Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File:                     1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier:          ptk8Hu7vNHFpUp13W1vwm9Z4V94CXDjvz4MAhRAGQi4=
Subject key identifier:   E2:A3:ED:0B:12:03:66:A1:8A:3B:ED:BD:4E:07:F8:BD:FD:B3:2C:4E
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer:       /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial:       019F1830446832BC5128E46B400D8D32BE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number:          1219
Signing time:             Tue 30 Jun 2026 11:00:44 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:44 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:44 +0000
Files and hashes:         1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: ftbFcdGMDGdmnKH9tBHWbeA9LDkxzK8TkCa340YjDm0=)
                          2: SKcH6GqAnwSkb7fUKCyzsH2pE4c.roa (hash: FlzY0BJvsluyy6RMybQuGpqHaLrEW1okMJt3+ASEjLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:44:68:32:bc:51:28:e4:6b:40:0d:8d:32:be:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
        Validity
            Not Before: Jun 30 11:00:44 2026 GMT
            Not After : Jul  1 11:00:44 2026 GMT
        Subject: CN=e2a3ed0b120366a18a3bedbd4e07f8bdfdb32c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:76:50:ca:c2:a3:2c:1d:c9:6d:57:48:ad:
                    fc:28:c8:07:46:66:37:57:cb:cc:bc:f3:74:c4:9d:
                    fe:a5:4c:17:61:ca:6a:27:3a:6f:60:a9:38:5d:30:
                    c0:0a:13:e3:29:93:77:81:31:c2:95:49:d4:d0:16:
                    08:ab:bb:6a:d6:49:ab:9a:d4:f8:af:44:56:f1:53:
                    d1:ab:32:3c:e9:1c:3d:92:02:8a:03:a9:11:74:98:
                    1d:c6:c4:a6:71:d4:2e:8a:26:3a:88:3d:79:8d:9c:
                    02:de:de:85:36:d5:f2:25:16:08:04:0c:5b:c1:b2:
                    dd:b6:a0:a1:ba:51:72:0c:08:14:5f:2f:53:52:58:
                    39:de:3b:53:d2:50:39:06:7a:7f:d7:65:d3:ff:3a:
                    ee:78:35:8f:de:02:9f:80:10:6f:f5:e9:39:d3:60:
                    32:2b:b7:9e:08:62:fd:a6:7f:8a:a4:e0:c7:55:af:
                    d8:26:12:87:ac:c0:1c:ca:9b:69:89:3d:c1:0e:be:
                    91:fa:d5:1e:50:f9:a1:2c:83:4d:70:c3:03:68:b8:
                    5a:6b:5c:96:b3:85:ee:7b:b0:d9:2f:dc:e8:0d:3a:
                    02:38:d1:62:0f:55:97:82:b3:8a:be:c5:fa:85:df:
                    b3:d2:53:e1:72:33:f4:bd:d7:2f:86:7a:3f:87:74:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A3:ED:0B:12:03:66:A1:8A:3B:ED:BD:4E:07:F8:BD:FD:B3:2C:4E
            X509v3 Authority Key Identifier:
                keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b4:67:2f:6f:ee:18:27:50:f5:07:8b:8d:70:cf:f7:c0:b8:
         5b:81:e2:97:bd:93:4b:05:1b:88:95:4b:84:69:bb:1a:58:56:
         7c:d6:4f:fa:23:94:c9:21:90:bb:b7:5e:50:4c:0d:fa:ca:6a:
         76:6e:fd:ec:af:3f:b2:ad:b5:ca:ff:d0:5a:89:ad:ae:86:99:
         75:b2:8e:7b:98:75:9e:b3:8f:b6:b6:54:2c:a3:97:a4:e7:f8:
         e7:bb:b7:6e:f0:97:b0:c1:47:17:82:e4:bf:35:c5:f5:a9:8e:
         77:66:7f:34:9a:94:2b:8a:a6:06:02:d1:f9:d3:6d:74:f9:30:
         26:2d:64:c1:f6:d0:fa:de:8a:7e:21:cf:06:7b:5b:7d:32:b7:
         9b:0a:cd:3f:31:a9:e1:c9:39:2a:ac:9a:e9:94:ee:7e:99:9c:
         04:f7:2a:ce:21:28:f0:d2:52:53:c0:85:48:03:e5:51:c6:19:
         bc:2e:2a:33:34:b1:b4:5e:24:88:c4:37:a2:d1:46:ec:06:29:
         81:38:39:fb:19:85:89:51:15:79:a1:b0:81:ed:7c:c1:1c:cc:
         e7:b0:f3:12:10:23:db:2b:5e:2a:e3:7b:46:91:12:1d:20:14:
         26:36:84:01:01:db:e1:32:f8:33:9a:7a:82:44:79:2a:64:88:
         85:31:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:08:45 2026 by rpki-client