Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
File:                     rfDfdxFHQeE6F9chPmlWv5YntVg.mft (raw, json)
Hash identifier:          qV1G1QSOpc3N+JW3lcwQB/9rgAwUF6NPIakn8bF7Ei0=
Subject key identifier:   1C:9D:DE:3A:88:DC:E3:57:48:F4:6C:FA:C4:F8:2E:59:1A:0F:F4:06
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Certificate issuer:       /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial:       019F1867F295511C52DCCF0EAC2484EAFD5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
Manifest number:          183C
Signing time:             Tue 30 Jun 2026 12:01:33 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:33 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:33 +0000
Files and hashes:         1: 8eYijGU89HKkHPl1vQkVznR2YWI.roa (hash: GVKbdEH+zbWNIRI6lkz6XipadG7YSN2rD9CEidAiQUs=)
                          2: rfDfdxFHQeE6F9chPmlWv5YntVg.crl (hash: uv6tWakrsAFqyo72g11xyVbF19a4ITt5Wl5bUHPyMAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:f2:95:51:1c:52:dc:cf:0e:ac:24:84:ea:fd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
        Validity
            Not Before: Jun 30 12:01:33 2026 GMT
            Not After : Jul  1 12:01:33 2026 GMT
        Subject: CN=1c9dde3a88dce35748f46cfac4f82e591a0ff406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:1a:a1:d2:16:06:ca:df:b0:b9:24:62:85:
                    8b:9d:77:40:ac:ea:78:0c:81:47:09:52:34:fe:0e:
                    81:3a:94:bf:7c:b1:03:d1:1a:8b:31:e3:62:79:97:
                    2f:3f:38:74:67:cc:ae:dc:0c:fe:67:7f:99:93:18:
                    41:ff:d6:89:09:92:fb:67:df:62:3a:82:a3:43:b3:
                    fe:2f:d4:69:56:31:2c:d8:ad:c1:bb:dd:b6:74:4c:
                    62:5c:7f:f9:6c:ca:86:28:33:c3:4f:13:ca:8e:c7:
                    ea:b1:f0:63:82:10:ed:71:c1:a7:66:e7:52:6d:a4:
                    5c:50:d9:28:83:ff:cc:d1:5f:9b:5d:07:f0:27:d2:
                    29:d9:22:9e:d2:42:cb:79:e2:22:0d:1b:d3:ab:4b:
                    e9:f0:09:b6:3b:ce:d3:56:41:bb:23:23:61:93:af:
                    95:ad:8e:c2:03:06:6d:a5:2e:bb:5c:4d:32:2a:80:
                    13:22:7b:5e:0c:35:0a:a4:7e:04:8c:b7:62:3f:a2:
                    b8:89:0d:48:bc:36:74:90:e9:ec:c0:1b:01:1b:8c:
                    17:12:0e:ba:91:bb:81:d7:12:58:d2:10:0f:09:6f:
                    e0:d3:7c:98:94:ef:d9:98:19:9f:d7:86:53:3c:49:
                    84:75:aa:d2:e5:e9:65:cc:3a:e2:7f:93:f9:45:23:
                    bb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9D:DE:3A:88:DC:E3:57:48:F4:6C:FA:C4:F8:2E:59:1A:0F:F4:06
            X509v3 Authority Key Identifier:
                keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:19:72:78:53:6a:4c:06:50:7f:4d:8b:1f:5f:d2:ab:45:73:
         a0:8a:06:89:b3:a6:33:6b:1e:fa:3e:91:2b:b7:5b:8b:4a:30:
         fa:6a:6e:5d:33:d6:51:3a:9b:00:13:15:c6:6a:2a:22:45:49:
         61:85:b7:bd:8d:90:67:4f:4f:83:8f:e9:b3:9d:be:37:c2:48:
         63:ee:b2:d2:c1:24:45:6e:42:2d:e7:61:cb:0d:33:56:89:1a:
         db:11:6d:65:da:84:cf:58:fe:40:58:e7:ba:21:41:88:b6:02:
         83:83:01:3a:e5:9c:44:aa:9d:bf:c6:1b:2e:dc:4d:61:75:27:
         f9:96:90:68:62:11:b5:97:99:d9:37:2f:c1:93:6c:18:14:f0:
         7a:b1:0b:22:91:38:08:dc:1b:29:88:1a:5d:e3:c4:76:a4:b5:
         7a:6f:08:e0:f9:5e:cd:7e:00:7d:67:69:2f:ed:1b:66:1f:e1:
         75:d1:bd:80:f3:ec:bd:c5:48:37:7b:7e:05:af:67:98:0f:e4:
         92:8f:0f:be:e8:7a:5a:98:56:70:28:04:a0:d4:49:6d:92:b6:
         aa:cc:66:05:a8:3a:a1:a1:c1:4b:30:bb:11:d3:ac:e9:0f:d5:
         6c:79:dc:55:15:3f:6c:2a:37:65:32:50:d6:96:30:1a:ba:8d:
         85:af:44:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ/KVURxS3M8OrCSE6v1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjBkZjc3MTE0NzQxZTEzYTE3ZDcyMTNlNjk1NmJmOTYy
N2I1NTgwHhcNMjYwNjMwMTIwMTMzWhcNMjYwNzAxMTIwMTMzWjAzMTEwLwYDVQQD
EygxYzlkZGUzYTg4ZGNlMzU3NDhmNDZjZmFjNGY4MmU1OTFhMGZmNDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPUaodIWBsrfsLkkYoWLnXdArOp4
DIFHCVI0/g6BOpS/fLED0RqLMeNieZcvPzh0Z8yu3Az+Z3+ZkxhB/9aJCZL7Z99i
OoKjQ7P+L9RpVjEs2K3Bu922dExiXH/5bMqGKDPDTxPKjsfqsfBjghDtccGnZudS
baRcUNkog//M0V+bXQfwJ9Ip2SKe0kLLeeIiDRvTq0vp8Am2O87TVkG7IyNhk6+V
rY7CAwZtpS67XE0yKoATInteDDUKpH4EjLdiP6K4iQ1IvDZ0kOnswBsBG4wXEg66
kbuB1xJY0hAPCW/g03yYlO/ZmBmf14ZTPEmEdarS5ellzDrif5P5RSO7OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByd3jqI3ONXSPRs+sT4LlkaD/QGMB8GA1UdIwQY
MBaAFK3w33cRR0HhOhfXIT5pVr+WJ7VYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZEZmR4RkhRZUU2RjljaFBtbFd2NVludFZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hMzBiZWEtOWU5My00MDkxLWI2ZTEt
ZTFlZjI3NzcyZWFmLzEvcmZEZmR4RkhRZUU2RjljaFBtbFd2NVludFZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hMzBiZWEtOWU5My00MDkxLWI2ZTEtZTFlZjI3NzcyZWFm
LzEvcmZEZmR4RkhRZUU2RjljaFBtbFd2NVludFZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhlyeFNq
TAZQf02LH1/Sq0VzoIoGibOmM2se+j6RK7dbi0ow+mpuXTPWUTqbABMVxmoqIkVJ
YYW3vY2QZ09Pg4/ps52+N8JIY+6y0sEkRW5CLedhyw0zVoka2xFtZdqEz1j+QFjn
uiFBiLYCg4MBOuWcRKqdv8YbLtxNYXUn+ZaQaGIRtZeZ2TcvwZNsGBTwerELIpE4
CNwbKYgaXePEdqS1em8I4PlezX4AfWdpL+0bZh/hddG9gPPsvcVIN3t+Ba9nmA/k
ko8Pvuh6WphWcCgEoNRJbZK2qsxmBag6oaHBSzC7EdOs6Q/VbHncVRU/bCo3ZTJQ
1pYwGrqNha9EMA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:39 2026 by rpki-client