Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File:                     32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier:          /gEfNMgiON1+D9f+zNMDlIncTt1wpBtgsGQAlU7WkdE=
Subject key identifier:   EF:72:EE:71:55:25:12:F3:68:D7:84:28:55:DB:48:2D:D6:A7:4D:42
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer:       /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial:       019F111BE267F3B7B60FEF415E5EB4AAFD2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number:          111D
Signing time:             Mon 29 Jun 2026 02:01:07 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:07 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:07 +0000
Files and hashes:         1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: yqbYxV4UMyHe17AQHdAN7EbGRSjLFffQYjA7d39AWmM=)
                          2: eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa (hash: prXq7zIRsAV9jtqOkMC/JnDXSMdKIhkp+Aj/pefkjkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1b:e2:67:f3:b7:b6:0f:ef:41:5e:5e:b4:aa:fd:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
        Validity
            Not Before: Jun 29 02:01:07 2026 GMT
            Not After : Jun 30 02:01:07 2026 GMT
        Subject: CN=ef72ee71552512f368d7842855db482dd6a74d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:42:b6:7a:2a:49:f1:1e:63:18:3b:2c:0a:b6:
                    81:34:80:bf:cc:ea:f8:11:30:03:b9:25:c1:50:6e:
                    5f:38:09:d6:b2:ce:c1:f4:28:7f:1b:d2:09:1b:70:
                    bf:61:8f:8f:f6:46:a5:21:ed:c5:7b:d1:02:63:73:
                    d3:bb:8e:24:86:71:c2:34:97:e9:96:53:22:9d:08:
                    78:c3:41:2f:0c:04:96:76:48:7e:df:7a:c4:2b:7c:
                    d7:5d:c7:66:87:14:ed:53:49:1e:b4:ba:b6:cd:2c:
                    9e:51:2b:f3:47:de:24:a7:b6:2f:d1:62:15:7a:75:
                    de:01:bf:6f:fe:dc:4a:12:59:97:37:92:66:b2:83:
                    01:1a:d1:7c:d5:20:70:c3:cf:b0:c6:6b:ff:42:a1:
                    90:94:79:9f:17:55:08:50:a0:45:8e:fc:e9:72:0f:
                    80:69:a4:20:81:cb:a8:98:02:e1:99:a5:a9:c3:8d:
                    14:e2:99:8e:5e:ce:99:5b:99:1a:31:0b:53:72:2e:
                    8f:34:bf:2c:48:61:cb:e3:21:be:27:29:33:a5:0d:
                    5a:b7:9b:0c:85:3e:6b:40:43:17:d7:7d:66:5e:27:
                    7b:a4:fb:0d:56:42:b2:9b:3f:f9:7d:bb:0b:b1:82:
                    b9:b1:2d:27:0b:95:a9:b6:fa:ca:1d:c8:23:69:3c:
                    2b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:72:EE:71:55:25:12:F3:68:D7:84:28:55:DB:48:2D:D6:A7:4D:42
            X509v3 Authority Key Identifier:
                keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:ca:a7:2d:ba:59:c7:05:dd:84:4a:6d:2b:d2:e3:27:22:
         30:2f:1b:a8:5e:99:b6:fa:a0:6e:28:e1:f0:fa:7f:5e:d6:85:
         52:9f:48:b1:60:89:83:a2:a6:b1:43:84:52:39:b5:73:7d:2b:
         60:7c:31:55:0c:38:ac:34:11:7a:5d:30:74:5b:3c:55:96:fa:
         a1:c2:67:c9:0e:ee:94:55:a6:81:92:17:c3:c5:b5:1b:93:63:
         7e:22:83:d9:4e:d5:94:fb:59:00:88:1d:69:6a:25:4a:7d:51:
         25:dc:ca:dd:9b:f0:96:b2:26:fe:38:ab:1e:41:94:f8:8a:7f:
         f3:b7:da:23:18:ed:05:5a:cd:40:8d:bd:43:f3:2f:12:df:0b:
         ec:6a:ac:c5:58:96:68:41:05:7b:d5:79:73:a4:ca:0c:09:97:
         19:7a:fb:c5:23:28:16:46:d4:40:2a:de:63:97:39:b8:51:75:
         53:c7:c3:61:84:6d:6f:9d:b0:cf:6a:4c:2d:41:b9:fd:f6:bc:
         00:68:01:70:d9:39:df:59:e3:17:38:8b:80:dc:28:2e:55:7b:
         53:5b:82:6a:ac:b7:52:20:da:9d:ff:da:80:63:a4:b1:fb:fd:
         1a:7c:ba:83:1c:d5:47:81:02:64:b2:53:ea:8f:71:0d:34:0f:
         f4:ab:19:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:20 2026 by rpki-client