Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File:                     dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier:          PWCEEeEkflD9H2IiN8V+BPhjcwMibDP9lWUDVW7Q1Pc=
Subject key identifier:   12:D9:AD:51:AE:C9:D0:7A:97:6E:07:42:9C:19:3A:38:3C:8D:16:45
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer:       /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial:       019F11C0BC681DD28BBBBD7D66AFA0621552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number:          07D0
Signing time:             Mon 29 Jun 2026 05:01:11 +0000
Manifest this update:     Mon 29 Jun 2026 05:01:11 +0000
Manifest next update:     Tue 30 Jun 2026 05:01:11 +0000
Files and hashes:         1: 2VmhrnY1R-y6rxXotPMotrQDcR8.asa (hash: Ap3BdSC63YcAczUKkEzGKumr15/KgLHB6Jp/DYCbOq4=)
                          2: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: LfQFZjF6Z2X9WnOAP7z21qo+O7Bz5HgHdGhk24Oa1DM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:bc:68:1d:d2:8b:bb:bd:7d:66:af:a0:62:15:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
        Validity
            Not Before: Jun 29 05:01:11 2026 GMT
            Not After : Jun 30 05:01:11 2026 GMT
        Subject: CN=12d9ad51aec9d07a976e07429c193a383c8d1645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:14:48:b1:c5:66:d6:92:ef:05:98:e2:e6:
                    b5:02:73:b4:7e:fc:ba:5f:41:3f:d0:81:ab:2b:b1:
                    f5:b1:af:a3:04:27:62:f7:52:52:f9:8f:d9:0c:2f:
                    af:b4:8b:83:3f:9d:94:53:dd:71:1b:38:f1:c4:3e:
                    9a:c9:29:25:ce:a4:04:ea:ef:86:30:50:77:48:ce:
                    1a:71:79:f1:52:34:b1:6a:70:e1:ac:5e:2d:05:2b:
                    d5:d0:52:7c:ce:13:90:f0:1b:8b:50:cf:a3:ac:04:
                    d7:12:73:b3:df:78:28:6f:01:41:53:b3:4e:93:5e:
                    e6:09:8c:6e:11:e7:d1:70:c2:8c:55:fc:ec:6b:53:
                    bb:da:9d:de:a9:37:c1:c6:09:de:f3:78:d0:11:c0:
                    0e:8d:cb:ca:d3:f0:12:25:03:60:47:11:54:f8:d8:
                    63:d2:12:3b:a0:36:d1:d0:48:df:bf:48:f8:27:8a:
                    e4:a8:71:c6:62:4e:7b:17:f1:5a:05:76:13:2c:36:
                    0a:1d:67:74:f0:4a:3a:8c:51:39:df:9b:f0:78:fc:
                    3a:e9:8d:20:6e:47:2a:16:ef:e5:61:33:e2:6a:f0:
                    16:b1:72:79:88:52:16:c7:d9:ee:26:c0:85:c7:64:
                    8c:d6:4c:16:cb:98:92:cb:78:12:0d:0e:85:ed:52:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D9:AD:51:AE:C9:D0:7A:97:6E:07:42:9C:19:3A:38:3C:8D:16:45
            X509v3 Authority Key Identifier:
                keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:63:7e:dd:a7:21:92:4f:28:8e:13:da:be:18:37:1e:88:4f:
         0e:f1:36:be:37:99:37:b8:44:c6:1d:ab:7c:99:d8:11:4a:de:
         87:ca:bf:7b:33:04:96:cd:f5:1f:2b:ab:9d:79:5f:70:bc:f4:
         c0:4c:26:0e:6c:94:e4:84:77:41:a9:d6:21:68:bc:0f:f9:18:
         42:2b:82:66:9b:62:a5:9d:16:ca:08:2a:e7:34:d5:72:fb:25:
         c6:cd:81:f1:7c:87:fb:68:56:7d:6a:9d:ba:d5:84:a2:02:34:
         ef:c5:e0:4a:58:ba:7b:8e:57:b3:23:16:fc:69:69:a0:1f:6d:
         62:dd:f3:f3:c6:29:13:ab:76:6c:3e:77:13:65:8e:f3:d0:a1:
         7b:3a:36:c3:c0:3a:1b:dc:f1:cd:c8:03:63:b0:da:1b:92:49:
         c8:53:34:b0:d9:0e:99:e9:7c:12:8b:9b:24:c3:08:86:f2:73:
         9c:61:92:cb:77:1c:13:40:c3:eb:f7:b9:ba:68:c6:41:9a:57:
         1e:2f:72:a2:24:7b:12:92:66:e2:aa:ec:ca:db:db:9f:74:8b:
         6f:68:6f:07:b3:de:63:a0:c1:b0:19:b3:48:cf:fd:64:bc:90:
         99:0a:a5:07:ed:51:6a:c8:da:9d:42:a4:42:19:2d:24:23:0e:
         8c:d8:4e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:55 2026 by rpki-client