Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File:                     D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier:          SsiCVmOcJRadifD5bj1a04sLXDGqloLYQ3SMD3fhhgU=
Subject key identifier:   F9:C7:B3:14:1C:52:58:88:25:11:EA:66:B3:2C:9B:57:92:7D:A9:86
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer:       /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial:       019F1943BD3B96427D1293112362815931B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number:          101E
Signing time:             Tue 30 Jun 2026 16:01:37 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:37 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:37 +0000
Files and hashes:         1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: KKABHPtN8Yf/zOrkwfKmnLJ5iRWtrojl20jdAGq/1F0=)
                          2: jK9vJkC-9INkg3kH606wmZpM3gY.roa (hash: pPtcnLjluAlTQa5sDa1ndB+L+idIHW8vl3l2EMrfHcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:bd:3b:96:42:7d:12:93:11:23:62:81:59:31:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
        Validity
            Not Before: Jun 30 16:01:37 2026 GMT
            Not After : Jul  1 16:01:37 2026 GMT
        Subject: CN=f9c7b3141c5258882511ea66b32c9b57927da986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:73:85:d7:c3:c6:dd:dc:33:89:51:e2:fe:5f:
                    78:6a:79:ad:8d:5c:db:46:f2:9b:09:9f:94:bd:17:
                    80:83:6b:4b:84:ef:b9:2c:69:f7:47:76:96:6d:a7:
                    e1:9b:2d:7e:fc:7c:c2:75:6a:f2:1e:14:fe:6d:1b:
                    34:ee:be:a3:d6:82:bc:40:81:05:61:e2:08:82:08:
                    2e:14:01:66:e7:c5:a3:b8:0c:60:68:1e:b3:bd:a8:
                    7d:9b:10:34:25:1a:be:be:2e:29:35:65:54:bc:0a:
                    77:67:af:73:ce:3a:3e:7f:29:2f:35:b0:0b:ab:1c:
                    5e:fa:8a:33:3b:13:22:f3:b1:be:24:31:ff:50:99:
                    cc:fe:da:3d:f9:32:14:c5:bf:4b:86:24:be:7e:a7:
                    8c:08:44:1e:c2:fe:3a:75:57:72:e7:ee:6a:ab:7a:
                    28:50:1a:fd:09:a6:6a:ed:2f:d8:d5:93:fe:e8:3f:
                    69:f0:20:02:89:26:69:ca:50:3b:bf:9c:50:69:88:
                    74:d2:e0:db:eb:2e:63:63:da:ae:0f:20:7f:bc:44:
                    09:35:3e:65:57:77:67:05:2f:aa:ae:79:f6:7a:5b:
                    83:e3:15:e6:a2:50:60:28:b1:98:c5:6d:9b:ea:bb:
                    1d:95:e0:01:a8:45:57:e5:d9:92:2d:25:86:75:b4:
                    92:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C7:B3:14:1C:52:58:88:25:11:EA:66:B3:2C:9B:57:92:7D:A9:86
            X509v3 Authority Key Identifier:
                keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4f:a5:2b:04:e2:5a:da:d3:ba:80:20:6a:ba:81:00:a0:3e:
         84:82:0a:d3:94:ff:3e:2e:e6:47:94:fd:f0:5e:c9:4a:9c:4d:
         36:02:e3:34:2c:e3:82:99:18:89:4b:cd:eb:22:57:7f:d5:f7:
         25:ac:e7:95:23:4c:33:49:af:52:fe:fe:32:82:97:d6:86:9f:
         ca:cf:b2:2c:05:01:e9:97:52:d7:51:23:d5:a3:96:e1:3a:d4:
         f1:39:a2:d0:50:14:17:1e:e4:07:f7:3b:38:99:7a:fa:5c:1d:
         ba:fd:80:b4:c1:12:ac:0a:fc:08:8a:c9:e2:cf:3b:39:cc:a6:
         1f:d3:b1:56:45:9d:4c:0a:e3:f2:88:fc:c8:8b:d3:d5:4b:9d:
         b8:7f:59:28:b0:b0:7f:43:c2:c3:f5:2c:b7:88:8d:6d:e7:2c:
         35:9e:38:76:b8:50:63:24:61:07:6b:3b:f1:ba:0a:81:ed:0d:
         c0:2c:dd:a7:95:41:90:d2:77:c3:e7:b7:5b:e0:0b:60:cd:5a:
         84:57:ba:4c:e2:08:06:28:4d:43:98:2e:76:d5:a2:6f:45:5b:
         2f:c3:2c:19:04:15:91:15:6e:71:b1:3d:f8:10:2d:77:88:98:
         8d:75:da:65:c1:ad:fd:0b:9f:f8:f5:0d:f0:31:ef:c6:a5:5c:
         f1:e6:c7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:20 2026 by rpki-client