Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
File:                     ECgK10HnIygIXV-leXqEUfX7Ajg.mft (raw, json)
Hash identifier:          Fw3xOTC47wUbMwDaZssSdNwwp5gRgZitJVMl4Wzzou0=
Subject key identifier:   3A:A7:86:52:7A:22:8C:64:C6:5E:DD:3E:52:49:D2:28:F8:FF:43:73
Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
Certificate issuer:       /CN=10280ad741e72328085d5fa5797a8451f5fb0238
Certificate serial:       019F1830C54DF46B8AE840AF776E4AE46A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
Manifest number:          097C
Signing time:             Tue 30 Jun 2026 11:01:17 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:17 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:17 +0000
Files and hashes:         1: ECgK10HnIygIXV-leXqEUfX7Ajg.crl (hash: 1BRUcC0iWEtpUE0Lq+vEzGW5+U/Y3CihaKaZ+9stCAI=)
                          2: cFBz2VwRtAE7Ewcz64ZDacXfB5Q.roa (hash: 8S34S+6olNesEjRXQB7m9lNGl0nTPvWZwfDko3leMVc=)
                          3: f4YlcOOq_31WT7fc27bbteRGEMw.roa (hash: E8VFyjnJbu0a/NApI535E/vwvrXP+nlwEeePdVD35Jo=)
                          4: ylp5NiXG-DWol4IjywEA3MrLU5k.roa (hash: ev143/+cymXpiGa9zVi8mgdvQUw00MuKnS6trW4s38w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:c5:4d:f4:6b:8a:e8:40:af:77:6e:4a:e4:6a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238
        Validity
            Not Before: Jun 30 11:01:17 2026 GMT
            Not After : Jul  1 11:01:17 2026 GMT
        Subject: CN=3aa786527a228c64c65edd3e5249d228f8ff4373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:6a:51:16:5c:8d:e0:04:32:ca:85:ed:e0:
                    0f:ae:db:de:d8:5c:a6:3b:31:ec:c8:04:cb:44:bd:
                    a4:48:06:6b:70:b8:93:6c:b5:c8:9c:9e:cc:5e:bb:
                    7c:3a:c7:db:cf:f6:0b:a2:ad:be:3f:7d:26:bc:63:
                    fc:37:fd:70:47:7a:86:f7:37:c0:c0:61:6e:9f:68:
                    94:e7:86:77:e9:18:70:3c:1e:e2:e1:51:d6:86:4b:
                    d2:61:e8:52:c4:e4:b3:50:c8:f5:29:27:8b:93:2e:
                    50:7a:f5:c4:fd:a9:35:6b:e4:74:d1:b9:57:15:c8:
                    18:59:ba:36:00:f7:39:ef:2c:a7:78:2c:94:3e:9a:
                    70:0b:8d:3f:6b:ab:98:05:4d:42:e0:4a:c7:e1:fa:
                    e3:de:3d:07:43:fe:32:9c:22:a4:d5:31:c0:cb:9d:
                    e4:32:9d:6a:04:af:53:38:d1:94:da:b9:85:54:10:
                    f5:8f:d8:15:83:d5:3f:c7:48:97:4f:80:32:18:28:
                    da:c5:f6:c7:e1:2b:f5:45:7c:65:c4:70:ed:60:34:
                    31:d5:c7:f7:13:db:e7:84:42:98:1a:8f:ae:25:ac:
                    45:31:d0:39:95:e0:a0:15:ba:c8:07:42:a3:26:84:
                    ea:72:9b:24:ad:2b:10:85:08:ee:79:ea:a7:fc:a1:
                    c9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A7:86:52:7A:22:8C:64:C6:5E:DD:3E:52:49:D2:28:F8:FF:43:73
            X509v3 Authority Key Identifier:
                keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:b5:6a:6e:7c:01:bc:a4:aa:63:d7:10:38:8b:bc:08:0b:
         c0:38:d1:e7:89:5b:33:6d:20:1d:e8:7a:8e:5d:9d:d6:d6:d8:
         f6:10:89:28:78:28:13:cf:c5:80:dc:3c:8b:14:0c:31:bf:af:
         1b:d6:a3:67:62:8b:96:f6:51:00:e4:db:95:98:8e:b6:b3:2c:
         9d:76:5c:8d:5e:29:40:f4:9b:91:6b:2a:a1:e3:3f:37:6f:eb:
         b7:7b:9d:a3:4d:ff:cc:81:98:c4:4b:29:1f:cb:36:8d:1b:b9:
         25:bb:d3:4e:f5:df:f9:a4:25:a6:a7:e1:29:7f:b1:aa:46:d4:
         c4:fe:5c:e0:85:7b:b6:b0:a5:f5:d4:7e:d1:f4:ff:88:82:d7:
         fa:77:0a:78:67:9d:7c:90:60:a5:5c:03:7f:09:f6:1a:91:42:
         74:b0:eb:46:2d:8e:f3:07:5b:66:01:d8:07:df:92:3c:3b:90:
         f3:92:d7:58:06:52:71:de:bf:d2:a6:9f:98:c9:50:10:16:d7:
         5d:42:f2:07:91:54:cd:d6:9f:7a:85:a3:be:46:0f:fb:e7:6b:
         36:93:1d:45:db:42:6e:5e:ce:c2:6e:08:2f:91:d4:bb:f0:2d:
         ee:5e:f2:89:8e:5a:96:0b:11:ec:b3:05:aa:73:6b:9f:74:51:
         47:06:eb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:44 2026 by rpki-client