Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File:                     3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier:          Ql2Rn9ltTgjZ31M6tIEDsxQJQ1UzdCv9Wf1i5v+0n6k=
Subject key identifier:   FC:61:06:B4:93:DA:17:C5:8F:E9:46:63:61:B9:87:34:E4:1D:EF:56
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer:       /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial:       019EB8B44F49819E26AC30CA141FA59808FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number:          1837
Signing time:             Thu 11 Jun 2026 22:01:24 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:24 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:24 +0000
Files and hashes:         1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=)
                          2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: jiRluRa1NjkCTKNip8qXzjRz+EjdHsGtVLzL279d4jM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:4f:49:81:9e:26:ac:30:ca:14:1f:a5:98:08:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
        Validity
            Not Before: Jun 11 22:01:24 2026 GMT
            Not After : Jun 12 22:01:24 2026 GMT
        Subject: CN=fc6106b493da17c58fe9466361b98734e41def56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:62:f7:e7:ba:07:7b:07:d7:9e:db:3c:87:
                    d8:87:be:30:d7:7f:f5:39:79:0b:b2:15:a4:f7:c8:
                    1f:e5:48:8d:b1:58:73:04:0c:b9:0e:21:49:38:75:
                    0a:f9:23:90:10:6b:99:29:ee:31:d9:2c:e8:ca:7e:
                    14:9f:73:1d:cf:30:53:cb:6d:fe:5e:f7:62:a1:80:
                    8b:96:09:48:08:22:54:f0:4b:14:01:fa:bd:9e:b1:
                    a6:2c:a2:d7:5e:70:39:95:d9:04:ec:f3:0f:06:af:
                    e2:c6:41:b6:31:f4:9d:4c:6c:20:cc:dc:bf:ef:a0:
                    7e:db:e7:76:d2:6a:7d:df:34:4f:36:cc:42:5b:63:
                    06:4d:8b:9a:fd:f6:f4:52:e0:db:d5:7d:63:0b:8b:
                    e4:78:04:ff:b3:1e:ed:4f:43:cf:14:c9:b0:f8:50:
                    dd:be:6d:9b:ad:d0:f3:7b:19:69:b6:be:c5:a3:d4:
                    6c:1b:0b:67:82:23:83:43:a5:e2:17:c8:e2:97:2a:
                    13:4e:7e:70:1f:8d:ca:c9:d8:e2:74:ea:ff:c7:5e:
                    01:5c:3e:1d:c4:58:92:da:76:19:ef:14:ac:3a:f2:
                    7e:05:60:c7:f8:bc:ce:5d:34:f1:20:66:0e:9b:6b:
                    40:e4:a6:1c:1d:73:55:f2:a3:52:3a:8c:c3:25:67:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:61:06:B4:93:DA:17:C5:8F:E9:46:63:61:B9:87:34:E4:1D:EF:56
            X509v3 Authority Key Identifier:
                keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:98:b7:82:ca:e0:02:2d:a0:3a:b1:21:d7:5e:e2:5d:58:56:
         bc:1b:90:de:03:c2:25:ab:02:40:b2:2c:0e:3f:85:83:19:1f:
         eb:48:4e:85:c5:70:54:bb:db:5a:2f:4b:a7:9e:da:35:1f:97:
         7d:e9:19:0d:80:f3:ce:f3:81:d3:36:d2:77:61:24:35:21:eb:
         a8:83:9e:74:73:6c:34:bb:07:62:6a:cf:fd:7f:c2:3e:c9:b0:
         7b:80:b5:90:6a:23:67:65:98:97:59:d1:bb:8f:1e:f5:3a:9e:
         74:03:d7:dc:c0:76:b2:f7:76:e2:6a:32:fa:39:ed:3e:2b:9f:
         c1:2f:80:aa:c5:e6:bc:5a:17:8a:45:f0:7f:30:0d:85:8c:45:
         37:1c:94:33:ae:83:e8:5c:20:7f:f0:2e:e1:cd:5a:ea:fd:1a:
         32:42:8b:76:b1:2c:bb:c5:eb:49:99:84:24:31:a9:8e:da:04:
         dd:3f:23:ac:b1:ec:02:b7:43:1d:56:55:29:f8:af:1b:ab:24:
         43:9f:11:ca:9d:39:54:39:81:56:0a:22:af:85:98:88:9c:f3:
         3f:3f:8b:e8:9c:93:97:f8:12:44:6c:40:ea:18:46:9f:25:d3:
         0d:76:a8:13:20:b0:5c:8a:a1:e5:91:d2:f7:b4:bb:0d:2a:ca:
         f4:9e:dd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:13:39 2026 by rpki-client