Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File:                     QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier:          Ihwxa7Ub4GAKZtYqHzUsygmaDRMvT9LIwp70uT8FoYg=
Subject key identifier:   29:92:3C:33:C2:4B:C7:17:88:3C:E3:5C:01:97:17:7F:61:61:A0:F6
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer:       /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial:       019EB8EAB4664C8D20372B35E07349DBDB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number:          0B1B
Signing time:             Thu 11 Jun 2026 23:00:49 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:49 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:49 +0000
Files and hashes:         1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: zfiv//0UZb1jI3N/aWyv9iopEE+yG/Of1H8tUoPgSws=)
                          2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:b4:66:4c:8d:20:37:2b:35:e0:73:49:db:db:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
        Validity
            Not Before: Jun 11 23:00:49 2026 GMT
            Not After : Jun 12 23:00:49 2026 GMT
        Subject: CN=29923c33c24bc717883ce35c0197177f6161a0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b5:67:48:42:7c:d7:79:06:ce:2e:c5:77:5f:
                    e1:c7:0d:c4:1e:45:23:90:be:1c:d0:87:c2:a3:c5:
                    b3:42:7e:da:c1:da:b7:eb:e2:4b:9e:ee:ad:64:60:
                    ed:d4:ba:d0:92:2d:5c:f0:cd:9c:1a:b0:57:66:44:
                    eb:eb:9a:74:5b:86:e2:e7:e7:dd:d5:25:9c:22:0a:
                    c5:4a:a0:63:92:df:f1:cf:5d:4d:91:68:77:a3:ba:
                    53:18:5c:86:71:61:6c:69:ee:4d:5b:5e:08:e9:f4:
                    2f:fd:d5:26:47:67:80:54:83:fb:c5:13:f3:b0:6e:
                    b2:68:be:84:13:e7:31:3e:d4:42:1e:17:f1:b3:e2:
                    71:90:a5:05:cf:e3:b7:6f:62:65:fa:e6:0e:2e:49:
                    e3:1f:cd:cb:07:ab:c9:89:12:80:fe:43:4e:a7:61:
                    f3:af:ff:46:2b:c9:d5:6f:74:ea:cc:d5:10:9c:85:
                    67:c1:9f:4a:a7:2d:08:65:6a:57:8c:3b:a4:61:fa:
                    7a:16:79:78:0e:e2:9b:47:3d:04:96:fc:e1:24:4e:
                    9b:36:6c:61:ac:b8:11:a9:28:56:1d:4f:45:75:dc:
                    bf:1a:0e:ab:a1:e8:d0:df:a7:39:7a:1d:a2:5b:52:
                    f1:d2:1d:1c:63:bd:17:02:bc:f2:4f:44:6b:5c:fc:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:92:3C:33:C2:4B:C7:17:88:3C:E3:5C:01:97:17:7F:61:61:A0:F6
            X509v3 Authority Key Identifier:
                keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:84:3c:92:c7:f7:71:f3:04:57:0a:37:05:f7:b1:4d:72:e6:
         dc:70:20:b3:e0:b4:e7:06:1c:f6:97:73:cf:91:db:94:01:fd:
         19:bb:61:12:da:c6:a0:c6:42:2e:57:45:3b:ca:50:d5:b6:3a:
         91:6a:23:27:d5:ac:00:ce:a7:3c:7b:20:4b:26:53:30:b4:16:
         d3:fb:ff:35:81:5d:9b:16:66:ad:68:08:16:93:6c:41:6f:e7:
         46:5e:fe:78:39:b0:89:a6:e1:e9:83:32:f5:57:5a:23:d0:bc:
         57:d5:8e:ca:33:c3:b4:c2:c7:dc:0d:7e:1f:20:41:d6:61:80:
         89:d6:00:bf:15:e7:66:c2:9f:47:97:56:3f:2c:df:cf:ff:1b:
         96:ac:9b:2b:ac:8b:0f:ed:63:0c:5e:b5:eb:b2:08:46:8d:55:
         fa:d9:09:1e:2a:cb:2f:b4:a2:ce:1d:e1:e3:ed:2b:13:0d:83:
         77:f4:e1:ab:49:61:e4:c9:67:6d:59:c1:09:de:a2:d9:b9:db:
         8b:70:6c:37:55:67:1f:68:04:34:8d:ef:32:a7:41:0a:58:c7:
         4f:58:f5:51:61:97:48:7c:29:7f:15:7b:9d:9f:47:6a:4b:67:
         cf:b9:f7:9b:99:86:58:7c:e5:1e:c2:b3:96:ad:1b:4e:23:c8:
         38:dc:9f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:52:33 2026 by rpki-client