Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File:                     Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier:          5vXEND0QCOskbQPg72C2P9FotmoAUy/WdpZK24za4DE=
Subject key identifier:   F0:F4:1C:2B:2E:97:16:3D:74:2A:E3:F8:F0:2C:87:8E:0C:39:7A:C4
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer:       /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial:       019EDC1C04FDD3F40E7584BEF1E6C6516BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number:          1592
Signing time:             Thu 18 Jun 2026 19:01:24 +0000
Manifest this update:     Thu 18 Jun 2026 19:01:24 +0000
Manifest next update:     Fri 19 Jun 2026 19:01:24 +0000
Files and hashes:         1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
                          2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: TFktEgfkYVodO1J9CRF2D+i4tKzN8UEN6g7e0kEG2K0=)
                          3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 19:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:1c:04:fd:d3:f4:0e:75:84:be:f1:e6:c6:51:6b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
        Validity
            Not Before: Jun 18 19:01:24 2026 GMT
            Not After : Jun 19 19:01:24 2026 GMT
        Subject: CN=f0f41c2b2e97163d742ae3f8f02c878e0c397ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:f3:30:cc:25:74:ac:78:e9:60:72:6a:1b:
                    87:42:44:14:57:28:e0:be:5f:4b:40:8c:eb:fc:0e:
                    f1:02:4a:77:13:42:21:a4:37:30:b8:60:f9:db:4e:
                    5f:28:8d:88:c8:b4:fe:2a:43:56:65:d3:3b:2e:64:
                    68:45:df:d0:4b:0d:ac:30:29:a5:e3:c0:a9:ba:1b:
                    81:f5:10:94:0e:f7:69:6d:08:50:af:6a:8a:ad:9a:
                    d2:10:7b:c0:8b:fe:a5:76:1a:51:57:44:53:5f:81:
                    7e:1a:4d:4b:a2:5b:97:86:cb:3e:98:fe:48:cc:fe:
                    bc:f1:50:a7:c9:77:8b:a6:4d:1c:76:e4:65:16:3a:
                    78:fa:10:c1:24:a1:cd:e8:54:cc:32:c4:bc:bb:d1:
                    de:4d:35:d6:10:c6:eb:c5:2d:b0:b5:dd:e8:62:1c:
                    57:5b:c0:10:02:bd:a4:74:99:be:53:43:37:34:13:
                    2e:8a:b3:9f:a8:b1:6e:9f:3f:e7:28:c5:ac:08:58:
                    8e:e0:49:8a:7d:e6:75:8b:d2:74:8e:c7:3d:c5:b5:
                    6a:a4:40:77:ea:5d:a6:f6:99:56:2d:70:c2:eb:d0:
                    b0:42:73:66:b9:a5:a3:5a:ed:de:be:19:0d:79:0e:
                    92:3b:77:f4:f0:cb:a2:3c:77:07:8e:21:c0:f8:49:
                    ee:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F4:1C:2B:2E:97:16:3D:74:2A:E3:F8:F0:2C:87:8E:0C:39:7A:C4
            X509v3 Authority Key Identifier:
                keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4a:e0:39:90:d9:ab:06:2f:90:a5:bf:f0:9f:00:b1:29:84:
         00:48:dd:e4:12:37:c5:bc:e1:28:cc:00:80:af:b8:9c:a2:db:
         d1:9c:50:64:89:40:8f:ed:d4:ce:96:0a:45:61:37:dc:fc:68:
         77:00:4f:e2:e3:f8:b4:a7:6d:51:91:62:dc:9c:b4:4b:30:5c:
         79:f9:f5:36:1d:77:61:4f:d4:67:68:43:73:d7:72:46:a1:a0:
         e5:a7:95:93:a7:d7:5d:c8:1e:56:6e:1d:aa:ad:ec:90:b2:b0:
         16:03:93:c4:a8:97:83:56:b1:e5:e9:48:f2:61:0d:25:f5:99:
         dc:e0:2b:d3:03:b0:16:0e:4b:32:6a:f3:d2:db:39:1d:c5:0e:
         c5:6f:32:b0:d1:0c:5d:31:0a:37:8c:32:dd:19:6d:67:ab:1d:
         6b:e7:7e:cd:f0:df:75:bb:bd:72:72:1c:2e:4f:8d:15:99:38:
         7b:fe:62:df:c7:58:4e:bf:e9:15:36:d7:5e:79:f9:69:48:95:
         4a:7c:4b:03:ac:98:19:84:78:77:ba:9e:1e:d6:56:13:53:3a:
         54:c0:45:a2:3e:f4:13:5f:6c:53:ba:ee:92:e4:a5:b2:45:8a:
         88:a7:de:e6:e8:85:3c:43:14:59:9a:55:c3:41:0d:1d:d3:5e:
         76:5b:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 03:36:25 2026 by rpki-client