Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File:                     1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier:          u2yL9y2UBmR4X7MGXOiW+hFz2P9TrsUbchnvxnJTj3o=
Subject key identifier:   B3:02:64:B4:86:FA:4C:E9:23:95:A9:8C:A5:AA:97:14:35:42:8C:4A
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer:       /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial:       019EBEB5DE914A4F3A8A7B368CF9C41D45A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number:          0F78
Signing time:             Sat 13 Jun 2026 02:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:50 +0000
Files and hashes:         1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: Qz6oD6I9wsbcoM2ZdLlCs+gvPkE7eFJP0RJ+eteZw4U=)
                          2: j23BZZk_JCF_SfyfxVWcOAzB598.roa (hash: E3VUgy7wmstrKfM+/rHOKE3M1MtzxmFo74y/4C1q9hQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:de:91:4a:4f:3a:8a:7b:36:8c:f9:c4:1d:45:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
        Validity
            Not Before: Jun 13 02:00:50 2026 GMT
            Not After : Jun 14 02:00:50 2026 GMT
        Subject: CN=b30264b486fa4ce92395a98ca5aa971435428c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:a0:26:ad:1f:29:8b:6c:bb:33:1a:b1:32:
                    f2:d9:61:f9:7f:3e:b1:5f:33:92:2c:c8:dd:c6:63:
                    a7:ba:3e:3e:7a:a3:a5:c8:32:5f:d0:4d:58:47:74:
                    b5:6d:6b:de:12:7e:7c:ee:a1:65:84:2e:dc:6a:e0:
                    0b:ab:8b:22:fb:a1:8c:f5:e9:5a:e9:fe:cd:2f:a1:
                    83:2a:c4:88:40:a8:91:99:3b:25:20:f0:52:c6:7c:
                    2d:66:21:4f:d6:94:17:d7:06:87:35:3d:b1:07:6a:
                    a8:86:54:bd:26:a2:62:54:c0:eb:57:25:c2:82:2e:
                    67:07:b2:28:5e:48:14:85:b2:2e:08:fc:d3:51:bd:
                    96:7d:69:64:fa:21:d5:e7:da:15:df:26:40:a2:ea:
                    9a:7b:5c:ca:08:3f:ef:28:12:cc:56:ec:e0:91:d2:
                    c2:23:4a:a8:da:37:d2:e7:bb:d2:90:09:88:6a:50:
                    1f:49:34:85:b5:77:92:65:de:7b:8e:61:4c:a5:34:
                    5a:a5:6b:7e:6f:dd:96:a3:e8:5e:97:fa:e9:88:e0:
                    b3:97:86:5c:84:8b:2b:09:c1:b7:22:13:8a:dd:22:
                    38:f3:89:03:1a:0d:93:39:50:9e:45:7c:0b:de:6c:
                    2f:df:23:78:6d:ec:ed:92:3e:a6:78:0d:00:5a:ad:
                    9e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:02:64:B4:86:FA:4C:E9:23:95:A9:8C:A5:AA:97:14:35:42:8C:4A
            X509v3 Authority Key Identifier:
                keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:3e:52:2d:b5:29:58:ba:25:19:ac:3b:83:cd:81:24:16:06:
         2d:2b:c0:2c:6c:26:5a:8d:9e:57:12:b6:c3:b2:d3:5a:f7:7e:
         41:bd:ba:af:2b:88:5f:e8:a9:31:4b:7f:1b:70:33:a1:01:02:
         74:7a:ca:18:5b:ac:32:5b:89:67:f9:68:ab:be:cb:de:a2:a8:
         43:52:06:f4:e1:4a:00:5c:dd:85:b9:4e:95:a4:bb:88:a0:f4:
         9c:03:b7:23:6f:ac:4a:05:95:c4:0c:e5:d0:50:cc:d5:85:4c:
         52:cd:d0:9b:fb:a5:85:89:02:c9:15:0e:f1:29:48:9e:25:7d:
         96:ad:4a:7a:d1:4a:d0:f7:3c:c5:2b:66:cf:dd:28:cf:5d:f7:
         ba:da:61:f4:4d:f3:9f:0a:a7:01:10:1b:99:87:23:90:74:6d:
         96:62:de:e7:54:63:f2:f0:10:16:76:de:0e:7c:92:33:85:b0:
         9e:7c:12:fa:d7:a3:f8:ba:f5:3f:e7:2d:cd:1c:ae:2d:f0:4d:
         91:5c:58:12:e9:b1:be:66:9e:fa:c0:9c:0b:9b:93:f1:c6:bf:
         a0:b4:f2:16:01:78:cf:8a:05:54:32:fd:a5:49:8b:9c:42:9b:
         bb:36:a7:e1:b7:d6:60:91:b6:72:9b:c0:45:dd:6c:53:37:2b:
         95:4a:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:37 2026 by rpki-client