Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File:                     cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier:          236q80DZ1zrwJ5Eq7cOV6RgDFjXes1c0oVF3oLZC9lY=
Subject key identifier:   D3:39:27:D9:C4:B6:3F:07:44:44:E9:38:BB:9D:70:D6:A1:DC:CF:67
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer:       /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial:       019ED461D49D490978F15C4C8086B081CB3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number:          18F7
Signing time:             Wed 17 Jun 2026 07:00:41 +0000
Manifest this update:     Wed 17 Jun 2026 07:00:41 +0000
Manifest next update:     Thu 18 Jun 2026 07:00:41 +0000
Files and hashes:         1: VGyi3_XM7fe5glWnkMXs_96XfgY.roa (hash: 5b1Wuvrw9UByaw3AW1uJ5o3W+F06ZtJx4zNpuEiuZ3Q=)
                          2: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: 4gczJ8N3IEXx+Sv/LQZiMFlnKvB1GFqMmgaVlmFyOAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:61:d4:9d:49:09:78:f1:5c:4c:80:86:b0:81:cb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
        Validity
            Not Before: Jun 17 07:00:41 2026 GMT
            Not After : Jun 18 07:00:41 2026 GMT
        Subject: CN=d33927d9c4b63f074444e938bb9d70d6a1dccf67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:26:d7:90:8f:78:15:be:90:e5:5c:04:95:
                    4f:ef:91:9c:23:23:08:d7:36:f5:d5:3e:4d:35:8a:
                    ca:00:ce:08:fb:8a:6b:c3:f3:1a:b7:ea:61:95:3e:
                    83:c8:83:6d:8e:17:64:e0:25:49:ca:37:4e:dd:92:
                    6f:c2:15:75:72:84:0c:07:ba:56:7b:b8:74:a4:d6:
                    75:51:19:7d:90:27:6a:91:96:92:83:26:1d:04:62:
                    90:3a:ab:c1:85:52:d8:91:2c:e6:81:fb:41:b0:d9:
                    4a:46:ca:aa:69:b0:4f:2f:42:0c:c9:f0:92:23:9a:
                    66:3f:52:26:69:e5:3a:72:b3:e6:de:45:ca:64:8a:
                    91:99:86:0a:05:e9:e4:df:81:fd:31:21:4a:eb:ed:
                    bd:f5:9f:57:b0:a1:b4:73:c9:fb:94:30:86:71:82:
                    0f:e4:4b:cb:82:b3:aa:76:cc:75:90:f5:c1:ad:9a:
                    02:6f:c7:ff:ca:2a:dd:5a:08:7b:44:f9:fc:c4:35:
                    7f:82:04:3a:05:d9:48:42:1d:7f:15:92:aa:55:a0:
                    9f:ce:31:a0:9f:72:c0:1f:63:8c:17:b9:58:bc:de:
                    64:13:11:c7:0e:2e:90:47:ab:87:fa:56:df:d7:83:
                    69:95:2c:68:65:e3:8e:e3:77:b5:b9:3a:a2:5d:c3:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:39:27:D9:C4:B6:3F:07:44:44:E9:38:BB:9D:70:D6:A1:DC:CF:67
            X509v3 Authority Key Identifier:
                keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6a:c5:f2:b8:a0:96:e5:b8:0c:d4:ce:01:ee:10:57:6d:7d:
         e0:5b:e0:7f:aa:1b:ba:83:3b:ae:e0:14:e5:b8:2e:37:11:f2:
         c7:6e:c7:57:85:39:50:0b:6a:95:d6:80:3e:b3:9c:42:a7:33:
         9c:9b:63:11:63:76:d5:4e:59:05:14:e9:e9:81:05:ce:ab:14:
         3b:73:3d:ab:55:14:2d:34:96:bd:1f:cd:7d:0c:fe:51:de:17:
         f6:75:1a:1a:b8:45:13:9e:06:b0:df:e9:c4:65:fa:b0:0a:62:
         a0:79:87:f2:c8:65:f7:9a:7d:b4:6b:46:81:1c:68:66:64:af:
         ea:06:b6:4b:40:a3:a9:a4:f6:34:15:69:c7:2c:03:77:4a:a2:
         c5:c0:66:0f:ef:4d:c4:65:05:61:43:b2:8c:ea:62:2d:a0:38:
         9d:46:be:ec:4b:bf:ee:90:21:0d:ef:ec:e8:d0:5a:ba:11:8e:
         46:a3:92:13:aa:f9:82:41:41:c7:9a:42:32:15:73:67:cd:2b:
         fe:1e:61:36:8c:8c:2a:2b:43:ee:50:19:e8:2c:8f:68:64:eb:
         72:98:22:2e:65:dc:54:0c:2d:31:5b:37:5e:63:cc:3f:6c:ec:
         b6:fd:e1:6d:80:a6:90:85:dc:e2:3d:27:4b:0d:53:cb:28:2a:
         7e:c1:3f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:30 2026 by rpki-client