Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File:                     dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier:          eOE87sp0/2zcFbLkJ3ljtdmiWbAkCxDcYMyoOadkfzo=
Subject key identifier:   DD:0B:A1:08:83:C8:7B:B8:14:30:04:D1:58:26:E7:3E:73:2C:E6:78
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer:       /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial:       019EBDDA09B8EEE81F0DCBE159E63F11B971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number:          1781
Signing time:             Fri 12 Jun 2026 22:00:43 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:43 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:43 +0000
Files and hashes:         1: QJLzAcYEPZtusCbKyGwUQTxHEC8.roa (hash: s6kRRpAzDax5R6PcyME5uOuvdqUfyGUTl0Dg3M3bEJY=)
                          2: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: fZ9f5sCpZr3+hPb9pYE2Excr65tuau+ZcM/5mODXGuA=)
                          3: ujwOpmvI7_mtFn1fgbJBHjBrEAQ.asa (hash: 5KjvP6td+WHS3IxTZC55ymoYHpGObpqQTR6nNfLeSvo=)
                          4: z9mvcCRCkYuHKKd00BlCEYA9eQU.roa (hash: mRPfZgnI9elFYBzB1KqCj8Oo2adMJczMgSykoYWKKi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:09:b8:ee:e8:1f:0d:cb:e1:59:e6:3f:11:b9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
        Validity
            Not Before: Jun 12 22:00:43 2026 GMT
            Not After : Jun 13 22:00:43 2026 GMT
        Subject: CN=dd0ba10883c87bb8143004d15826e73e732ce678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:7c:c5:c4:81:5d:ad:c1:53:aa:5c:a3:13:
                    da:cc:d8:19:fe:c3:a6:09:55:09:98:46:76:e4:d8:
                    1f:f9:a4:3f:a6:80:f6:56:b1:f1:34:45:df:29:1f:
                    50:bb:4c:2a:8d:0d:3f:f3:54:6f:09:34:4b:17:7a:
                    59:f2:59:89:fa:98:24:da:b2:f3:24:14:29:45:52:
                    de:fd:f9:2d:86:7e:9a:6d:49:e7:c2:62:3a:4c:6a:
                    ea:77:f2:5f:b5:49:88:96:d8:38:84:26:d3:c3:23:
                    8b:c8:71:c6:ac:c5:ba:e5:31:a4:34:6f:8c:48:85:
                    68:74:08:81:7a:85:e7:b5:94:e8:ed:e1:5a:61:82:
                    f2:68:08:c9:ce:79:e0:d2:14:0b:a1:82:77:16:31:
                    b2:a1:f4:e6:cb:fd:fa:d0:2a:37:83:9a:4b:d5:ae:
                    43:27:99:1b:f8:b1:1c:80:97:f7:84:9a:eb:7e:38:
                    88:52:2a:44:fd:0d:c0:15:17:fc:37:bd:0b:52:24:
                    5e:37:89:8c:2e:24:ed:64:d2:e7:5a:71:b0:81:a2:
                    96:53:84:45:18:99:3e:c8:25:f6:ee:b3:96:8c:82:
                    fb:81:40:dd:c0:9e:38:48:51:7b:06:a7:c1:32:bb:
                    4d:19:d6:ea:b1:33:4e:76:74:74:d1:cd:20:5a:60:
                    a1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0B:A1:08:83:C8:7B:B8:14:30:04:D1:58:26:E7:3E:73:2C:E6:78
            X509v3 Authority Key Identifier:
                keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:11:c0:22:d1:46:1b:8b:85:0d:e2:83:81:dd:4e:4b:57:c0:
         7c:1c:b3:ac:1e:6e:ce:25:f0:c0:63:be:6b:65:3d:01:8f:ba:
         8f:73:87:c1:dd:a1:d8:14:71:e8:61:22:41:90:96:e3:44:dc:
         bd:d6:6b:01:31:76:98:4b:b7:46:c4:7e:f3:7d:f3:48:3c:08:
         5e:7b:77:69:10:ad:b7:f3:0b:cc:59:9b:65:cc:78:d6:3e:5e:
         a0:47:10:9c:0c:17:97:3c:e0:a0:19:d2:0b:a3:92:6c:56:f4:
         95:e2:cf:d3:6a:6a:da:4f:b0:c9:0b:9e:d0:45:3c:5f:18:15:
         e1:fb:f2:7c:7d:37:86:e0:c4:d2:48:ce:50:96:48:dd:de:ce:
         2d:b5:85:71:36:3c:11:53:4d:23:2b:b7:a4:f3:6d:1a:a8:3c:
         32:df:98:df:3b:3c:bf:13:d1:50:58:a2:6e:d8:33:01:92:6e:
         a5:aa:ef:0d:1e:7b:48:1c:46:4c:62:47:88:6f:61:2d:7b:9e:
         9b:8c:5b:1a:e3:06:e8:9d:4a:b2:95:fc:43:0e:6f:02:56:ca:
         1c:88:d6:80:ce:04:7b:73:0e:d6:ce:49:74:bd:52:c2:9c:c0:
         c6:94:35:fb:8c:5f:e7:8e:a6:ae:e8:29:10:8b:97:99:55:02:
         ca:e9:0a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:20 2026 by rpki-client