Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          YzEGRsZGCP25sRDjRphoKCNW2hZGFl0b5lo/mSdVvLA=
Subject key identifier:   35:94:4F:28:69:BE:B3:F3:0E:A3:49:3A:15:28:04:D0:2B:07:41:27
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       019F18D6A8F6B131AB0734C30DEDDCA00CD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          1767
Signing time:             Tue 30 Jun 2026 14:02:28 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:28 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:28 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: W+/E55bZHt8N8HyIVNrbjPIpWDOXANiMqNebJ1k/g1Y=)
                          2: FMZLd4Ps16YzGBMpOnOc44HcG18.roa (hash: jgDZrPFGw8aOglddPDZFhV8lrzoZRsEiVQVdiUDUggU=)
                          3: WaYI_MWy3hRJbRYG3PdN8Y_RMYA.roa (hash: THX2fKKKnX9yBs9zY/imZHrBKciUjAfyILqIM2Dr8Yo=)
                          4: WwkncKL5VRC13xPV2ZE_H9se7W8.roa (hash: BknD8zU7XCC2nFHasTpI89u/51fYeUQLrTGPpyLxToE=)
                          5: ZbSrOte3J1bjSkMjIcjwzDpvPJA.roa (hash: 4PfqWbbb/AkFI2O3OXjGcGzMpkxwYMJ2P6SIOk3keto=)
                          6: ci1GvowS4KwUM3G8aFjlO2irLAA.roa (hash: m7TYB3sPDSUmcqNDhcvm3uaAFsWsaBEs5gP6w8LP+l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:a8:f6:b1:31:ab:07:34:c3:0d:ed:dc:a0:0c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Jun 30 14:02:28 2026 GMT
            Not After : Jul  1 14:02:28 2026 GMT
        Subject: CN=35944f2869beb3f30ea3493a152804d02b074127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:6a:96:da:23:40:58:31:45:dc:8f:56:0b:81:
                    e2:c3:9c:61:8b:44:29:a3:48:30:e5:95:e6:cb:07:
                    d4:33:e6:a1:91:94:9d:ae:ac:62:73:63:7a:87:c0:
                    ba:44:27:d4:17:71:bf:c3:d1:34:11:a8:06:35:01:
                    6a:05:5f:36:45:f8:cf:32:f2:f3:de:77:b2:c1:d3:
                    d8:c1:2d:f7:d5:a0:43:59:80:d9:e3:ad:b8:c2:8e:
                    02:45:1c:e1:17:9c:03:c2:4c:ca:b3:9b:b3:62:5c:
                    b5:c1:61:b2:8a:0a:f5:81:9f:39:a2:63:40:f7:eb:
                    7d:20:12:de:aa:13:9e:66:4b:88:4d:50:3b:25:2e:
                    e3:c3:90:aa:c4:1b:11:05:ae:0b:83:9e:a0:1b:e2:
                    f9:05:d0:cb:ac:74:77:cb:e0:cd:c0:dd:07:69:70:
                    17:84:d1:cb:43:68:11:8f:1b:38:ec:43:e2:98:53:
                    c2:3b:7f:99:a6:a0:66:2e:cd:4c:b7:75:9b:56:80:
                    e9:04:5f:75:f2:d3:95:74:f5:a7:47:74:8d:e7:16:
                    3b:09:cb:1d:fe:4a:5c:03:34:b5:a6:06:f6:2f:48:
                    64:cf:3a:36:f4:a7:9c:bf:e7:5b:e7:51:5c:f9:9b:
                    a2:b6:57:6d:56:5a:3b:18:db:42:68:17:3c:25:7e:
                    93:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:94:4F:28:69:BE:B3:F3:0E:A3:49:3A:15:28:04:D0:2B:07:41:27
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:11:64:f3:f1:4c:4b:11:18:6c:65:89:6e:74:51:8b:b9:
         f7:9a:fc:ba:e3:dd:0f:5d:4c:1e:f5:2e:b7:e3:61:2a:0f:40:
         77:4c:77:3f:09:e9:8e:61:bf:21:9d:08:4b:ee:8a:31:00:77:
         47:2f:19:db:e8:25:9a:d4:31:ff:7e:74:22:47:36:4c:1c:e7:
         c9:bc:fd:3d:de:95:f9:ff:53:1c:33:c5:1a:20:76:c7:be:a4:
         d8:30:51:3c:1c:5f:7e:a8:49:10:28:14:52:4e:ce:34:f4:e8:
         fb:6f:f8:b3:53:7b:24:b7:83:b3:04:2d:cf:aa:3b:a9:39:51:
         97:53:89:93:3e:89:77:ee:a8:05:cf:b8:97:d7:ac:81:85:bf:
         b2:aa:52:65:89:e4:80:f1:dd:51:c4:e6:35:e2:0d:c5:e5:7e:
         fa:d9:07:f1:0f:c0:5e:34:d7:32:c8:c4:38:71:1e:1e:85:0c:
         c1:d3:95:b2:d3:2b:a1:30:11:5c:b6:a6:fb:c2:0f:a6:7b:f6:
         94:24:55:2b:13:6b:ee:b1:a0:5e:03:f7:94:25:c6:fc:28:67:
         3c:11:df:19:cd:f3:33:37:cb:82:5d:6b:36:06:ce:95:d4:22:
         2b:3a:2e:b7:d1:1d:41:bb:1c:71:fc:80:3e:69:22:89:71:3b:
         21:40:0a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:47 2026 by rpki-client