Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File:                     1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier:          KpBsTu5MWZZz7lFFrQU+XYkm0QZo+xPMOtkp7qx66Hw=
Subject key identifier:   CF:92:5F:69:4A:A3:7B:D2:57:5C:37:FF:6A:3C:F3:EF:D3:AD:C1:AE
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer:       /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial:       019EBD356A0532C31C7302434C1885A0B456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number:          0708
Signing time:             Fri 12 Jun 2026 19:00:54 +0000
Manifest this update:     Fri 12 Jun 2026 19:00:54 +0000
Manifest next update:     Sat 13 Jun 2026 19:00:54 +0000
Files and hashes:         1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: zbPrdRGLTtI1g2UGZSlfRqlo5OZlUUAeelDS/dWBlAE=)
                          2: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (hash: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk=)
                          3: kMBoN8BIPVWo7lqtxGHBrurWvHw.roa (hash: i1cQsNkY+Ek8/EIGbv2ilZlKDr5/h3NWpJx8CDdeQnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:35:6a:05:32:c3:1c:73:02:43:4c:18:85:a0:b4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
        Validity
            Not Before: Jun 12 19:00:54 2026 GMT
            Not After : Jun 13 19:00:54 2026 GMT
        Subject: CN=cf925f694aa37bd2575c37ff6a3cf3efd3adc1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:0c:3b:07:00:71:27:17:91:5b:e8:57:86:
                    e7:99:bf:74:6d:7b:29:7b:1e:43:46:3f:8d:59:e2:
                    f2:b4:8b:ec:b1:64:73:79:ff:0c:59:1f:ae:d7:b5:
                    64:0b:c0:4b:ba:4c:09:98:13:1c:e2:43:5a:ba:45:
                    0d:0b:86:27:3e:bd:64:d7:85:60:ab:b4:ab:65:e2:
                    01:7b:16:4f:9b:da:69:5d:c1:dc:26:f5:ce:7d:f8:
                    c2:b9:0c:0a:14:e3:5a:69:41:f4:d4:9f:74:f4:04:
                    40:76:7d:08:2f:1a:40:ad:d9:f6:13:02:8a:b8:a2:
                    78:91:71:c3:01:0c:6d:f3:cd:9f:0b:0b:64:e9:8f:
                    93:76:4c:0f:0d:61:31:1d:f8:c8:9e:39:b5:95:6a:
                    38:39:f3:7f:6f:b2:62:2a:ca:50:15:18:b9:92:8b:
                    c4:a4:f7:da:93:77:39:12:0f:59:9c:e1:c7:6d:dd:
                    9e:cf:b8:d2:1f:6e:59:a1:03:aa:ca:d2:99:ba:8d:
                    2f:6b:68:c9:94:bb:c2:55:06:f3:3f:bd:94:88:cf:
                    af:ba:65:34:e1:70:17:eb:59:8f:25:e7:3d:8d:7d:
                    44:93:8a:47:27:96:a7:5b:07:6a:c5:3d:54:cf:7e:
                    33:4f:f5:73:a0:b6:75:8d:89:64:aa:6e:53:67:26:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:92:5F:69:4A:A3:7B:D2:57:5C:37:FF:6A:3C:F3:EF:D3:AD:C1:AE
            X509v3 Authority Key Identifier:
                keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4b:a9:7e:e1:fc:0d:4c:40:71:af:57:43:86:ad:57:2c:82:
         80:29:6c:15:65:a0:05:e6:81:6c:12:07:9d:21:70:08:de:ec:
         72:01:96:d4:83:d8:1f:d1:cb:56:2b:51:bc:f0:dd:7b:6b:bf:
         32:e1:10:7b:a6:8c:75:20:50:f8:2d:c1:8a:7e:1a:fd:da:bb:
         bb:7c:84:c5:e8:7f:af:ae:39:f4:14:d7:74:a0:0c:bd:73:ea:
         16:3c:a8:c9:21:1c:35:79:63:c1:f1:3f:9b:40:eb:2d:bd:25:
         47:4a:aa:ad:9e:89:02:90:3d:f5:ab:e7:8a:32:8a:84:78:0c:
         ac:76:bd:09:5f:1f:b6:6c:11:68:68:8a:6a:30:eb:30:16:d6:
         e0:2f:48:f2:7c:97:ea:b4:27:76:a3:59:4d:27:31:4a:43:76:
         21:ba:a7:3c:84:b4:0e:4d:f6:6b:ec:c8:cd:24:89:09:e6:99:
         9a:6a:08:e9:de:57:1d:6a:e8:64:4a:e7:a7:5b:f7:17:fa:d9:
         3f:91:e2:a5:b9:d8:9c:40:a1:22:00:47:3c:18:73:a0:83:70:
         af:4f:d9:76:b6:9a:f9:2d:ae:1c:c5:8f:fb:b5:77:ae:74:78:
         1d:10:0a:03:6e:f1:0d:f6:a4:65:13:33:67:c1:05:1e:e4:e9:
         13:cd:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:55 2026 by rpki-client