026 GMT
        Subject: CN=fcda4fb52236bf85b157d8220b8b24a50e7354c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:54:fb:0a:7a:51:49:d9:52:b0:65:b1:6a:
                    7e:c2:3b:57:64:ac:28:17:ad:bd:ad:7a:91:52:ec:
                    21:8e:14:b5:57:e2:10:be:89:c8:f0:26:1e:de:34:
                    af:bd:3a:54:1d:7a:29:a6:66:02:0e:5f:58:e5:c2:
                    a2:68:b7:f2:d1:02:51:61:32:6d:40:15:7a:70:db:
                    ac:ad:e0:d9:82:9e:b3:ef:cd:2d:2f:da:2e:9e:76:
                    e8:25:71:7b:a1:a2:5d:3c:56:f6:8e:f9:3b:3d:d5:
                    0f:2f:d7:9e:aa:a7:66:9d:b2:68:25:57:c7:53:0a:
                    59:0a:77:0e:92:fb:27:d8:36:13:d4:02:3f:8c:29:
                    d4:01:73:42:95:4a:ee:5c:84:7d:5b:21:7c:e8:37:
                    b9:bf:67:fe:41:bb:60:39:85:b8:43:47:82:87:b6:
                    ba:04:28:2b:f6:19:78:ec:09:92:33:6d:c3:6f:d5:
                    a9:f8:91:3e:40:71:e5:3a:bf:e6:1c:19:30:54:92:
                    2a:56:a7:59:d7:fa:e6:a5:33:1d:94:fc:a5:ad:18:
                    ba:39:a1:32:eb:e7:dc:5f:4d:25:2d:bd:64:55:d9:
                    07:4b:cb:c1:35:ea:21:6b:69:87:71:fc:07:12:28:
                    a1:e6:45:d9:99:0c:00:81:71:3c:b3:17:8a:5f:e7:
                    20:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DA:4F:B5:22:36:BF:85:B1:57:D8:22:0B:8B:24:A5:0E:73:54:C4
            X509v3 Authority Key Identifier:
                keyid:D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:41:59:4a:58:90:40:65:eb:f2:e1:61:2d:8f:f4:b2:b0:71:
         d1:69:9c:60:15:67:2e:84:ef:6d:36:50:82:51:e9:6e:85:53:
         95:86:09:0a:82:bf:b9:26:fa:e7:fc:d6:94:ef:2f:c2:c8:39:
         2c:d9:1a:a6:5c:fb:f7:c1:04:d2:db:58:dd:58:a1:79:fd:dd:
         a1:16:f6:64:a6:06:3d:2d:ce:71:37:e7:e0:5d:5f:9d:bf:bc:
         05:6a:8e:8a:11:85:39:39:90:fd:f7:9c:32:ed:a1:db:06:a1:
         7d:7c:28:46:c1:48:df:17:02:c2:ca:c3:f7:b3:62:7e:c2:17:
         8d:f3:a3:6d:f0:12:ac:81:18:da:24:e5:aa:11:a6:8b:48:58:
         e8:19:2f:15:ec:ad:5d:c5:69:a6:08:78:30:3d:db:e1:b2:a1:
         7d:bc:49:aa:c6:a0:73:89:fd:4f:33:1c:b8:56:0f:a1:70:57:
         2a:e0:5a:ce:b6:52:c2:26:dd:2f:72:96:6f:9d:6e:e9:15:23:
         ef:f3:66:c5:63:8f:5b:88:ef:28:29:4b:ad:5b:78:d0:fa:e6:
         fc:6b:e0:e1:4a:e3:be:68:38:84:3f:46:a6:e4:85:6a:ba:d6:
         32:e5:ee:70:0a:c7:89:f1:22:3d:cb:5d:b7:f7:5a:a7:60:01:
         97:e2:11:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:35 2026 by rpki-client