Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
File:                     L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json)
Hash identifier:          xkU09GS/d2jdEhA22KTyv1ZqIF++TAn/GpMvQRv6Jz8=
Subject key identifier:   F9:F8:6B:80:82:FE:FC:28:BF:55:2A:56:C4:4F:13:2E:72:C8:BF:1F
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Certificate issuer:       /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial:       019F1A1EB7736F74A03C556E21FAB761ADE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
Manifest number:          18F1
Signing time:             Tue 30 Jun 2026 20:00:48 +0000
Manifest this update:     Tue 30 Jun 2026 20:00:48 +0000
Manifest next update:     Wed 01 Jul 2026 20:00:48 +0000
Files and hashes:         1: 3Td8_KpnCVMIwy0JMauQgrbBuQQ.roa (hash: ABEQh5NopDc0Mx4tEJaetYGzLjPCdMdfeYzfxLmWlSg=)
                          2: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: XlV9p1GsD0yN4vjjETLeqPCx7RX3vMx/2vjvafxPTVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1e:b7:73:6f:74:a0:3c:55:6e:21:fa:b7:61:ad:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
        Validity
            Not Before: Jun 30 20:00:48 2026 GMT
            Not After : Jul  1 20:00:48 2026 GMT
        Subject: CN=f9f86b8082fefc28bf552a56c44f132e72c8bf1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:aa:fb:b0:9f:51:b3:00:66:3c:d3:c6:2a:f2:
                    86:f7:f2:04:a7:c9:46:60:9b:63:bf:d0:ad:05:62:
                    34:d9:eb:ed:3d:d7:68:d9:a4:0f:8f:c2:86:24:01:
                    48:1a:55:bb:5a:11:ce:2f:42:ae:c7:cd:d4:86:a2:
                    f2:1d:73:0b:00:11:ee:54:6f:68:56:1d:4f:4e:25:
                    ee:fb:e8:57:c0:a1:24:99:75:7c:42:cf:1a:ef:af:
                    82:93:17:1f:b9:56:f7:6b:7e:dd:31:28:28:81:c8:
                    ab:6e:eb:8e:af:e2:49:38:06:2c:d8:a5:12:03:ce:
                    83:9e:63:97:01:6b:14:be:34:d5:88:1a:f4:44:7d:
                    76:47:2f:42:48:81:34:c6:be:b1:46:6f:9a:db:70:
                    b6:29:85:cc:a9:e2:ad:41:ca:82:fc:a7:be:49:bf:
                    70:83:84:f4:7e:16:b3:43:37:15:ff:f6:3e:50:a8:
                    64:e9:93:4f:a0:22:fb:b8:2a:67:0f:c8:5c:f6:91:
                    35:cd:c5:f3:7a:08:c0:cf:bb:7c:2f:e1:a6:5f:b9:
                    b8:32:97:01:26:f3:d6:6d:c4:c4:d6:1d:6f:d1:8c:
                    d4:3f:e7:bc:f6:4e:8d:4a:87:86:6e:2e:66:4a:2d:
                    86:df:0a:83:5c:c5:8a:0d:e1:ed:25:02:79:da:7c:
                    d3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F8:6B:80:82:FE:FC:28:BF:55:2A:56:C4:4F:13:2E:72:C8:BF:1F
            X509v3 Authority Key Identifier:
                keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:09:c1:b5:d8:17:a6:b7:7e:68:c5:ed:79:31:1c:4c:3d:43:
         59:2c:7d:12:90:a1:cf:79:86:11:e4:ef:c9:32:3c:8f:f9:85:
         53:d4:37:ff:5c:c5:23:7e:4d:a7:7e:55:93:bb:aa:cd:23:0f:
         fc:d4:74:91:de:6b:5c:8a:19:45:7a:ed:fa:e4:e2:21:9e:fc:
         f9:f7:72:fd:39:cc:bc:5f:20:93:43:ef:e1:b0:b7:e0:5a:2f:
         49:a8:e0:9a:ed:c2:30:cd:65:47:aa:08:84:d2:f1:84:e2:aa:
         97:76:90:c8:ef:a4:b8:66:f0:94:8d:2c:3e:af:a4:ee:1d:50:
         13:84:4c:a7:0d:09:ad:3c:81:ab:59:20:25:94:69:59:d8:73:
         05:67:9f:e7:ef:6b:ca:3f:b7:e7:82:36:4d:5d:61:ad:ab:93:
         20:05:bf:f8:d3:9f:f5:c1:fe:85:7f:a3:a7:0d:f1:51:f6:be:
         97:f9:c1:60:5b:60:a5:ed:bb:d1:9a:ea:9d:6e:67:3d:03:94:
         02:41:c4:17:ea:8a:b1:df:90:a1:cd:f0:73:3b:0e:e6:41:1b:
         d2:26:ef:d1:d9:53:67:0f:93:8f:a8:7c:fa:95:f6:41:0c:93:
         c4:e4:c9:df:dd:ce:d0:49:8f:e0:a2:47:5a:74:17:f8:dc:78:
         29:07:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:31:54 2026 by rpki-client