Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
File:                     1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft (raw, json)
Hash identifier:          AkwadSMtY87DZV0vtRZvoZNzIJhV9nTbIiK3cSrMwFM=
Subject key identifier:   08:08:60:50:AA:D2:73:A9:19:66:33:86:C1:65:D3:23:96:E3:29:7A
Authority key identifier: F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17
Certificate issuer:       /CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
Certificate serial:       019F189DED77906E3ED1E72485DE05820FA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
Manifest number:          0F90
Signing time:             Tue 30 Jun 2026 13:00:30 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:30 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:30 +0000
Files and hashes:         1: 1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl (hash: 2FMMWhLBuQwfXNZawy6bn5i1CyoFh3qbKN+TaFt1aAw=)
                          2: LjyKQnoqZ5RymbjzsonMI_FvadE.roa (hash: fUfxxZQ9bErMyThXgB9Vm8HXoJC9cjybZ/MiJy6eLxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9d:ed:77:90:6e:3e:d1:e7:24:85:de:05:82:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
        Validity
            Not Before: Jun 30 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=08086050aad273a919663386c165d32396e3297a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:fb:75:ea:fb:72:73:60:40:73:e6:ba:e2:
                    d8:00:7c:ad:9e:ca:d8:ed:93:ce:39:09:fe:da:13:
                    1a:9a:e4:8e:3c:7d:36:c7:f6:8b:ed:f7:08:ee:d4:
                    41:da:75:85:e6:ed:24:e0:73:94:21:d3:7d:e9:9b:
                    fa:72:3c:e5:fe:6e:e4:18:d4:eb:5d:97:98:5a:97:
                    8d:0c:d1:a6:cd:a6:54:c0:3c:aa:6b:30:4a:80:d3:
                    1b:8c:75:05:8d:4c:cf:45:01:25:a6:70:be:43:2f:
                    d1:b9:52:04:17:4d:e2:b1:ba:0e:b7:f3:7a:7f:5c:
                    22:fb:b3:a9:dd:02:85:21:22:aa:92:f9:d5:a3:37:
                    ac:cc:30:85:8a:9b:1c:6b:2e:46:e3:8c:af:b4:cb:
                    8e:2e:da:9d:ba:30:f8:09:a0:06:45:79:05:e8:3f:
                    d7:fd:62:20:68:1a:2c:08:ce:47:8b:54:f5:c4:dd:
                    d6:d2:d4:66:22:8b:f9:90:d6:d8:13:2a:75:96:70:
                    c0:72:b2:32:89:49:c0:b8:fc:d3:b3:09:c0:6f:98:
                    55:6b:f6:04:9a:f9:8b:ec:18:18:40:6b:f7:58:95:
                    6c:2f:5d:b9:06:6f:49:ea:1e:99:3e:da:82:0d:9b:
                    21:f1:dc:ea:5c:bd:a3:64:79:f1:a0:bf:46:4e:ac:
                    eb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:08:60:50:AA:D2:73:A9:19:66:33:86:C1:65:D3:23:96:E3:29:7A
            X509v3 Authority Key Identifier:
                keyid:F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ac:9b:50:a2:a6:b2:02:6f:9f:fa:2f:0b:85:62:eb:87:c8:
         57:82:b4:56:68:e1:9a:e0:6c:02:42:8d:71:43:9b:51:f3:b5:
         b2:92:50:64:31:99:b8:ec:da:72:6f:1f:3f:67:8d:84:fb:d0:
         ea:19:63:bd:e6:02:04:30:4b:3c:dd:74:c3:b9:0f:c4:e2:84:
         d2:7b:5b:e1:24:34:20:b1:2c:df:fb:e2:e2:b8:6e:db:f3:d6:
         09:fe:a1:2e:fd:54:07:c1:f7:51:70:fc:5b:3f:7d:d5:ae:12:
         01:00:ae:fb:0e:22:4a:a1:e2:07:03:54:d2:45:db:0c:56:bd:
         77:6e:7d:b6:f4:03:a9:04:9d:85:e6:ce:12:cb:c5:b8:71:81:
         2d:45:0d:ad:aa:ce:ea:42:9e:ed:77:7f:0f:4d:77:63:1d:81:
         05:76:a6:8b:49:98:6b:af:8c:35:ff:16:be:e9:c4:d5:14:8b:
         9d:a2:bf:16:4e:40:11:13:5e:e8:5c:09:89:4b:7b:f3:3d:bc:
         17:3e:91:f5:39:0f:4c:a4:91:b6:e8:c7:71:59:1c:13:7c:2c:
         1f:01:fa:d5:58:a2:74:fe:e7:35:2c:20:c8:f7:a5:91:90:77:
         ed:ac:f8:31:8f:07:92:b8:9a:02:ff:ed:7c:fc:b8:1e:50:56:
         4e:a4:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:20 2026 by rpki-client