Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File:                     24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier:          4u6lb6iEgNMRHk3Cg08K3XGjdIJyjCBOf8pfmtffjiw=
Subject key identifier:   4F:F4:47:CE:75:1A:6B:7F:55:73:CE:AD:9F:26:F8:A2:9F:04:E8:AA
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer:       /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial:       019E9B16FE4F5ACB8CB6B866135D4171C6C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number:          1041
Signing time:             Sat 06 Jun 2026 04:00:35 +0000
Manifest this update:     Sat 06 Jun 2026 04:00:35 +0000
Manifest next update:     Sun 07 Jun 2026 04:00:35 +0000
Files and hashes:         1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=)
                          2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: wwWaL0++4oSsd2JDrKnHJJxIo3KC36jt7QDXCZp0gzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:16:fe:4f:5a:cb:8c:b6:b8:66:13:5d:41:71:c6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
        Validity
            Not Before: Jun  6 04:00:35 2026 GMT
            Not After : Jun  7 04:00:35 2026 GMT
        Subject: CN=4ff447ce751a6b7f5573cead9f26f8a29f04e8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:63:36:b1:1e:5e:b0:38:eb:5f:7a:d9:f1:
                    6b:cf:ef:cb:65:b1:46:d2:b1:74:51:8e:20:60:d0:
                    70:b7:6c:d7:eb:64:0f:14:cb:b0:54:86:ea:01:af:
                    f7:b4:da:d2:ab:66:a5:66:cb:75:c5:d1:97:46:d9:
                    69:92:ce:71:ba:2a:3b:66:06:a9:ec:11:79:78:fb:
                    80:34:3b:ca:90:9a:1d:e3:cf:74:fd:ae:b8:8f:06:
                    7d:fe:70:69:b6:01:95:36:84:a3:37:80:46:7e:d1:
                    ee:aa:eb:1c:72:03:03:ba:dc:f4:91:c9:b8:f9:65:
                    88:17:05:3b:6e:92:cb:26:e8:6c:a2:b2:44:56:82:
                    aa:25:1d:f6:c3:63:13:10:c1:da:36:31:e8:d1:ee:
                    3e:db:ad:23:b5:b6:83:30:f1:c2:64:23:7e:a8:b2:
                    89:bf:e9:10:2e:d2:80:b4:4a:34:55:11:0a:88:63:
                    63:7b:2f:0a:1b:0f:66:4f:e0:01:de:9b:a2:0b:08:
                    7a:e9:86:0d:a2:6f:10:f1:5e:82:8e:13:69:78:b6:
                    ce:bf:be:b2:4d:be:15:81:6d:b6:3e:cd:a5:f0:9b:
                    c4:47:7c:83:e7:35:0f:66:08:37:fd:b9:99:14:af:
                    1e:6d:02:b6:c2:95:9b:bb:a7:92:2b:0e:43:55:0b:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F4:47:CE:75:1A:6B:7F:55:73:CE:AD:9F:26:F8:A2:9F:04:E8:AA
            X509v3 Authority Key Identifier:
                keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:21:22:5a:cd:26:1e:59:45:22:44:5e:59:ff:97:a6:c4:10:
         8b:21:3f:97:bf:38:2a:40:40:81:8b:75:0c:67:7a:92:d5:6d:
         48:17:23:1c:9e:7c:5c:ba:28:9e:39:c7:15:95:02:f3:c0:45:
         6b:21:73:40:b4:5c:a9:49:ce:71:0c:48:e6:7d:97:87:46:c6:
         e5:4c:bd:1f:dd:67:5f:3f:c4:32:80:8a:b9:29:66:5c:d9:41:
         e1:e0:4d:54:50:bf:48:f2:bb:a2:40:02:22:bd:d1:ef:1f:25:
         e5:d6:33:f1:8b:c7:a6:c2:94:00:fe:17:9f:12:4d:d3:e9:ce:
         c2:a4:13:f1:32:b3:70:99:57:fd:09:53:55:55:45:f3:ec:7b:
         c4:bd:f0:c9:c3:ca:35:34:e7:20:90:6d:98:06:25:6a:5b:f2:
         e5:aa:b1:50:68:b4:4e:e8:8d:04:89:84:4d:47:fc:4a:b9:6a:
         5a:e9:b0:ac:dd:08:81:12:c1:83:ca:d9:6a:63:e7:11:0f:00:
         19:c3:71:e5:53:15:f5:b3:30:c1:c5:10:28:8c:51:54:2f:1f:
         71:91:43:c9:d4:36:83:9c:a5:6f:d0:7f:ff:c9:7c:74:cb:5c:
         e9:86:5a:bc:37:77:68:ec:a9:c4:b1:dd:ba:51:83:c6:d5:e3:
         28:da:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:09:52 2026 by rpki-client