Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft
File:                     1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft (raw, json)
Hash identifier:          Gcv7apm4lqn3cewQrGamMEaTNI7ghv6hfGZdYfUfnfE=
Subject key identifier:   D1:74:6F:A5:C4:E2:51:D8:F5:4D:98:45:DD:34:1E:61:14:E8:30:61
Authority key identifier: F9:8E:9F:76:CE:93:6F:E1:97:5F:35:42:63:B4:56:3C:AD:1C:41:4A
Certificate issuer:       /CN=f98e9f76ce936fe1975f354263b4563cad1c414a
Certificate serial:       019F3897F7FADDDD47BB86F8092FACB8AD52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft
Manifest number:          12
Signing time:             Mon 06 Jul 2026 18:01:51 +0000
Manifest this update:     Mon 06 Jul 2026 18:01:51 +0000
Manifest next update:     Tue 07 Jul 2026 18:01:51 +0000
Files and hashes:         1: 1-4qDeSxKiudA3BEYHfwIENpu-FQ.roa (hash: MiUA8mMOBjGU1Knl32o+l6lwZVzhLxPAp+E5RuW9W90=)
                          2: 1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.crl (hash: R9hXO2jMbjPFu3lIVwgB6RZ0/oIMy8gcJwe66g8RBn8=)
                          3: 1T-ceJjNkjIp-JzXf9B_UjQfr-Y.roa (hash: DwJMamMahTf9klv4UWUPQLpymIfAcqahU8vNJ7u5S4k=)
                          4: 82wAbhd74c0z6ICEOBs-0Y_oQfY.roa (hash: kBFT5s4QmJIedyfi/sxxBI04254S641NgjUTrd53nw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:97:f7:fa:dd:dd:47:bb:86:f8:09:2f:ac:b8:ad:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98e9f76ce936fe1975f354263b4563cad1c414a
        Validity
            Not Before: Jul  6 18:01:51 2026 GMT
            Not After : Jul  7 18:01:51 2026 GMT
        Subject: CN=d1746fa5c4e251d8f54d9845dd341e6114e83061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:8b:ce:a5:14:5e:2a:42:ce:3e:c1:2e:e0:
                    b7:45:85:d0:dd:7f:0c:04:8a:78:d4:3e:91:6f:0e:
                    72:84:d7:2b:d9:8c:30:87:9e:19:08:62:97:a3:78:
                    f0:d1:3c:9c:92:a3:3d:2a:87:c6:8b:cb:cb:ef:e3:
                    cc:9d:5a:65:e3:30:05:09:c9:8a:44:16:73:84:11:
                    9b:8d:5c:78:6e:c8:82:8c:d3:6f:17:b0:ee:29:29:
                    d9:e8:bf:88:e9:44:e6:a2:16:63:b6:e8:c2:71:6c:
                    bd:79:39:af:72:ce:6d:64:8a:d2:82:fa:a4:a2:84:
                    ec:7f:72:c2:9b:ad:e5:13:db:f8:66:75:c9:24:c9:
                    70:06:45:ac:eb:b5:cf:91:71:6a:ca:76:47:af:de:
                    04:eb:34:0f:b4:0b:43:e6:97:18:77:fe:31:cc:9b:
                    59:2a:ff:df:8e:13:f2:3b:d3:20:53:d2:29:e8:1f:
                    9b:ee:09:c3:ce:8b:38:bd:e8:d0:8f:15:b9:08:23:
                    fc:bb:d8:ed:49:73:b5:0c:6d:8f:65:b3:57:c4:88:
                    0b:1f:f8:dd:2b:37:46:0f:e3:b9:df:bc:9a:b1:f7:
                    1a:c8:bf:9f:2c:88:0d:8e:80:f2:0e:ed:a3:95:4d:
                    61:2c:27:0d:71:63:c7:32:ed:c1:a1:7f:9d:6c:18:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:74:6F:A5:C4:E2:51:D8:F5:4D:98:45:DD:34:1E:61:14:E8:30:61
            X509v3 Authority Key Identifier:
                keyid:F9:8E:9F:76:CE:93:6F:E1:97:5F:35:42:63:B4:56:3C:AD:1C:41:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:72:72:d5:c1:2a:29:75:23:63:ef:13:51:fd:bb:5b:37:e1:
         f2:f9:2c:20:fe:4a:80:73:29:38:74:63:73:ed:ef:16:e7:c4:
         34:26:61:3d:de:5d:51:87:80:ac:3c:1c:4d:9c:59:b9:44:fb:
         a1:de:5f:c0:0d:35:57:ff:5f:6b:70:b5:50:d6:89:5d:97:9e:
         00:5c:99:78:39:44:c0:ba:6b:b6:59:ec:a3:db:4b:d5:06:30:
         75:1e:f7:18:f0:d7:37:1b:91:77:6c:1e:5a:4b:40:9d:e6:7e:
         74:78:02:13:15:56:08:48:0e:0f:ef:0b:41:75:78:56:1b:25:
         fa:bf:b5:1a:e4:0c:ef:d3:85:b2:24:4e:74:46:93:3a:21:e9:
         e0:26:9b:1f:12:c7:1c:dc:b4:f4:68:b6:22:0d:02:be:1f:04:
         ea:75:60:f0:6a:9f:45:77:f5:b9:47:30:8d:ef:20:fb:2a:2c:
         d4:fd:0e:1b:a7:27:b7:d1:05:52:45:7c:bb:7f:dd:e9:37:56:
         51:7e:7c:ff:6b:e0:bc:84:82:e3:8d:ae:fd:d8:6b:11:c1:2a:
         6c:22:c7:a4:b4:7a:69:3b:fa:69:03:6d:e6:c1:2c:46:57:3d:
         47:1f:7d:2f:a1:c8:f6:ea:02:5a:f8:42:31:dc:04:8a:b6:d8:
         df:34:31:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:16:52 2026 by rpki-client