Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File:                     1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier:          HjUtDkPjqlcBJJETfdZcJKXGh+SqvJkbWILccBGOAgg=
Subject key identifier:   C2:4C:B0:AE:C0:0D:37:86:11:4B:DC:5E:EE:F1:99:5B:35:39:95:6D
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer:       /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial:       019F178BDA4E51F838AE240670F08D919675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 08:01:09 +0000
Manifest this update:     Tue 30 Jun 2026 08:01:09 +0000
Manifest next update:     Wed 01 Jul 2026 08:01:09 +0000
Files and hashes:         1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: +iGSf4JeoAQQ0LyTIreg7DZvaNgHRtzSWT7PgNZAMYo=)
                          2: 5335TVWq-TAy75K-3w-T_kbzaH0.roa (hash: 9SO05Pcou3qWF6g88dlB6s3gfpWtXt6YbpW1v8iIrjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 08:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:8b:da:4e:51:f8:38:ae:24:06:70:f0:8d:91:96:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
        Validity
            Not Before: Jun 30 08:01:09 2026 GMT
            Not After : Jul  1 08:01:09 2026 GMT
        Subject: CN=c24cb0aec00d3786114bdc5eeef1995b3539956d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:45:de:60:18:aa:87:88:d0:32:32:df:de:
                    a8:5f:ad:10:16:a2:88:b6:94:00:fe:72:85:e1:d6:
                    f4:f8:69:21:77:1e:57:0a:7d:86:f8:31:42:ff:d1:
                    ab:dd:a8:1d:f2:65:45:72:6f:69:a7:c0:79:ac:d8:
                    73:27:b3:6b:da:7c:f4:92:9f:08:92:fc:77:fa:e1:
                    e9:4f:50:25:47:30:9a:1b:fe:17:2e:4e:af:9c:85:
                    5d:4a:78:89:02:1f:06:fb:56:00:94:bb:6f:d7:a0:
                    08:53:00:2d:b7:4c:d1:f9:df:db:e8:11:93:36:1c:
                    0b:e9:4d:d0:58:35:ca:43:d4:20:e1:87:cb:6a:d3:
                    7f:a8:6f:e1:65:87:8b:03:a7:e3:8f:57:a3:23:3f:
                    6f:c7:a5:70:b3:ad:fe:61:10:44:de:2d:71:43:36:
                    2c:d2:01:53:d4:30:0a:a9:7d:30:11:7a:99:96:87:
                    06:57:1b:11:9b:43:e9:7f:52:94:a5:32:a0:cb:ad:
                    15:24:9c:14:e0:13:39:62:77:e7:18:30:ee:24:35:
                    15:45:ae:1b:6e:99:b7:ec:91:a7:2d:a1:24:b9:b0:
                    89:72:97:90:97:0e:16:65:d2:33:05:f2:ed:36:2d:
                    8d:49:37:83:a8:87:bc:28:92:6b:43:3a:c1:80:b1:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:B0:AE:C0:0D:37:86:11:4B:DC:5E:EE:F1:99:5B:35:39:95:6D
            X509v3 Authority Key Identifier:
                keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a1:d6:09:c7:49:b5:97:f7:c5:2a:5a:21:c3:a8:a6:91:1c:
         ef:cb:41:6d:f9:63:70:a3:72:c8:88:77:43:a0:5c:24:b2:d7:
         f6:ab:3e:38:df:a4:46:28:c2:d2:ba:0b:00:3b:dc:5a:81:92:
         e8:c9:49:08:24:5f:84:5c:83:0f:8e:43:ef:56:f1:39:af:2e:
         05:54:55:78:35:de:44:68:e5:8d:bc:7b:f6:1c:f9:a3:a9:bc:
         67:77:07:ab:8d:19:c1:4f:55:a7:c9:4a:d7:1b:3c:1c:fe:9b:
         05:29:24:b7:31:6b:89:e6:06:2d:20:b5:b0:90:6d:23:f7:f5:
         94:d7:a9:a9:4c:a6:d8:21:81:9f:b1:2b:db:a2:1a:38:07:60:
         e5:4b:69:98:c6:92:67:18:30:93:6b:6e:81:95:70:49:c6:c1:
         1f:92:df:f9:4c:c6:3d:60:89:69:7f:6e:16:5d:eb:a1:93:37:
         6c:2c:bd:31:ec:d6:14:b4:be:e2:ef:28:7a:3e:c9:79:38:0c:
         5c:af:5d:e1:2b:94:d9:69:ed:16:38:4d:67:ee:b8:0c:38:f9:
         d7:a3:04:c9:39:6f:45:9b:59:30:0e:6d:a9:50:1e:c4:19:c2:
         84:a6:e2:a9:b7:4d:3d:93:a5:9e:41:5b:81:02:07:16:73:5c:
         97:54:05:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:44 2026 by rpki-client