Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File:                     dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier:          +D0ukQYR20oZ3bocF0MImu72i4l19VHgKoy1fkSbVKQ=
Subject key identifier:   F4:C1:E1:18:F4:F2:8B:05:36:89:16:56:80:BB:D8:59:DD:56:54:EF
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer:       /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial:       019EE28BE79F21A91B100814876086AD92F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number:          1794
Signing time:             Sat 20 Jun 2026 01:01:20 +0000
Manifest this update:     Sat 20 Jun 2026 01:01:20 +0000
Manifest next update:     Sun 21 Jun 2026 01:01:20 +0000
Files and hashes:         1: QJLzAcYEPZtusCbKyGwUQTxHEC8.roa (hash: s6kRRpAzDax5R6PcyME5uOuvdqUfyGUTl0Dg3M3bEJY=)
                          2: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: tVEMrIQG6hq+UpIlSKV69t2z+h3mh2+BvcHMrjq7t6g=)
                          3: ujwOpmvI7_mtFn1fgbJBHjBrEAQ.asa (hash: 5KjvP6td+WHS3IxTZC55ymoYHpGObpqQTR6nNfLeSvo=)
                          4: z9mvcCRCkYuHKKd00BlCEYA9eQU.roa (hash: mRPfZgnI9elFYBzB1KqCj8Oo2adMJczMgSykoYWKKi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 01:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e2:8b:e7:9f:21:a9:1b:10:08:14:87:60:86:ad:92:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
        Validity
            Not Before: Jun 20 01:01:20 2026 GMT
            Not After : Jun 21 01:01:20 2026 GMT
        Subject: CN=f4c1e118f4f28b053689165680bbd859dd5654ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:38:8d:e8:ca:f8:1b:fd:fe:9f:82:40:19:
                    64:40:e4:b5:52:1e:86:ab:fe:7b:de:da:9a:8d:8e:
                    da:fa:44:db:2b:b7:f4:bc:9f:5e:80:7e:8c:e5:81:
                    f0:14:7e:89:86:e5:95:b5:c1:17:99:29:76:91:70:
                    90:98:ed:fc:a2:b4:84:9a:a8:0b:80:0f:8d:39:62:
                    f2:36:69:81:6a:ce:a1:05:47:c2:10:5c:74:2a:3a:
                    a3:b9:ab:66:5d:65:3c:ab:96:b3:5f:cd:91:5a:e4:
                    d9:af:51:e9:08:9e:b8:79:65:33:5b:12:28:31:59:
                    ef:6a:d4:84:4c:ed:2b:94:1d:92:08:fa:9d:69:9f:
                    6a:1c:fb:67:d9:66:4a:84:f8:21:87:97:48:fa:7c:
                    46:c0:9b:da:28:be:3a:75:2d:7c:98:b7:21:b5:f1:
                    a4:14:ee:b6:3e:eb:6f:8d:8c:81:c3:3f:b3:d7:74:
                    58:41:89:a3:e2:d2:00:3e:0d:bc:07:70:bf:fd:ff:
                    2b:bf:9a:77:2c:19:4e:ca:75:11:a6:c8:f7:f0:5a:
                    86:2f:3b:58:5a:80:e7:26:0d:75:bb:0d:0d:a2:d9:
                    e8:bd:7c:8d:ac:20:3a:92:d6:bc:9d:28:af:c8:2a:
                    9a:d0:7c:fa:2e:1a:7e:c9:84:82:b9:43:17:46:1a:
                    55:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C1:E1:18:F4:F2:8B:05:36:89:16:56:80:BB:D8:59:DD:56:54:EF
            X509v3 Authority Key Identifier:
                keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cf:98:de:78:23:6e:6e:2d:df:da:63:09:d7:1e:da:d3:bc:
         55:10:33:90:2f:99:6b:c2:d2:3f:a1:16:b9:36:52:99:ff:a6:
         7a:96:5c:2a:0e:76:17:e6:44:5b:d0:b5:9f:bd:78:97:12:60:
         a9:98:f4:f8:be:d4:02:dd:97:5a:d0:1c:39:67:ea:0e:b5:00:
         41:3e:a4:57:1d:16:1e:41:d7:c5:94:be:5b:bd:1f:d5:07:ae:
         29:dd:6f:b4:12:16:39:46:6b:5b:f7:b0:34:d8:a8:f7:71:c0:
         07:b0:d9:ef:b0:19:23:de:68:8a:12:48:ec:71:42:f9:9e:94:
         fe:06:44:25:c5:bd:bb:3b:2b:50:70:94:57:57:17:93:82:03:
         4e:39:a5:5c:49:0f:e5:bd:93:bd:09:32:12:51:18:0d:1a:14:
         be:63:dc:8c:78:b0:80:e9:e3:57:96:eb:f1:c5:0f:cf:b9:60:
         d8:42:02:2b:0e:80:c5:e0:f3:e9:3a:99:f7:ff:a8:e1:a1:10:
         4e:f9:7f:7b:f2:53:31:bb:6f:dd:2c:2f:93:e1:c6:49:4f:af:
         65:94:20:f9:63:16:42:1c:fb:e9:7d:56:df:6d:23:09:08:34:
         1a:3f:2e:3c:a8:ce:2c:0b:4f:20:1a:f7:d7:5e:25:54:7c:98:
         b5:20:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 12:16:34 2026 by rpki-client