Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File:                     1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier:          /Kujrf7TsUQxKnHjfzgUMoe4Sh85wgTeBku2P5z2yt8=
Subject key identifier:   BD:FC:FD:7D:B5:FF:B9:06:F6:75:7C:DE:56:A2:B2:A2:F6:CC:68:09
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer:       /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial:       019EC149541D01A6F65D417ADDA452FCB35A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number:          1966
Signing time:             Sat 13 Jun 2026 14:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:08 +0000
Files and hashes:         1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: 78XVljMRH9WULEOzmnuS4xY0slYo0z3/HYvp8Z2Vp38=)
                          2: 2Bdi4XnLFiihlMAX_gDRRlR7QGM.roa (hash: VjiQO9aLNwn7skSw+PzxXhanmj53IG3y+tedhX+Sjas=)
                          3: 6-xQbUlUaR82Mjs6L91ilC6T9zk.roa (hash: 3yF/4C6JYKybBw99BMZ6GkxatUw24XNyWwCB72QH0u0=)
                          4: INUpirlxyhCbq85VbAW6ztdQs4k.roa (hash: jkGGZWjPY73Dhwpc13NpoAleBEBZrvWBjPm/O8n+EJ0=)
                          5: OroJQKCq7I4yVcFTm6lWNUxxqrw.roa (hash: nDA5smDMOF4n6Nj5rxqPI/iYhWZmpnNfYaYuSp7sOUs=)
                          6: ZhkHANnwp0wI55F5kUZAa2xMrE0.roa (hash: UMOnz6djXz4C+wt70K102Br84XLLMdwFlF/5hZkaKPg=)
                          7: qFql76UYRJ7MqINcpO2JRQNjZJk.roa (hash: b3XQyMMRxs2maOmxKWw8Mo7+dtT/HrPvRDYI0jww5Lg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:54:1d:01:a6:f6:5d:41:7a:dd:a4:52:fc:b3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
        Validity
            Not Before: Jun 13 14:01:08 2026 GMT
            Not After : Jun 14 14:01:08 2026 GMT
        Subject: CN=bdfcfd7db5ffb906f6757cde56a2b2a2f6cc6809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:10:50:aa:74:d4:1e:92:cb:92:2d:5c:3c:
                    98:34:9c:f5:f1:12:4c:78:59:07:41:08:16:3e:fb:
                    59:87:5a:3f:ec:01:a5:3c:ce:6b:66:5a:41:06:e5:
                    dd:4e:3c:ba:b7:75:e3:8a:ec:58:15:fc:5f:a4:d1:
                    22:55:37:f5:b2:ce:ac:98:b1:a0:2b:3d:2b:ec:0b:
                    70:f5:e5:51:ff:d3:83:ee:c6:a2:c6:ae:c2:f8:f9:
                    a9:b8:61:66:78:9a:d1:6a:af:71:43:10:3c:34:50:
                    4d:0f:ea:c7:1b:98:3a:82:55:b4:18:a3:cd:fc:96:
                    2f:b1:12:cf:35:bc:30:bb:61:1a:f8:9f:49:b2:17:
                    78:20:01:be:af:cc:d8:c9:c8:27:c4:53:98:db:0b:
                    6a:4e:34:e8:09:1d:59:01:55:b3:a4:11:0b:d0:02:
                    af:f9:6f:62:99:4d:49:4e:3e:05:6d:5b:53:e0:8b:
                    da:02:f2:90:d7:24:cd:fe:dc:46:65:11:6e:e6:73:
                    c0:d4:12:ff:29:d6:13:35:6a:24:02:24:0b:63:60:
                    2a:94:5d:0d:bc:52:86:d2:64:14:2a:ad:e1:51:8e:
                    38:7c:c3:d6:99:77:9c:10:cf:49:cf:69:bc:c1:75:
                    61:00:7a:e8:4b:fe:b7:db:62:1b:52:e3:ee:05:7a:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FC:FD:7D:B5:FF:B9:06:F6:75:7C:DE:56:A2:B2:A2:F6:CC:68:09
            X509v3 Authority Key Identifier:
                keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:89:c9:51:de:59:4e:ed:f3:0f:d0:01:04:68:96:79:bf:89:
         58:98:6c:8b:56:a5:74:de:f9:44:9d:56:dd:6b:eb:28:b1:b4:
         4a:61:27:24:76:80:e1:6d:3f:02:59:97:07:84:d5:63:bc:25:
         2a:61:fb:0f:0c:8e:2c:44:ef:de:0c:ef:70:00:5f:ca:70:ad:
         a1:98:2f:38:b8:24:a0:cf:d1:8d:b2:39:de:99:66:b9:71:73:
         aa:71:35:7a:84:2d:8f:67:e9:e9:f4:1c:fe:03:f4:ae:f3:71:
         c5:15:02:40:64:ce:b1:67:99:d0:9e:9f:12:c4:64:78:9c:11:
         b1:e8:d2:73:b2:7c:40:20:25:5d:1a:e9:88:74:76:4a:19:74:
         36:af:bb:ed:12:db:4c:89:34:72:14:cd:49:ff:dc:6e:05:69:
         59:22:ee:df:3f:1c:ec:c9:27:45:50:e5:29:4d:74:5a:94:5c:
         21:cd:aa:d4:44:30:3f:e1:b2:32:74:33:05:7e:68:43:8c:5d:
         90:35:cb:b8:9f:88:be:5b:d7:db:da:eb:db:6d:a5:bc:18:bb:
         f8:0c:e2:74:ef:c0:68:ce:a7:25:3c:0d:96:01:48:8f:df:b5:
         1b:34:50:73:29:e0:f7:9c:08:73:77:3c:e5:8c:44:59:d5:fa:
         20:5b:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:51:32 2026 by rpki-client