Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File:                     BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier:          zL6tPneBttlH5YDRLVuTwcqpZw28bbUT0/aO0KLsT1I=
Subject key identifier:   AC:C0:64:4C:ED:A2:1A:E7:BA:89:52:D0:AC:35:3B:D3:B3:57:42:D4
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer:       /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial:       019F17F9BA52140F82F95795BF9432873728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number:          1989
Signing time:             Tue 30 Jun 2026 10:01:09 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:09 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:09 +0000
Files and hashes:         1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: bBKRuJzmFrU0joLWp5zKmHGrGN+qFEaNCJGFZn/DevA=)
                          2: XXIoAY-5Av7-gKbYLelSLr2VuAQ.roa (hash: JJi5E5XJ/T8+/7RMzDeJIxZnJ0RujHszIcclzG1wW/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:ba:52:14:0f:82:f9:57:95:bf:94:32:87:37:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
        Validity
            Not Before: Jun 30 10:01:09 2026 GMT
            Not After : Jul  1 10:01:09 2026 GMT
        Subject: CN=acc0644ceda21ae7ba8952d0ac353bd3b35742d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:40:db:05:bc:a7:6f:b3:5d:2a:2c:74:d3:
                    38:95:75:22:4b:42:45:21:16:29:f3:60:fa:20:16:
                    db:53:e6:b5:9c:1c:77:02:9f:25:a5:c5:f2:df:4b:
                    63:fd:c5:3b:d3:c8:ac:17:1b:f3:e1:71:48:30:be:
                    33:da:0a:53:96:54:ed:b6:49:a3:1f:55:6a:4b:83:
                    b2:b2:be:b6:19:27:0c:b6:ce:87:6a:10:a9:6a:53:
                    30:34:ea:91:4a:27:e4:89:82:fa:b3:c4:53:cc:b4:
                    91:45:b1:57:ad:d2:73:1e:ad:80:8d:6b:16:5a:b8:
                    63:0a:96:91:cc:0c:dd:a2:af:d3:ec:6e:f9:60:ed:
                    ee:5e:5d:59:7a:28:61:12:2a:45:c0:42:08:61:71:
                    6e:a4:e1:60:d6:b7:80:93:07:f0:b7:a6:fa:f7:9a:
                    0a:df:34:fa:80:42:84:61:49:bc:81:35:ea:c5:57:
                    55:57:f9:9c:8c:2a:99:a1:40:5e:9f:84:fb:10:ee:
                    c9:a8:bc:df:92:31:ec:87:d0:0a:25:8c:ad:96:6a:
                    11:51:68:6b:b2:1e:8f:1d:c4:46:44:77:07:19:83:
                    a3:23:ba:e5:cc:10:e7:54:73:b5:ef:d4:10:f8:e1:
                    b0:b6:ce:58:54:77:0e:43:8c:00:fa:b9:72:66:82:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C0:64:4C:ED:A2:1A:E7:BA:89:52:D0:AC:35:3B:D3:B3:57:42:D4
            X509v3 Authority Key Identifier:
                keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:95:c2:9b:b9:0e:8c:e2:de:ab:e7:96:2f:a1:49:cb:e2:74:
         a4:20:28:a8:5b:07:20:28:e3:e6:9e:cb:9f:e4:61:8c:dd:45:
         0b:c4:80:bf:7b:5a:e1:e3:22:75:8d:46:2d:cd:43:24:12:5f:
         59:34:c4:34:10:47:83:0a:09:c4:df:1f:2f:33:e4:e3:e6:1f:
         62:ea:8d:d7:70:a7:5a:a3:ee:e8:a2:69:25:00:0c:3f:2a:3f:
         04:f6:9b:4c:4e:9a:49:c4:86:67:62:cc:13:56:28:3a:83:f1:
         38:20:db:35:e1:f8:ae:3f:e2:92:7a:4f:1c:64:d1:bc:39:1e:
         12:30:ad:13:58:d3:ba:b8:7d:74:ff:a8:26:6e:3b:70:e2:ca:
         2f:60:19:36:5b:fe:5a:da:16:ec:0c:3f:3d:09:0e:ff:2a:07:
         55:73:ee:dc:82:a0:7f:99:1b:f7:88:18:8f:82:14:50:63:6d:
         26:2e:ab:44:26:41:2e:a3:b8:e1:6c:50:3a:57:b6:60:63:c1:
         9b:0e:a8:6f:69:97:e9:06:20:c0:bb:3b:98:62:8a:f7:2b:3b:
         03:8e:b5:4c:3a:ce:aa:51:81:e2:d3:1d:d3:a3:98:a8:1d:63:
         99:6b:86:82:ef:fc:3e:6a:1f:c8:85:53:ee:a6:b8:01:34:36:
         90:f1:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:17 2026 by rpki-client