Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File:                     IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier:          P304v4CtE0rEMJxTNLQ+uiTKQ2w3MFLUVClbrT1caOY=
Subject key identifier:   FB:18:86:DD:8B:39:4D:4A:88:98:F8:3E:F1:43:CE:B3:62:3C:E9:31
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer:       /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial:       019EBF5A5F8D959CB2AB4F34362B81888644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number:          1956
Signing time:             Sat 13 Jun 2026 05:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:31 +0000
Files and hashes:         1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: 6VASGR0kunwvX6blaJRJyMUWGbOmPDXTb9i7fLsXPVI=)
                          2: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (hash: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:5f:8d:95:9c:b2:ab:4f:34:36:2b:81:88:86:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
        Validity
            Not Before: Jun 13 05:00:31 2026 GMT
            Not After : Jun 14 05:00:31 2026 GMT
        Subject: CN=fb1886dd8b394d4a8898f83ef143ceb3623ce931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:33:65:ab:8a:7c:f8:4d:27:ff:a7:7c:89:
                    9b:03:60:3d:47:1a:7f:da:f9:ae:fb:51:9d:47:f2:
                    d2:9d:e2:5c:e1:d8:10:00:63:f8:fe:97:b9:53:5c:
                    67:38:04:93:12:d9:61:63:d0:25:56:f9:0f:35:1b:
                    75:8c:37:5e:eb:45:d9:96:44:8a:ae:75:9e:e2:57:
                    8a:31:cd:4d:67:a6:3d:e0:8f:14:8d:76:2e:4e:b7:
                    25:e1:65:32:39:a9:dc:53:00:fd:cf:aa:55:be:55:
                    20:a5:f0:13:6e:5c:74:70:ce:a5:ab:af:7a:1b:5f:
                    39:9c:3f:75:c0:c5:40:43:82:9c:bf:e2:d4:51:3a:
                    52:d2:6c:03:0c:d0:62:58:48:9e:01:a1:ce:36:88:
                    af:ba:f0:cc:cb:23:e5:e3:54:c5:d3:74:44:43:75:
                    68:4a:22:4c:42:b2:5c:40:a9:9a:90:32:49:79:be:
                    f5:76:bf:8f:1b:f7:05:7e:a8:4a:7a:9d:eb:0b:01:
                    46:e2:66:91:fa:a4:ad:17:fd:a8:82:45:f8:fc:df:
                    35:6e:67:84:e8:8c:eb:0c:45:09:70:13:d3:ce:81:
                    5f:01:b8:3b:a2:01:cb:f2:0e:5a:0b:12:fd:aa:e4:
                    46:3e:14:e3:c4:35:7d:c9:3a:f3:de:d1:a8:77:e3:
                    35:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:18:86:DD:8B:39:4D:4A:88:98:F8:3E:F1:43:CE:B3:62:3C:E9:31
            X509v3 Authority Key Identifier:
                keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:04:33:ae:4b:f1:43:47:c2:76:08:4f:49:61:5e:07:99:4b:
         3b:e0:dd:3c:e7:76:0f:7f:34:6b:6d:45:75:21:4e:c3:3f:76:
         e6:b1:95:62:65:98:67:da:be:8d:2d:96:31:fe:14:ee:f4:d3:
         96:3f:1b:91:1d:b7:bc:e6:06:4c:ea:94:6b:2d:db:19:af:8c:
         44:6c:95:2a:b1:b9:74:0a:2b:55:ef:03:fe:3c:7a:32:dd:8f:
         a5:57:34:c4:f6:ea:1b:d4:05:cb:49:21:99:3c:54:dc:0b:64:
         ea:fc:06:ca:46:ca:07:45:fe:a2:7c:99:99:20:de:48:e2:2d:
         9b:27:f9:38:60:1d:69:42:8e:42:f6:f1:a9:53:c4:7e:e0:98:
         54:86:4a:88:86:d2:1b:8c:f2:16:00:e7:81:0d:cc:74:50:15:
         25:6a:76:31:a9:1f:81:d0:e7:b6:70:c5:2a:24:41:ed:97:98:
         86:b2:98:63:f7:89:39:f5:1f:88:69:e9:e9:e6:cd:68:10:d3:
         bc:82:9f:2b:d7:e7:6a:f2:6d:8a:e0:5a:b6:92:34:3b:dd:2d:
         fc:ee:43:30:30:7a:d0:48:f7:02:31:4c:14:72:25:8d:02:e1:
         17:b1:b8:54:3b:e0:b7:7f:4e:ee:27:fc:bd:70:ae:f7:30:f8:
         74:a8:d6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:04:32 2026 by rpki-client