Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File:                     MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier:          fF47eUearxcg0XTpg1IsNu7MgvQmQ645yT61cAefCgg=
Subject key identifier:   93:26:26:75:65:46:BB:1A:2E:A7:F2:20:BF:A6:D0:4E:E8:A1:7A:C4
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer:       /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial:       019EC300A5710195D0E443E558D41B704C4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number:          14C3
Signing time:             Sat 13 Jun 2026 22:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:59 +0000
Files and hashes:         1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: YQNns/Xlix6Az2SWA9zfd2r8pi3xBqDow2LbJE1itZY=)
                          2: UO3-ECp44i-4NHov7ZcCJgmk2iw.roa (hash: pq04zRZsIbyhYdzYcYCke50JhIGeXTbV4hV+QB02Ah0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:a5:71:01:95:d0:e4:43:e5:58:d4:1b:70:4c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
        Validity
            Not Before: Jun 13 22:00:59 2026 GMT
            Not After : Jun 14 22:00:59 2026 GMT
        Subject: CN=932626756546bb1a2ea7f220bfa6d04ee8a17ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:96:32:1f:2e:93:cf:21:80:e8:79:13:c6:
                    a7:ae:ce:60:f1:95:1f:3e:0f:93:1d:47:32:b6:6f:
                    e4:be:a4:39:16:f9:4a:96:2b:56:6f:13:7b:25:7a:
                    ee:aa:66:58:94:15:53:33:bf:82:61:18:f0:64:17:
                    85:e4:6f:4f:b5:e3:46:6b:f9:e1:ca:9c:af:27:e3:
                    ac:a9:32:12:51:27:8b:df:aa:03:da:59:6e:90:96:
                    ad:5f:19:3a:47:84:ba:40:19:d0:18:f1:14:e1:6e:
                    71:3d:23:40:c1:33:51:ec:16:b9:94:cf:a1:fd:b0:
                    87:e5:58:94:cf:ba:af:d1:30:6c:ac:92:fc:2b:b3:
                    ac:37:e2:fd:ee:8b:12:93:a2:40:4b:5c:ac:38:ac:
                    41:63:e5:08:a1:f8:69:5b:f2:31:13:76:2a:31:16:
                    67:b3:f9:06:74:7a:56:53:1f:5c:42:39:da:39:cf:
                    36:45:35:dd:de:c0:e4:b4:f0:dd:ac:78:ef:e3:8f:
                    ff:42:45:d8:d6:81:60:ce:00:77:5f:5c:f0:15:9f:
                    73:84:d5:e6:9a:40:5e:01:fb:41:1d:68:76:d2:71:
                    2c:fb:ab:ee:2e:ae:2c:f8:68:d4:7b:de:5d:85:fb:
                    a4:3d:e7:7f:3a:b3:d6:51:39:b9:04:08:37:c8:be:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:26:26:75:65:46:BB:1A:2E:A7:F2:20:BF:A6:D0:4E:E8:A1:7A:C4
            X509v3 Authority Key Identifier:
                keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b0:6e:f0:a3:4d:83:11:b0:db:e0:b4:1e:01:5f:af:0c:27:
         cb:d0:99:01:d2:07:fb:52:a7:a9:58:e5:51:ee:9a:88:dd:14:
         90:05:40:0c:9d:1c:6c:85:87:bf:1d:7d:be:d7:e2:14:8f:d3:
         a9:79:00:ec:70:a2:21:65:65:42:21:80:7e:e7:e7:e8:af:78:
         27:70:c5:e2:8d:14:71:bc:d2:77:6e:df:50:27:04:57:4d:92:
         5f:d0:6d:24:7c:f5:c1:28:d8:b8:bb:ce:25:c7:29:ca:8a:65:
         c5:08:c3:ad:d2:1c:11:d6:36:48:88:37:2f:18:ce:06:e7:b8:
         52:cc:5a:70:33:79:00:a6:cd:86:9c:56:e3:01:da:5d:f4:06:
         a3:59:17:1a:18:e0:05:de:b5:68:54:6f:b7:3a:85:e6:68:16:
         30:2c:3d:4f:5d:c6:23:a9:60:e9:97:d8:40:57:89:15:d5:22:
         8c:df:74:17:10:8d:28:87:84:f8:4d:11:a0:e9:6b:5c:84:82:
         f3:4a:a0:05:0c:c8:6a:03:a2:77:8c:d9:7e:31:f8:9d:7a:3f:
         91:75:19:40:5f:ca:ed:e1:18:0d:25:c1:af:12:9f:22:c5:1e:
         47:a7:33:fc:3e:fb:ff:aa:c5:40:df:0b:cb:83:81:6f:ba:3e:
         96:0a:8d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:43 2026 by rpki-client