Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File:                     1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier:          +9pK20TGan2fT+otPo4Z+Nwlbaw6OguNjRQDZ4UdhMI=
Subject key identifier:   71:A7:FF:CF:88:01:2F:F7:70:FD:9C:B7:29:6B:CF:BD:40:C8:21:06
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer:       /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial:       019EBE10822C103546C26615C79FB5919DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number:          093A
Signing time:             Fri 12 Jun 2026 23:00:13 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:13 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:13 +0000
Files and hashes:         1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: dHDvO8Q+WTrU16ximmL3g8mQJjGFy0KYyIM2crP5Kz0=)
                          2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:82:2c:10:35:46:c2:66:15:c7:9f:b5:91:9d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
        Validity
            Not Before: Jun 12 23:00:13 2026 GMT
            Not After : Jun 13 23:00:13 2026 GMT
        Subject: CN=71a7ffcf88012ff770fd9cb7296bcfbd40c82106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:93:dc:21:56:08:af:e6:22:a4:df:b5:b4:
                    7c:e5:f3:5a:29:c0:a3:d5:ac:dc:c6:ef:7f:ac:85:
                    07:58:8e:1b:d8:55:bd:ec:af:af:da:f7:03:0a:ef:
                    91:3f:f0:26:59:7e:7c:75:99:ce:47:c4:88:be:78:
                    de:36:9b:92:bc:10:e5:ea:a2:c7:24:1c:39:5d:be:
                    93:48:17:a9:3a:3e:5d:fb:68:9d:1b:c5:d6:e8:c3:
                    55:3e:91:6b:66:56:e1:f8:7e:b4:08:71:11:2e:5c:
                    74:75:a1:7f:5b:3e:0e:da:da:4d:cb:af:c9:8a:3e:
                    33:d6:50:1d:02:c2:61:2f:24:a0:eb:fe:a5:58:28:
                    04:74:d4:4b:92:e9:b7:ba:10:f9:11:da:53:1b:df:
                    a9:3c:ca:6f:26:ca:2b:c6:b7:9c:ad:2f:5d:58:42:
                    34:05:2f:2b:cb:6f:a5:40:86:af:54:17:c3:fa:e2:
                    f1:51:92:5b:1c:b0:a9:7e:b4:23:e2:f1:47:de:76:
                    66:d3:32:5e:8f:24:4e:81:44:b4:5a:8f:9f:e1:e8:
                    e8:00:1e:ec:07:26:cf:f0:cd:c7:b9:94:cb:3f:c1:
                    d6:4a:e2:04:9f:a8:80:6c:b6:99:d4:fb:d2:fc:c0:
                    99:aa:72:b2:37:4b:c9:c1:c2:02:87:81:1d:a6:a6:
                    9f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A7:FF:CF:88:01:2F:F7:70:FD:9C:B7:29:6B:CF:BD:40:C8:21:06
            X509v3 Authority Key Identifier:
                keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:66:66:d0:b9:ae:b0:6d:fe:29:4c:a9:80:9f:d5:64:bd:2c:
         41:78:ff:2f:88:2c:17:23:6d:b1:56:48:33:05:15:34:27:64:
         0d:0f:ec:10:26:21:79:58:50:b6:c2:fe:e0:a4:fe:65:6e:54:
         8a:fa:b1:33:d8:7b:f7:84:fa:14:3c:43:3f:4c:dd:57:95:e4:
         77:27:34:4a:28:4d:4b:bb:32:1d:4a:f6:b0:37:da:ed:f3:58:
         8e:98:3c:60:8c:60:74:60:89:d9:3b:b6:a3:30:64:40:c0:84:
         48:1b:7b:21:59:ac:f6:01:fe:41:f6:da:42:de:9a:9e:53:c2:
         88:8f:3c:b8:6d:0f:09:ff:0f:5d:90:a5:c2:2c:cb:25:46:9a:
         2f:85:b7:1c:da:b7:87:c1:53:b6:0c:89:e8:42:e1:3f:5a:ac:
         36:f5:88:6d:6f:96:b6:36:c8:14:c1:33:f1:c0:33:39:32:fc:
         17:2a:59:2c:74:9d:61:54:91:c8:23:7f:37:aa:2c:9b:e8:5b:
         f2:78:ac:af:ed:24:56:fb:4a:f7:c6:44:e4:eb:6f:a5:fc:f7:
         8b:a9:27:cb:2f:e8:73:13:a9:0e:9b:4b:42:3e:87:5e:db:c5:
         a4:d5:77:8e:9a:e8:81:b6:21:e1:17:06:cf:12:77:de:35:ce:
         12:24:12:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:01 2026 by rpki-client