Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
File:                     fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json)
Hash identifier:          VrFljC/styUL4isyA43j4ZMZXUvqvgOqBuGHzqz7rfU=
Subject key identifier:   9D:8E:CA:7E:63:98:42:20:C9:8C:60:EF:88:35:E1:02:84:40:4B:93
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Certificate issuer:       /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial:       019EB98F50287F18AFE38179083BE8AF9FF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
Manifest number:          1697
Signing time:             Fri 12 Jun 2026 02:00:37 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:37 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:37 +0000
Files and hashes:         1: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: 0wCYvOMN+c6+ULJr8stDrRWnuZCx8L0NhG2XJ76hVec=)
                          2: iS8uMVcfTxV4oFRPmDdhbpSZpws.roa (hash: MP/qvCm1sWW7tlIkjuMYgAfGTXxSGhkZeUhVHpOpueU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:50:28:7f:18:af:e3:81:79:08:3b:e8:af:9f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
        Validity
            Not Before: Jun 12 02:00:37 2026 GMT
            Not After : Jun 13 02:00:37 2026 GMT
        Subject: CN=9d8eca7e63984220c98c60ef8835e10284404b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:9b:e4:66:37:05:68:6d:a7:f7:61:bb:5c:
                    38:3d:6a:63:06:03:a8:e1:fb:6c:82:ad:60:a1:bf:
                    71:8f:1f:b2:d1:da:62:94:32:e5:90:01:57:d8:8b:
                    3c:77:0c:03:b5:92:de:a3:51:a9:cc:2b:59:e4:28:
                    35:82:b8:60:c0:a5:50:cb:b1:37:5c:9c:6a:57:1f:
                    09:d6:39:d9:8b:44:6d:d8:d1:2c:e7:14:50:20:83:
                    03:46:c5:6c:2a:9d:f1:1e:9c:40:95:97:b3:42:64:
                    f3:c8:61:92:a6:9a:9b:06:d8:01:99:cd:a6:26:b9:
                    2a:9a:fa:22:50:c5:79:9e:ce:c4:64:7e:56:aa:94:
                    0e:02:96:9d:95:1f:c0:7a:e9:bd:45:d2:64:75:08:
                    2b:1d:38:04:03:15:b6:a6:09:a7:e1:e6:65:5b:59:
                    6c:f2:72:45:25:bb:3d:53:b7:ca:f1:6c:d7:c0:a1:
                    84:8f:08:b5:b4:e8:ea:11:74:17:06:de:a4:42:4e:
                    3a:f7:fe:02:8d:c2:ee:8e:b9:65:1e:c0:67:0e:5b:
                    ac:ef:92:d0:dc:b5:22:ad:ab:7a:4e:ff:a9:92:f7:
                    b6:b8:b5:1f:68:06:9f:53:b1:de:ff:b9:35:59:8b:
                    af:3c:44:f7:b6:89:6a:20:4a:45:cd:76:f2:21:b5:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8E:CA:7E:63:98:42:20:C9:8C:60:EF:88:35:E1:02:84:40:4B:93
            X509v3 Authority Key Identifier:
                keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:03:95:4e:d8:a8:fa:ed:2d:e8:a5:73:f7:65:f5:a5:2e:4e:
         94:84:a4:c5:21:f8:2b:37:3e:7c:fe:ff:15:55:65:dc:da:aa:
         b9:58:70:fd:35:db:2c:8d:71:7c:f0:f1:d7:19:ba:03:d6:12:
         35:5a:b3:b0:58:4d:04:70:65:b6:01:f0:03:9f:8e:30:85:a9:
         c0:c0:87:a2:02:dc:76:79:94:47:81:30:c1:77:4e:31:ca:30:
         e7:c3:aa:3e:af:ee:2a:d8:22:11:47:cc:25:3a:6b:bc:c9:cc:
         27:7d:c2:a6:e3:94:3d:d5:19:75:fb:c0:85:b8:14:af:08:3c:
         12:4e:c7:eb:6d:c7:83:93:73:71:c3:47:ca:ef:13:d3:17:e8:
         dd:95:b4:5d:b5:93:d3:b3:f7:36:87:58:e1:38:a7:52:28:9c:
         13:0e:0f:9c:7f:2b:d9:bc:00:92:a6:22:d4:87:f5:5c:03:a2:
         d0:92:26:03:bb:f9:bb:b6:af:56:33:6e:0a:9f:d4:cc:11:34:
         ed:6c:02:f4:73:4f:b8:0a:09:a5:8f:d4:d7:bf:1a:ef:5f:d0:
         b3:07:51:1f:a8:07:31:e0:a4:04:b3:98:b0:cb:e4:63:66:f1:
         c8:cf:ca:3e:16:a0:9d:b9:b6:8e:2c:89:26:47:42:d2:d9:92:
         a5:02:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:45:28 2026 by rpki-client