Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File:                     MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier:          NCU64HLxnCBspl8+QEYDExoaxtTyMaONU82/Cb8ivZY=
Subject key identifier:   59:47:79:9A:08:B1:7F:B7:11:FC:C1:05:AC:8E:0B:47:F4:CE:A8:99
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer:       /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial:       019EEE226150C891088E83AD8B4BAA30FC16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number:          1972
Signing time:             Mon 22 Jun 2026 07:01:30 +0000
Manifest this update:     Mon 22 Jun 2026 07:01:30 +0000
Manifest next update:     Tue 23 Jun 2026 07:01:30 +0000
Files and hashes:         1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: XV4y2iAzG/evGeQbu5AAs0z2G9yg0hkMjNkC+tDsLow=)
                          2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
                          3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
                          4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Jun 2026 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ee:22:61:50:c8:91:08:8e:83:ad:8b:4b:aa:30:fc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
        Validity
            Not Before: Jun 22 07:01:30 2026 GMT
            Not After : Jun 23 07:01:30 2026 GMT
        Subject: CN=5947799a08b17fb711fcc105ac8e0b47f4cea899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1f:89:81:e8:62:ba:75:09:e6:81:38:d4:12:
                    3a:79:1c:8d:8d:c4:96:97:71:db:6e:01:73:8b:7b:
                    9f:6d:21:7a:28:3f:77:dd:55:e3:d0:76:fd:5f:17:
                    cc:98:be:9c:1b:71:73:9b:df:cd:e5:f3:c3:f2:ab:
                    cf:f7:93:0e:53:64:85:c3:fb:64:b7:46:47:f2:e9:
                    97:7a:f7:2a:1a:22:99:30:c1:11:26:7e:a0:1b:21:
                    cc:17:73:63:9a:78:66:50:62:b3:a4:07:f9:e1:b6:
                    5c:04:30:6c:fb:98:14:3e:cb:cc:3d:a3:1e:71:58:
                    f6:1c:90:45:66:81:9b:c4:8e:82:f2:19:12:fb:6a:
                    ef:91:66:c4:87:ce:fc:7c:d7:02:06:a8:52:35:fe:
                    72:49:f3:6c:17:74:2b:3d:ca:9b:b9:ea:66:2e:a9:
                    a1:72:70:8c:f6:16:fd:ed:77:ae:01:23:01:20:c6:
                    99:32:f8:e0:7c:d7:d2:d8:fa:95:c8:54:4d:94:40:
                    1b:39:cb:af:6b:42:e6:bd:22:0c:7d:a5:fa:71:d6:
                    c4:25:dd:ff:88:1a:ab:0c:16:1b:7a:1c:6e:a4:ac:
                    a5:ff:51:8d:19:f6:c5:7b:de:ca:1b:89:06:ee:9d:
                    a6:fd:27:8a:07:59:eb:d7:94:6c:dc:8c:09:aa:07:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:47:79:9A:08:B1:7F:B7:11:FC:C1:05:AC:8E:0B:47:F4:CE:A8:99
            X509v3 Authority Key Identifier:
                keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ba:ae:7f:3d:fe:16:23:ac:dd:fb:1c:1a:25:0a:e2:04:4c:
         1e:05:83:fb:3d:b2:0c:c8:64:6e:a0:8a:2d:0f:1e:0f:3e:f1:
         0b:7d:e7:48:91:8e:b1:68:79:04:64:c9:1d:cb:ad:f3:02:74:
         83:84:2f:9b:04:88:f1:10:b5:df:12:02:78:d7:01:cf:2a:f7:
         7b:e0:d3:c7:5c:e5:35:55:ea:45:61:7d:82:99:34:93:93:54:
         ec:8d:30:a4:0b:ed:b6:31:70:05:d8:a2:e2:a7:27:92:e8:37:
         1c:61:ef:f4:3b:34:69:ae:be:9c:49:c3:35:93:3a:d5:21:69:
         70:9f:85:d4:9d:3a:e2:a5:dd:eb:6b:78:0b:ae:ce:6e:36:dc:
         01:5d:80:2d:c1:3e:19:bf:b2:ed:65:8f:50:40:e0:9b:62:20:
         d7:20:b4:0b:f5:80:65:a6:37:da:91:de:14:20:6c:61:a8:46:
         db:81:9e:d7:3d:5c:8f:58:7c:c5:dc:ef:ee:83:a0:21:63:5f:
         f3:19:3e:88:da:cf:b9:cb:db:65:09:c7:f0:c9:77:e1:72:f2:
         bb:75:b1:d6:47:a1:e7:30:88:29:ec:cd:aa:35:f5:76:39:d5:
         c3:66:21:a4:36:3f:a3:fd:b0:2d:9e:2e:0a:aa:bd:f7:72:08:
         93:f7:6a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 12:51:13 2026 by rpki-client