Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File:                     DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier:          Hwz9MCUxn34rE3Ob1Sm3wlW7j7spiN48QjAlojGZrvA=
Subject key identifier:   3B:B6:9A:39:D8:A9:B2:AA:56:C9:91:E6:61:59:A4:92:7D:32:41:0C
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer:       /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial:       019F190C846803C0794711458D3181B97FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number:          169F
Signing time:             Tue 30 Jun 2026 15:01:18 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:18 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:18 +0000
Files and hashes:         1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: h0WSmfzs5Nf5zcQRFtYJDSpRgb11KdaeBCw5AbefnVA=)
                          2: I6B11vAuliEHXkaj56Cx_nMNtzM.roa (hash: zwWKRvjHFcgx4AfaFVQj5qA+i2zTNLuDDbo0ohM5s9o=)
                          3: aFA8TdWBrL0sKL1WgCpchD-t0-E.roa (hash: yrp0PGLJIdfIoFJTh2LRDBtU78Dj8mCkVBqMsQkNwT0=)
                          4: zbElgd4kOsYPerCSi4Ys9upL4XA.roa (hash: i1lrAyqBTfs/DpcBlpdmtWLhCahW3WY5O3LNfMBqc9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:84:68:03:c0:79:47:11:45:8d:31:81:b9:7f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
        Validity
            Not Before: Jun 30 15:01:18 2026 GMT
            Not After : Jul  1 15:01:18 2026 GMT
        Subject: CN=3bb69a39d8a9b2aa56c991e66159a4927d32410c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:bd:dc:e0:49:fa:70:d0:3d:98:a5:ef:d9:
                    3c:3e:d5:04:7c:39:4f:e6:63:94:b5:ea:1a:32:b7:
                    0c:f1:05:8c:40:9c:8a:f1:fa:a5:33:c7:29:74:31:
                    13:57:ef:1e:e3:52:66:16:3e:28:6c:2b:be:ae:d7:
                    70:03:56:9f:5c:35:bb:03:38:bb:e8:94:b2:84:7e:
                    ef:e6:6a:4c:2c:34:ef:2a:86:e6:39:4b:69:93:fe:
                    31:46:0d:54:6d:71:33:e2:de:b6:42:c8:76:18:18:
                    86:9a:61:85:77:f4:f2:75:45:31:25:10:5d:66:48:
                    95:0f:ac:23:98:17:70:14:b5:34:e5:4c:b2:1d:1c:
                    a5:c8:fb:5c:a9:c7:a7:07:55:ae:27:76:80:93:b3:
                    b3:03:da:ab:7e:9a:1b:b0:7c:22:d2:82:68:b3:0e:
                    ef:f7:07:a7:ec:1b:c5:cc:47:45:91:d4:cd:d2:88:
                    62:f7:5d:41:48:89:2a:29:6c:a9:d3:f1:84:b0:ef:
                    b2:06:45:36:70:eb:bf:0c:22:c9:16:f1:d3:90:ca:
                    75:87:c7:85:8b:0d:71:67:65:f9:c4:cc:97:3f:23:
                    1e:01:85:1f:50:7f:13:01:80:57:d6:97:32:95:c8:
                    0b:4d:e8:dd:e5:9e:99:2b:df:c1:0b:5f:f6:1b:bd:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B6:9A:39:D8:A9:B2:AA:56:C9:91:E6:61:59:A4:92:7D:32:41:0C
            X509v3 Authority Key Identifier:
                keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2b:ad:05:ec:c1:7f:d0:67:1f:94:61:07:d9:a5:5e:fc:f2:
         b5:7b:31:a5:cf:b9:f2:66:72:d7:10:e5:d8:ff:48:44:a8:4f:
         54:61:83:0e:92:e4:ea:a3:6d:ae:6d:d8:0f:a6:08:39:08:d4:
         69:f5:30:3c:39:de:96:ce:6d:93:f1:30:7a:91:26:05:df:26:
         4c:ab:b4:00:da:d7:6a:4b:f0:9c:40:24:d7:84:d8:37:14:17:
         43:05:b9:a8:de:ed:ac:2b:f5:7b:96:12:0a:02:49:05:dc:93:
         0d:5b:8e:82:62:08:fa:de:67:0b:58:11:9d:e7:d7:f9:9e:d4:
         83:fd:6a:66:4a:11:67:3c:59:76:3c:3f:79:37:0d:96:45:a7:
         26:fc:7a:02:e7:18:18:2e:43:b2:8b:38:97:56:a7:1c:f9:29:
         a3:b2:01:84:28:9a:8e:43:fb:14:9c:a6:c8:e5:35:01:94:05:
         bb:5d:75:bc:54:c9:ab:76:ec:c7:9a:10:0c:aa:3c:4a:46:4c:
         07:bf:29:1c:e2:8b:d0:5e:f7:df:cb:2e:8e:07:9e:b4:41:33:
         61:7c:16:17:f5:e6:06:d3:14:6c:97:28:18:bf:27:20:78:0a:
         64:b6:2b:34:50:c2:a2:e8:47:ca:50:34:72:69:89:54:b5:b4:
         df:57:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:16 2026 by rpki-client