Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File:                     1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier:          EhXD5fjmunM/0SqZHQNnQaYFv7gQO2cdRNFAHhu9PRQ=
Subject key identifier:   3C:C3:37:42:B4:1A:FB:DD:67:96:5B:7C:AD:AB:71:86:AB:54:3C:08
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer:       /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial:       019EBF9173F06358DEC1982BF36A3CD1F31E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number:          18EF
Signing time:             Sat 13 Jun 2026 06:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:41 +0000
Files and hashes:         1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: JT0qWskKV2vfVaeHJQCpTfYj8XbpQVT5pr1VYsjZlPg=)
                          2: YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa (hash: XFRYmJaoPXSuRaNORpMPCGlJK9aNC4fFNx6j6pcG01w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:73:f0:63:58:de:c1:98:2b:f3:6a:3c:d1:f3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
        Validity
            Not Before: Jun 13 06:00:41 2026 GMT
            Not After : Jun 14 06:00:41 2026 GMT
        Subject: CN=3cc33742b41afbdd67965b7cadab7186ab543c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:05:c5:af:dd:39:cd:f9:ac:0e:ec:a8:35:
                    68:df:c2:97:9f:5b:0e:f4:f7:4d:7f:17:21:82:ca:
                    7e:d0:62:b8:d8:b6:53:79:81:91:c5:f1:9a:55:e9:
                    33:c6:27:b9:16:29:fd:55:f5:44:2f:8c:84:9f:29:
                    ca:2e:d3:16:06:5e:ed:50:9d:00:31:87:af:6c:ef:
                    48:60:66:1d:aa:55:fd:e8:31:9b:a3:ef:f9:a2:fb:
                    8d:18:46:54:04:08:13:4c:19:ca:b4:df:f1:c3:af:
                    12:d9:08:88:e1:c2:8c:3f:5b:0b:68:9c:1b:d1:cf:
                    00:ec:d8:09:1c:2a:7a:27:07:44:c3:20:22:ea:c2:
                    a9:55:c6:20:48:c8:8d:6c:b1:68:c4:23:0b:be:74:
                    1b:43:27:83:6e:8b:f5:24:a0:d4:a3:97:bb:ff:e5:
                    9a:44:dc:86:53:3b:60:77:2f:15:a6:f3:5f:02:81:
                    7a:da:bb:2f:2e:64:20:c7:fd:f4:68:59:23:5d:33:
                    32:bc:89:79:ab:df:3f:0d:fb:b5:c4:a2:4f:07:6f:
                    33:f0:39:1b:79:42:d3:ce:48:86:59:24:81:74:aa:
                    b5:78:7e:14:6e:74:5f:39:13:0a:9b:81:c7:62:15:
                    20:b2:9c:f0:08:68:30:9b:db:e0:8b:6c:c8:42:e2:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C3:37:42:B4:1A:FB:DD:67:96:5B:7C:AD:AB:71:86:AB:54:3C:08
            X509v3 Authority Key Identifier:
                keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:5a:d1:2e:d7:00:32:e4:3e:d7:7d:46:15:a9:7f:14:7f:
         49:4b:9b:05:b4:8e:17:34:a8:cf:6b:1e:94:0f:ef:09:3e:39:
         71:d9:8e:61:ae:a9:db:56:e9:68:66:1c:d8:7a:a4:4c:48:86:
         2b:2f:9d:51:97:a3:d7:e4:26:c8:07:df:2c:9d:c1:ef:35:f5:
         44:61:b1:ca:82:db:e9:16:b0:80:d8:e8:a4:36:ad:54:df:86:
         6f:36:73:ed:e3:98:99:74:51:dc:2c:36:b5:1e:77:f7:0c:da:
         09:86:c4:8c:2b:0c:09:0f:cb:60:95:e7:31:c4:88:54:bf:af:
         f4:41:25:35:bc:cb:0e:1a:78:f6:3a:48:54:3c:a5:1a:a4:20:
         55:1c:fa:f3:c5:2e:2c:5f:02:98:a3:3e:cc:63:6c:2a:16:fb:
         f9:f8:47:b8:e0:c7:e1:ce:61:67:0b:53:54:5b:5b:f9:c4:af:
         d4:74:c9:ad:8c:ea:74:16:9d:b9:41:f6:41:48:62:2e:c3:27:
         98:a0:28:16:d9:0e:e3:4d:d2:8f:00:20:29:80:26:4a:14:1c:
         74:1e:38:93:69:3a:f0:9f:97:4e:e4:11:da:04:7a:aa:69:3e:
         22:b5:4f:a2:40:23:f3:05:46:78:12:77:73:15:97:7e:2f:35:
         66:65:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:36:18 2026 by rpki-client