Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File:                     D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier:          jyQMJbqXFkldxQfqDMdRkeGT/57VqQIF3D4uZwlYjtg=
Subject key identifier:   0B:3C:28:8F:F7:DC:41:8A:3B:2C:90:39:C7:C5:BA:FB:5C:3B:49:35
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer:       /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial:       019F190C82003FE983B296193CCC7515BC87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 15:01:17 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:17 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:17 +0000
Files and hashes:         1: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: HgK1YUlZKq8yxJ5pNkTgHglO0C1q4vAZs5GlSKl+nqQ=)
                          2: VS5UOf4Oqufmk1nDLv2qDmY9aAk.roa (hash: yxhJeQxv5OL2X3W33orxeTr4UI2HV6MbDSVgY4g3PdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:82:00:3f:e9:83:b2:96:19:3c:cc:75:15:bc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
        Validity
            Not Before: Jun 30 15:01:17 2026 GMT
            Not After : Jul  1 15:01:17 2026 GMT
        Subject: CN=0b3c288ff7dc418a3b2c9039c7c5bafb5c3b4935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:62:2e:b4:fb:5b:27:ca:aa:cf:c5:ae:c0:
                    fb:a9:12:95:ff:de:66:2e:f0:3a:c5:fa:f2:c7:c1:
                    d1:65:86:d0:58:e2:68:62:c6:d4:fe:77:9b:31:c3:
                    a9:e3:df:80:26:bc:8e:49:71:68:62:f4:f8:e2:06:
                    95:eb:de:9b:36:3e:d3:16:65:ad:48:da:c2:e7:36:
                    25:7a:53:36:f0:a9:b5:d8:27:58:34:95:55:b0:3f:
                    bc:e0:0c:82:83:56:8f:d6:9d:66:55:b0:f1:df:5c:
                    35:25:33:67:b9:df:62:10:d2:c6:64:f6:cc:7d:16:
                    cc:54:17:3d:26:d7:c9:f4:03:cc:34:09:ce:cc:56:
                    5d:30:55:d9:6d:30:77:a5:53:62:fb:ff:37:d2:e3:
                    dd:77:6e:17:d7:16:22:11:dc:77:80:29:ab:64:20:
                    21:d5:57:f4:d2:9b:17:c2:0c:66:96:17:14:e1:61:
                    c7:c5:9d:82:7f:fa:58:b2:e3:70:0b:ae:c9:62:1d:
                    0b:47:05:7a:4d:c0:5b:e1:cf:c0:f0:15:cb:96:e0:
                    16:03:00:f5:c1:37:74:ac:44:f4:45:35:a4:e4:1a:
                    56:79:52:6b:9e:a5:1b:83:ea:f9:dd:7b:5b:51:db:
                    65:0c:3f:15:70:35:bb:04:fc:db:d2:78:68:de:c0:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3C:28:8F:F7:DC:41:8A:3B:2C:90:39:C7:C5:BA:FB:5C:3B:49:35
            X509v3 Authority Key Identifier:
                keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:96:6d:68:06:50:62:af:40:2f:c9:01:01:01:e5:7f:4b:f9:
         76:af:46:d6:26:ca:6c:6e:10:8d:ad:a5:e0:9a:9a:44:2e:5b:
         21:c9:a4:aa:65:76:da:7f:0e:16:24:84:f7:97:4e:2f:45:15:
         80:47:39:d6:a4:42:6e:16:15:2b:46:ef:59:c5:0b:bd:84:f8:
         92:ef:bd:dc:69:67:a3:2c:ef:e2:cd:52:01:66:da:83:7f:67:
         e5:de:81:1e:6b:9d:8c:26:f3:5a:02:82:7e:7e:b1:62:69:b6:
         bb:50:23:53:69:42:fe:08:2b:bd:b4:8b:77:80:51:32:f3:c1:
         81:2c:fd:73:0b:cc:9a:02:89:5b:c4:46:5d:00:2f:e8:27:bb:
         3e:88:36:d6:ef:6a:1c:b8:33:0e:f8:07:33:a0:82:fc:eb:02:
         a0:c2:77:c7:d2:66:4e:c9:20:04:5f:5e:32:58:40:1e:d4:a1:
         cc:00:5a:2a:57:bd:11:a8:5f:44:97:87:84:8a:b4:7f:11:3a:
         65:8e:30:d1:e6:c5:9d:e7:c3:f0:18:4c:dc:dc:be:9b:a1:9a:
         24:a2:b5:4a:a0:c9:23:5d:b7:7a:49:02:6a:89:40:04:52:66:
         88:ba:d3:1c:0f:a6:2b:b7:81:57:56:d5:a4:49:83:44:32:b0:
         a3:f0:47:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:17 2026 by rpki-client