Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File:                     cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier:          d5O3bvz4AJqncwHgHo7ZGnvE6OfGpl761wOKcZbzg4w=
Subject key identifier:   7C:47:A4:F7:69:A6:09:62:B2:51:CD:ED:E3:39:92:DC:CD:EA:26:AB
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer:       /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial:       019EB8B45C9B020106B1A9411F182E603B10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number:          077A
Signing time:             Thu 11 Jun 2026 22:01:28 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:28 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:28 +0000
Files and hashes:         1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: V1XBJkDu/hfEsY09CuTrxOeP8m1JOoVgDphHx2YxNPc=)
                          2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:5c:9b:02:01:06:b1:a9:41:1f:18:2e:60:3b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
        Validity
            Not Before: Jun 11 22:01:28 2026 GMT
            Not After : Jun 12 22:01:28 2026 GMT
        Subject: CN=7c47a4f769a60962b251cdede33992dccdea26ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:e1:9c:ee:22:07:84:05:17:c0:1f:41:5d:
                    df:64:ee:b2:34:48:7d:37:b3:ab:40:0e:13:b5:da:
                    1e:24:6f:7f:38:5b:fd:90:64:ed:8d:9a:67:9a:bc:
                    c9:b3:9b:d6:e7:40:cf:0b:88:d9:be:4d:4c:cb:45:
                    c8:1e:a3:9d:16:fc:6e:87:bf:65:a7:f0:28:bd:41:
                    2e:39:c5:56:d8:7e:67:6f:31:1e:59:21:e3:3e:2f:
                    41:6a:29:23:15:7b:49:f9:76:65:f6:66:fa:03:60:
                    5e:b1:99:62:6a:cd:23:5b:8e:c1:c9:96:f4:27:98:
                    53:f8:84:99:d5:3a:53:cd:44:25:9d:1b:03:34:9d:
                    a2:bd:df:dc:0e:b7:fe:6e:cb:6f:c4:da:a4:e2:34:
                    c3:b4:6b:d7:8c:cf:35:69:a2:95:b6:ef:f9:d4:20:
                    b4:5b:16:65:ae:47:8d:30:87:b3:48:ac:6c:4f:03:
                    50:8e:d0:e7:2d:85:0d:f4:09:c7:f1:d2:eb:e8:4f:
                    29:e7:9f:7c:1f:49:77:f3:25:8c:ae:17:5a:d0:7f:
                    fa:7a:ba:c9:e5:6f:69:f0:6e:60:9b:90:c9:0a:ff:
                    3f:3d:ec:03:95:2f:92:ba:7d:fd:cd:ff:d4:1e:5f:
                    b0:ef:a4:3f:52:99:f7:b9:cf:07:7b:09:3a:0a:c8:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:47:A4:F7:69:A6:09:62:B2:51:CD:ED:E3:39:92:DC:CD:EA:26:AB
            X509v3 Authority Key Identifier:
                keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c4:e2:c3:31:a5:75:6e:5f:5a:cd:99:07:ec:31:d6:a1:e1:
         34:9d:c3:ff:f4:ac:eb:ac:45:ba:a2:56:58:37:5f:ac:1c:45:
         37:37:76:b7:d2:bb:d6:b5:e5:aa:29:58:96:a4:dc:25:09:8d:
         fd:e2:b6:46:68:f0:16:24:28:aa:7c:c3:2e:f1:58:b8:ef:1e:
         63:8c:c1:7f:53:8a:45:c5:df:e7:48:c5:84:97:2b:e9:5a:45:
         33:d8:9e:50:45:60:82:9a:f9:37:77:b3:eb:28:8e:39:8e:5b:
         f2:1a:72:92:a9:09:2b:0c:52:44:bc:e1:c2:1f:a5:62:86:60:
         ee:63:3b:d7:44:9f:27:92:d3:33:63:73:53:b2:cf:1f:31:65:
         cd:cc:ec:54:10:0c:9e:84:de:3b:c9:93:cc:44:a6:30:83:e8:
         ab:fb:d9:0f:87:3d:46:30:ee:3e:17:5b:c7:0c:51:a8:36:0b:
         c6:85:c7:c4:1e:de:26:db:d6:5a:38:ab:e2:6b:d5:0b:1b:e3:
         01:ba:c4:3d:4f:f5:e8:49:04:3f:d9:01:73:a9:3b:b6:2d:5d:
         d9:48:b6:e7:b4:35:4a:e8:d3:e8:b3:df:35:7c:e1:60:eb:84:
         fc:5a:b5:fc:d9:7c:95:3f:e0:5c:e9:d0:c1:fe:65:21:e5:db:
         06:dd:e0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:47 2026 by rpki-client