Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File:                     sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier:          lxZHojDq7FAgCxA1B0x2OUqA5bzbIEZkbcftfgEzJQs=
Subject key identifier:   6C:DC:2A:61:74:72:F1:D4:CD:2D:72:75:35:7E:35:FF:EB:51:E1:A1
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer:       /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial:       019EC1ED9E05AA685AA698D4C1CC9E8A1CFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number:          1698
Signing time:             Sat 13 Jun 2026 17:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:35 +0000
Files and hashes:         1: 0WZc2xB5hVDGIEXjZ-HhqIhObPU.roa (hash: yv7agGUqeUNNQCncCwHxi4NpbbYoTQ6AYByrG78CfM4=)
                          2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: V0cxInKH0ZLWxlKpJ0C5HitY+QUD7UKiyH9riXaW5yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:9e:05:aa:68:5a:a6:98:d4:c1:cc:9e:8a:1c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
        Validity
            Not Before: Jun 13 17:00:35 2026 GMT
            Not After : Jun 14 17:00:35 2026 GMT
        Subject: CN=6cdc2a617472f1d4cd2d7275357e35ffeb51e1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fd:e6:c5:0e:d9:df:8d:0e:0e:43:19:0d:61:
                    51:43:89:85:7d:a2:cc:0d:22:9b:3d:cb:80:0d:61:
                    13:71:2b:e8:5b:81:24:9a:ce:e8:a9:bf:49:9d:f6:
                    ab:0c:67:67:f8:13:c8:a0:08:b7:96:5d:32:a5:39:
                    5e:77:14:aa:97:9d:5f:91:56:4e:4e:04:d1:e1:c2:
                    e5:6d:c7:48:45:bf:7e:ed:94:3e:eb:b7:8e:94:57:
                    13:e0:b0:de:51:b2:b5:5e:ff:b8:d1:a7:99:d8:c4:
                    91:5c:e0:9e:eb:17:6e:38:c3:aa:1b:f2:7c:54:4f:
                    52:c5:e1:ec:b2:04:fb:10:44:58:82:61:5b:a5:06:
                    b0:e4:c5:3f:52:c7:c1:37:06:87:63:6d:7e:6c:9d:
                    30:a0:b7:13:84:f8:4a:9f:b3:29:b7:e6:4b:1c:12:
                    3e:93:22:58:8d:89:6d:71:01:10:35:80:5b:c7:0c:
                    f4:fd:ff:5b:00:51:7d:db:06:ce:08:9a:57:3c:63:
                    0e:01:92:36:34:63:13:ad:93:0a:dd:59:57:f0:83:
                    a6:cf:ad:44:53:44:54:d6:5a:a9:0a:a6:12:b9:28:
                    3c:92:c7:f7:49:03:64:39:ee:7e:6b:a4:06:98:8d:
                    41:6b:3e:38:54:f6:e2:66:28:de:18:f2:c7:5b:13:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DC:2A:61:74:72:F1:D4:CD:2D:72:75:35:7E:35:FF:EB:51:E1:A1
            X509v3 Authority Key Identifier:
                keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2f:e8:f4:1c:78:b8:cd:d4:cd:c8:ea:7c:3d:b1:b4:2f:74:
         6b:b8:2a:32:75:55:fc:9c:14:16:ae:e5:6d:45:10:37:f3:39:
         73:90:82:e5:16:4d:63:ec:0d:fd:ae:9a:22:e8:2a:f5:c0:4b:
         de:7d:b1:31:d6:87:48:9a:73:81:18:a6:41:34:a3:b2:ef:01:
         a6:c4:eb:0a:2f:fe:0f:e5:ea:c1:70:bd:b2:a2:89:70:ea:0e:
         bf:a4:00:1e:ef:8e:86:66:86:97:cf:77:bf:84:f4:a8:b0:78:
         8f:4f:0b:56:c3:b2:75:89:d1:20:29:18:02:0f:3d:7e:f4:c6:
         d7:54:92:44:81:35:ee:a5:96:9a:5a:8a:2b:f5:c4:7d:92:15:
         7e:b8:01:55:78:91:e4:74:94:31:3c:cb:ae:12:25:f6:0a:17:
         a8:bf:ee:98:62:87:6e:18:3f:6f:0c:46:e2:46:76:7c:34:bb:
         f8:fb:51:32:2d:d9:00:c1:59:92:1b:b7:1c:1c:59:3b:85:1a:
         47:8b:f3:f5:ef:b9:ea:ec:5d:4d:7b:25:ed:55:78:00:ef:36:
         c5:88:e1:a8:9b:25:57:e4:ef:36:d2:78:4a:40:72:64:62:96:
         55:76:ab:3c:a1:fe:2c:03:c8:83:61:49:a2:75:96:e6:f4:22:
         9a:41:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:04:00 2026 by rpki-client