Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File:                     gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier:          uL88bc7EmpxGwww4voC9qc39br04yeh15QXZaL3p8oY=
Subject key identifier:   1E:13:C3:9B:FC:ED:F3:08:18:6E:E1:97:1C:F9:29:6F:73:29:4C:F7
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer:       /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial:       019ED31883D98F2B9581377280EA00F4FA83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number:          1968
Signing time:             Wed 17 Jun 2026 01:00:59 +0000
Manifest this update:     Wed 17 Jun 2026 01:00:59 +0000
Manifest next update:     Thu 18 Jun 2026 01:00:59 +0000
Files and hashes:         1: F2IHJrnPyRwbzKo1HP_xqBvLdvQ.roa (hash: FgszxDdrz1FfhJ+T4y5DQNjiDZnx4cEgXP5k1Bjw7eg=)
                          2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: YK7jiyKnhwBD+LqdLB5web3nn6H2pRYuFos01Mq73mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:18:83:d9:8f:2b:95:81:37:72:80:ea:00:f4:fa:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
        Validity
            Not Before: Jun 17 01:00:59 2026 GMT
            Not After : Jun 18 01:00:59 2026 GMT
        Subject: CN=1e13c39bfcedf308186ee1971cf9296f73294cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:64:0f:dc:14:20:6e:97:dd:ee:56:c0:31:
                    f4:80:34:27:67:19:a2:ce:d9:30:fd:29:c8:4d:14:
                    57:0c:15:b0:32:06:55:47:31:46:b1:4c:a4:7d:7d:
                    33:6e:6e:d9:44:dc:87:02:8f:e2:1a:c1:93:d2:b6:
                    5d:58:bb:65:37:ff:1e:63:a7:6f:9a:8a:43:4b:6d:
                    86:a8:24:d8:8a:8c:5f:88:c9:b7:6b:1e:12:f6:29:
                    94:b0:84:88:ab:0f:9a:19:58:30:18:71:bf:26:c8:
                    0b:df:7e:b3:40:b0:1d:2e:19:48:20:a2:8c:e3:e9:
                    72:01:95:1f:8c:09:a4:b2:0e:cc:e0:fd:9b:29:b2:
                    74:a1:49:21:92:8f:06:d0:e2:1e:80:8f:5a:be:31:
                    da:47:47:12:18:74:9b:11:e9:66:5a:22:94:33:0f:
                    4e:38:fe:3d:9f:ee:89:39:04:c3:f3:2b:8e:3d:19:
                    32:d5:67:12:20:bc:61:62:fb:d9:4c:46:bd:45:64:
                    5e:8e:20:f7:4a:45:6b:d9:a8:ad:99:e6:5f:ed:29:
                    7a:35:44:aa:1b:1c:90:38:25:29:a8:3b:5a:b5:4b:
                    d1:51:4e:80:8d:ae:9b:05:19:bd:c5:75:14:62:6e:
                    c8:85:8a:f1:da:15:00:9d:a9:a1:74:a4:d3:dc:c9:
                    f3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:C3:9B:FC:ED:F3:08:18:6E:E1:97:1C:F9:29:6F:73:29:4C:F7
            X509v3 Authority Key Identifier:
                keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:14:98:a8:e1:65:20:bd:66:18:f7:49:a4:17:ec:75:52:29:
         fb:8e:b5:9d:b6:89:2f:e7:57:e5:f2:e9:d4:81:94:ab:ef:b1:
         df:3f:72:ca:77:de:96:a8:0c:c9:fe:31:15:8c:15:2a:62:f3:
         0d:d5:f7:24:74:9a:41:66:e7:51:80:d1:65:ac:c7:6b:b5:df:
         ae:eb:4d:3a:cd:50:11:39:bc:5f:63:e7:e9:23:4b:6b:2d:ad:
         1c:5e:c4:0d:8d:03:0e:42:73:af:45:78:d4:b7:66:ef:15:13:
         3c:ef:c0:c3:97:aa:11:1b:e5:8f:4d:31:26:5c:76:9d:c0:14:
         9c:a5:33:ff:50:6b:5f:26:23:ef:1c:7a:85:3c:b0:41:39:5f:
         6d:e9:ce:89:4e:97:1a:1a:8e:ca:91:65:4f:e5:1a:6e:ae:2a:
         dd:a1:c9:03:d7:ec:77:2d:ac:a7:3e:79:e7:9d:e8:e7:75:07:
         9a:cf:0d:88:c0:e2:32:e1:3b:b3:0f:ec:70:65:99:9d:9f:20:
         a2:70:8c:a8:c2:6a:0e:23:d9:ed:2a:61:51:a1:43:dc:e6:8d:
         8f:39:af:44:ad:fd:f9:01:a1:69:55:c7:52:81:85:a2:8d:d7:
         00:bb:4c:f5:96:e7:a8:d6:fa:1d:da:06:ce:92:5e:f0:1d:1f:
         10:20:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:51 2026 by rpki-client