Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File:                     1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier:          JLpwMVNTeMQMjVpM9hTZbhfTWwtDz6uQUXf+eIAsXoM=
Subject key identifier:   B3:BF:40:BA:4D:9B:A3:F8:42:FF:85:B5:E7:A2:F7:CB:A4:C4:25:5D
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer:       /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial:       019F189E904D3B9F3D78DF3C8899CD0CF264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number:          124E
Signing time:             Tue 30 Jun 2026 13:01:12 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:12 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:12 +0000
Files and hashes:         1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: zPjJYYGX5/hnoSBzBJxMn5+Er+ol1PXkGSPO5KMpNUQ=)
                          2: fSxv-fa820aQ4S9EYgBkeHgJYUs.roa (hash: K47nAqoGk2oEUNxR6ydvT1zDvrh8m0EYPg1t6S3F6ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:90:4d:3b:9f:3d:78:df:3c:88:99:cd:0c:f2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
        Validity
            Not Before: Jun 30 13:01:12 2026 GMT
            Not After : Jul  1 13:01:12 2026 GMT
        Subject: CN=b3bf40ba4d9ba3f842ff85b5e7a2f7cba4c4255d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:85:e9:75:a8:a3:b7:90:d0:5a:b2:b9:c7:
                    e5:d6:20:f0:ad:c9:87:bf:1a:3a:69:69:5c:5d:1c:
                    42:11:43:d9:cc:85:b7:be:fc:23:c4:b1:3e:5a:92:
                    28:e7:59:37:3a:25:fc:7a:e6:22:d6:fa:fb:84:ea:
                    10:8f:1f:b6:3d:76:2f:98:b2:ff:ea:1d:e4:f7:1f:
                    b4:12:25:7b:7b:0d:99:98:86:b8:a5:8b:28:43:31:
                    c4:dd:f3:67:fc:96:89:19:b3:fc:5a:40:fd:cd:06:
                    66:79:ec:ee:0b:e3:66:95:69:5c:b9:cb:ad:e4:02:
                    99:c0:1f:d0:ae:98:11:1a:77:0b:0e:fa:1a:0e:36:
                    8b:74:55:9d:1a:6b:28:1e:11:0a:8f:3b:0e:46:33:
                    f0:62:af:e2:19:ce:13:c5:67:19:65:68:e4:92:77:
                    f1:3c:a2:5e:23:56:60:32:17:8c:b0:c2:e8:81:20:
                    e9:bc:f3:b1:b0:77:46:2f:c4:2f:61:4a:83:f9:4d:
                    6b:f6:d8:e8:30:b3:c5:4a:4f:05:20:45:a1:64:c2:
                    41:e6:c1:4d:27:ba:bc:18:e7:ac:c6:e9:6d:87:22:
                    00:07:72:39:ce:d0:d1:e8:b9:41:d9:97:c1:dc:57:
                    e9:f7:62:12:14:be:47:01:57:53:dd:f6:87:65:f4:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BF:40:BA:4D:9B:A3:F8:42:FF:85:B5:E7:A2:F7:CB:A4:C4:25:5D
            X509v3 Authority Key Identifier:
                keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:03:01:91:25:df:3c:35:38:72:00:20:15:08:d2:eb:20:
         e6:07:fb:19:b6:96:d6:56:14:23:2b:ae:66:d8:ab:f5:6b:37:
         67:72:3c:42:37:f1:6b:df:93:d9:be:19:42:81:4c:4a:01:37:
         21:a6:3e:90:41:29:d5:02:a0:3d:c2:5c:2c:99:ef:64:f9:2e:
         aa:fd:bb:4c:0c:88:91:42:9c:47:f3:a7:7e:54:1e:0b:e3:c7:
         29:af:93:ec:c4:be:15:a2:44:91:0b:c1:3e:24:2e:56:c7:c6:
         ac:e4:4f:8a:98:3d:24:3e:6b:bb:96:80:67:34:f7:bf:bf:5c:
         3b:33:bb:cf:89:f1:dd:f1:d0:32:7f:4d:f8:07:6f:d4:05:42:
         31:3f:17:44:f8:b4:a2:ff:d8:60:fe:de:2b:f3:20:25:64:dc:
         fe:83:a6:90:84:41:cd:2d:88:0c:24:29:00:76:77:8c:da:e4:
         0b:f9:32:3a:a1:f1:f2:c2:be:f2:d3:9d:2a:d4:67:a4:78:ec:
         ac:dc:0e:39:ac:f6:58:58:f3:b5:9e:16:19:1b:d0:36:b6:57:
         08:3e:ba:6d:5d:a3:b3:b6:35:d1:e8:99:74:0a:b4:06:7e:84:
         db:4a:34:b7:72:11:aa:dd:63:9a:5a:cd:c0:20:10:0c:39:be:
         f4:ba:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:56 2026 by rpki-client