Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
File:                     rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json)
Hash identifier:          lT9JS8tcuy4PBV7hT31LWJXHHFxdaQpugXKebQUIfss=
Subject key identifier:   80:87:3E:E5:87:89:30:A8:90:7A:45:D2:50:87:44:52:BA:87:EB:F5
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Certificate issuer:       /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial:       019F118A3FAEA1DC068A10B553AC194A6B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
Manifest number:          198B
Signing time:             Mon 29 Jun 2026 04:01:40 +0000
Manifest this update:     Mon 29 Jun 2026 04:01:40 +0000
Manifest next update:     Tue 30 Jun 2026 04:01:40 +0000
Files and hashes:         1: LJ6Lx-KZ5jjmu07h0CpQ2tfb37c.roa (hash: WjIjLuXn3A1xNvSwh1XgBv48UJzhklp1E8+xHhdyWoU=)
                          2: PSfeFOCMS0X0DbK201fv7mhOqbQ.roa (hash: WJgLDQpReiQHOtzp+BWaEyBhXQtmTrQB0VphBgJmuek=)
                          3: QjQLmAt4m_YleTlWkKVih21BNgk.roa (hash: dq7HIavQuv8fREOJW5tnnd2hgLRsWh/EorRZKaqBVuc=)
                          4: Zteu6LpHyKBYuI-NEFQj3cAgyfQ.roa (hash: P11t+kwQnqI3kW3ZxTjDZFiJEM3aRQP5One4Rpc6tsg=)
                          5: du7armHnMdJDuNQqNV4R0NlwAvw.asa (hash: ci8jOh/1Qd1L/TuKvOYgtQOXNQCcGjWJZ4+8rrUkpRU=)
                          6: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: ECxVaHbDCTcx0fSz6ew5ZHhSoPdOsyxUXPMPpdO4WfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:8a:3f:ae:a1:dc:06:8a:10:b5:53:ac:19:4a:6b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
        Validity
            Not Before: Jun 29 04:01:40 2026 GMT
            Not After : Jun 30 04:01:40 2026 GMT
        Subject: CN=80873ee5878930a8907a45d250874452ba87ebf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0a:63:1e:35:92:9f:2f:db:94:6d:64:04:d3:
                    c4:89:e1:f7:61:71:42:d9:4f:5f:e2:31:80:12:37:
                    09:38:7a:ec:56:f8:dc:c1:a5:17:a6:5f:e9:36:60:
                    ee:72:44:7d:f3:15:8c:e4:b9:b0:61:6c:f6:32:74:
                    d0:48:bf:cb:46:c7:98:b6:4e:8c:dd:e6:9b:4f:10:
                    16:04:00:c2:32:46:50:37:10:92:5f:a8:dc:e6:0b:
                    66:45:93:ab:cd:2f:04:f9:c8:9a:f6:b4:97:d2:f7:
                    7c:87:23:45:1b:4e:dc:0e:7d:bc:b2:1b:68:43:42:
                    5c:7b:5b:8f:96:fd:a5:82:0d:92:77:bf:f8:a7:bd:
                    0f:2f:9b:d8:05:ab:d1:7d:1d:16:dc:86:fe:4b:d9:
                    64:32:66:27:77:5a:bc:ef:bf:dd:45:82:28:15:1b:
                    47:0e:ca:58:d0:66:6a:63:25:da:7b:29:eb:1a:52:
                    24:89:8e:5e:30:4b:58:ad:a2:ba:5f:60:72:ce:e6:
                    4c:43:17:77:85:39:58:44:e4:57:34:92:d8:af:ae:
                    d1:30:1b:7f:67:15:05:89:8d:03:f9:87:cf:6a:c7:
                    8f:40:22:da:e7:6d:58:3f:33:b6:89:07:98:14:36:
                    14:0a:71:32:c3:b2:2c:f4:ea:45:9d:30:65:6c:d2:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:87:3E:E5:87:89:30:A8:90:7A:45:D2:50:87:44:52:BA:87:EB:F5
            X509v3 Authority Key Identifier:
                keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c4:5b:b5:cc:c1:88:c2:35:d7:74:7c:06:e8:e5:88:15:f0:
         d9:95:55:4e:be:fc:78:13:3f:22:24:31:90:56:a6:45:46:49:
         e6:e4:05:0f:7f:63:80:18:65:62:e1:7f:7e:ab:3c:84:d9:97:
         b6:1f:4c:b7:d0:61:ef:68:be:55:53:4e:60:41:60:95:ee:88:
         f8:7c:cb:08:20:b9:a8:e4:34:48:5e:b3:d2:ab:db:9f:b5:c8:
         d7:f9:ad:ec:b2:6f:48:d8:7a:b6:13:6e:24:2d:c2:46:fd:c3:
         f1:23:ec:2b:5d:88:7c:db:f5:46:d7:33:81:49:ab:9b:30:ea:
         b8:c9:d7:c0:d7:fe:81:b8:97:ef:1a:9b:90:71:23:ca:f7:bd:
         d3:a2:89:9c:c2:1e:2e:31:e0:70:69:cb:57:f6:7d:94:40:a6:
         16:7b:b4:84:ab:ab:a9:40:f6:49:e2:87:33:3f:43:c4:c7:66:
         53:ef:f6:ad:00:6a:11:ba:87:30:97:b4:48:ba:62:a1:45:25:
         96:fe:77:dd:61:d6:02:b2:f3:2f:a6:ff:ad:5c:1f:90:ac:09:
         73:c7:79:71:c9:fb:cf:c1:94:dd:f4:0e:c6:d6:05:08:fd:d5:
         c9:11:7c:7b:f0:e1:67:60:3c:a4:19:a1:18:3b:11:c6:4a:e7:
         69:97:2d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:00 2026 by rpki-client