Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File:                     1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier:          3Qy2zgC5zzxXZeS4L3o1+ATCgDDrHRTLeiJDqdPckOw=
Subject key identifier:   CB:4B:05:3B:6B:11:C8:04:92:FB:EE:9E:72:AE:53:30:C3:9B:EB:67
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer:       /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial:       019F17C2961D99F16769BED48EF5169298E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number:          1992
Signing time:             Tue 30 Jun 2026 09:00:56 +0000
Manifest this update:     Tue 30 Jun 2026 09:00:56 +0000
Manifest next update:     Wed 01 Jul 2026 09:00:56 +0000
Files and hashes:         1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: 0NeHi0Y9pQvzF8E4ieDBw7SQato9D/3mE0leBzob9XQ=)
                          2: 5K9Oh9VZsr3HOBptEMVsjoP_e_Q.roa (hash: YLy3at+4CK7XbYpoK63TH6Fci1Db7Ppm/QM9MlBVSzc=)
                          3: 7IcPHrXROTuNTf_SahmIzDpYk_c.roa (hash: L5UDzTnOOmL94lsJB5GitXxrT2tqiHBlNusXsGvxUwU=)
                          4: 8MABlsDBV8LP0o72Ps6uS8md-EE.roa (hash: fXmqgSgl411LYZCpGZdGkCF4TgXdZdFuZkTr9EWcmVw=)
                          5: fgjW20ZQ04xgq_qRpAWkrcJGzFo.roa (hash: pmOI3CWB5wHFkABDYT1l6+9Xm8dMktyYSLlosvObWto=)
                          6: kvYtIdmIQzWeY2WuPqJRuov5ET8.roa (hash: zx3Gr9VP3ErTlMy9nzS4kzrfscRLipsAviORigX1SFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:96:1d:99:f1:67:69:be:d4:8e:f5:16:92:98:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
        Validity
            Not Before: Jun 30 09:00:56 2026 GMT
            Not After : Jul  1 09:00:56 2026 GMT
        Subject: CN=cb4b053b6b11c80492fbee9e72ae5330c39beb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:a7:f7:fb:17:6f:45:d2:06:b1:d0:87:e8:
                    a7:c4:68:b4:ea:69:e9:b3:a7:93:38:dd:9f:5e:25:
                    be:3c:f6:15:18:57:c6:dc:58:fe:e5:fd:e8:e5:8f:
                    af:87:29:39:6d:33:09:84:b4:2b:68:ce:39:e1:43:
                    7f:0c:99:fc:25:ef:ea:23:c0:6c:25:44:66:7e:ef:
                    8f:4e:39:40:28:d4:d0:24:f0:47:32:15:20:8d:8a:
                    ec:52:f2:90:0b:99:16:c7:f5:43:6c:93:46:5d:01:
                    07:cf:e4:c1:ba:17:9e:6b:ca:9f:08:b0:09:d5:af:
                    90:81:5e:6f:90:3a:84:a8:70:d8:c1:5f:2b:7f:5c:
                    bd:5f:1a:fe:8a:e1:b0:72:ee:b0:0f:d5:1b:48:ee:
                    0b:1d:48:dd:72:2b:48:42:10:3d:c4:e2:62:7c:06:
                    9f:c8:a8:9e:5f:35:c9:8c:35:f8:70:37:44:4e:c5:
                    fb:a9:08:44:a3:3a:c8:69:a0:12:db:49:53:a0:62:
                    7f:0d:64:c1:5e:94:f1:c6:f5:24:3b:0e:65:21:e9:
                    a8:cf:6d:f8:7f:55:13:80:33:e3:95:6f:fe:9a:00:
                    69:9a:80:bf:e8:45:e7:f8:cf:74:5a:6e:56:89:d3:
                    37:47:51:1b:34:c1:94:24:2a:d9:94:70:a5:2b:5c:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4B:05:3B:6B:11:C8:04:92:FB:EE:9E:72:AE:53:30:C3:9B:EB:67
            X509v3 Authority Key Identifier:
                keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e7:07:79:1b:00:cd:0b:d5:64:ef:91:62:d2:5e:07:bc:f3:
         d0:83:1b:9f:fb:41:34:30:b0:ce:2a:70:8f:de:51:ec:15:7a:
         6f:6a:2f:67:82:1f:a9:53:e0:48:af:6f:c6:3e:54:8f:7c:6b:
         43:43:8a:a6:f7:cf:63:75:41:6c:a4:08:76:cf:e7:06:5c:54:
         f5:f1:4c:ee:cb:72:70:01:1a:ac:b3:e8:d9:be:5b:cb:5b:b2:
         4a:9d:90:82:71:f9:7b:91:47:10:eb:93:d6:1d:7a:b9:6f:52:
         9b:a9:8d:df:38:00:38:f5:db:b7:7f:91:b3:57:36:3b:d6:ae:
         dd:d7:fa:94:8f:04:ce:0f:58:b1:ca:22:1a:d4:f7:c3:1a:8a:
         3d:cf:77:0a:a2:66:07:12:98:fd:3a:09:d8:c9:73:78:fb:42:
         21:28:42:39:f4:2e:3e:7f:9c:61:80:b2:a8:5b:8c:5d:4d:a4:
         e9:8d:82:6b:b1:8a:24:2b:98:d6:b0:f4:68:ac:42:db:9d:00:
         7f:8c:f0:50:a8:3a:dd:59:c7:73:95:ae:ac:e0:75:8a:7c:4f:
         14:b0:ee:2c:fe:6b:3c:83:8c:86:f3:49:92:73:43:fb:e1:56:
         81:59:af:26:a7:b1:74:38:83:c2:6e:18:9b:c8:d3:65:8e:3f:
         7b:17:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:19 2026 by rpki-client