Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File:                     xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier:          bPh43J2YYPBgLUblxqvYdR7dUkOOTlUzTaexWhg/TIA=
Subject key identifier:   A2:6F:4E:5A:3D:AE:9F:D2:BF:2C:4B:CC:33:12:E9:45:18:88:E9:37
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer:       /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial:       019F122ED30EFFA2A474D7EF9CAF5286CE40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number:          0F8F
Signing time:             Mon 29 Jun 2026 07:01:26 +0000
Manifest this update:     Mon 29 Jun 2026 07:01:26 +0000
Manifest next update:     Tue 30 Jun 2026 07:01:26 +0000
Files and hashes:         1: 28OK2J3AhlsvkP5KX5FGL4PLk4k.roa (hash: sLJmlSxlUCogmrsIa1DupMYliLkoDK/6nUhbL0KQoh8=)
                          2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: 1Mc0XP0nOKOHO1d5Hj+twP4sZ+SoU/0cC705HLi/3Z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:d3:0e:ff:a2:a4:74:d7:ef:9c:af:52:86:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
        Validity
            Not Before: Jun 29 07:01:26 2026 GMT
            Not After : Jun 30 07:01:26 2026 GMT
        Subject: CN=a26f4e5a3dae9fd2bf2c4bcc3312e9451888e937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1e:3a:00:d2:56:c3:61:db:f6:db:77:5b:ad:
                    58:04:94:b8:a5:a3:8a:2d:b9:41:56:74:ac:bd:cd:
                    9c:0a:f5:47:c0:ee:21:3b:c3:a6:b3:90:a3:43:58:
                    95:8b:87:1b:8c:9f:6f:80:bd:b6:f8:1b:3b:c7:38:
                    ec:2e:29:3c:2e:6c:18:2c:cb:ed:7b:fa:93:a5:03:
                    78:62:e5:e8:36:9f:ac:16:7d:52:32:6e:d0:0c:0f:
                    b4:23:14:ff:93:b0:0b:4e:25:c9:0d:6f:a4:dc:c5:
                    6a:24:5b:0a:37:6f:ba:9f:2a:6f:7e:d9:90:91:2a:
                    4f:d3:ef:2f:88:86:ae:ef:58:a8:0b:86:b4:01:70:
                    46:bf:ca:cb:77:19:17:da:7d:9e:e0:62:80:2d:94:
                    20:b8:88:2f:7a:ad:50:d3:44:08:1c:3d:97:02:8a:
                    19:d9:81:da:8f:03:7a:77:7d:f4:eb:43:8a:7e:32:
                    7e:3c:46:23:8f:21:38:f3:f0:48:31:90:aa:11:8c:
                    84:42:06:02:b2:14:28:13:6f:fd:12:bb:84:53:6b:
                    9d:cb:56:0f:bc:db:b9:f8:b1:b2:23:4b:c6:e6:bf:
                    d9:83:30:c3:6b:47:4a:68:fe:27:ff:c7:65:3b:55:
                    8b:85:66:63:e3:1b:cd:01:6d:bf:fb:4a:eb:37:c8:
                    d3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6F:4E:5A:3D:AE:9F:D2:BF:2C:4B:CC:33:12:E9:45:18:88:E9:37
            X509v3 Authority Key Identifier:
                keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:69:46:63:80:76:45:c1:cc:67:5e:47:41:e6:c4:61:44:
         dc:c0:0c:0e:e0:b6:3a:1b:f6:a8:20:d9:53:ad:fd:5c:ac:97:
         9c:46:9f:07:fe:ec:19:01:20:fa:45:7d:e9:62:fe:00:ac:b9:
         6a:f7:9b:d1:bb:d0:82:46:21:79:30:c0:e4:b9:db:b3:19:ce:
         76:42:f8:83:a5:6b:8d:3f:cd:bd:e2:7d:36:99:b7:c9:57:85:
         43:61:3c:bd:ec:18:61:e3:db:59:3a:20:55:b9:e5:72:87:f9:
         dc:e9:98:55:76:f9:f8:1e:e1:a9:28:05:e9:18:0f:1d:d5:13:
         63:42:24:9f:8f:e2:ab:24:1a:e9:1d:f7:e2:c5:f5:8a:90:21:
         62:a1:00:7f:ac:22:65:b6:07:2c:8a:59:ca:ec:21:58:a9:a6:
         d2:4b:da:1a:58:8e:db:95:2c:e0:d9:85:6c:67:d5:23:fe:de:
         d7:48:e4:32:c5:e7:20:c7:b9:0f:7a:4a:d4:7b:31:93:05:e7:
         b8:89:ab:23:10:ed:f5:31:93:4e:8c:02:f5:d4:71:03:97:92:
         53:65:62:e5:44:98:8a:d8:f5:24:1c:25:5c:2d:f6:87:9a:7a:
         ca:ce:e5:b5:50:1e:d4:43:19:dd:5f:b8:2b:42:7b:0e:6b:f4:
         65:99:e4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:33 2026 by rpki-client