Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File:                     1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier:          HfP+lfge/KZEpACVongzlVw5eRITpsbtxFNHL9Ekyeo=
Subject key identifier:   72:4C:83:E8:1A:57:83:36:7C:42:06:22:21:C0:EB:94:0D:24:CE:AF
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer:       /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial:       019EC0A463877AD44A5B75930EB105929184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number:          17CC
Signing time:             Sat 13 Jun 2026 11:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:59 +0000
Files and hashes:         1: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: UVrXFf6r8tTALzRP/unbOp3PwaC/XhIG9vUq2M1PEsI=)
                          2: GllxanRi9edQc4SoJ1p-sRQjjuU.roa (hash: Om+DeQOxMRS5RnhUZBxqORnDtsjXB3ZQzZG6mlBEotI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:63:87:7a:d4:4a:5b:75:93:0e:b1:05:92:91:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
        Validity
            Not Before: Jun 13 11:00:59 2026 GMT
            Not After : Jun 14 11:00:59 2026 GMT
        Subject: CN=724c83e81a5783367c42062221c0eb940d24ceaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:f0:bd:bc:f1:c3:56:03:ab:11:84:34:27:
                    50:e0:3a:bd:a7:5b:81:70:df:db:21:79:21:c5:3f:
                    9e:bf:66:60:a1:87:85:b2:e4:d3:c3:4c:c5:dc:57:
                    05:5a:04:ba:7b:bf:93:8e:bf:ba:03:33:57:be:27:
                    3b:11:dc:bd:f8:dd:39:4f:a5:9e:2b:28:05:44:21:
                    b3:fb:1a:66:c1:28:28:d9:3b:9c:2a:fe:64:d4:96:
                    cc:2d:6c:fc:e9:8e:94:9b:9b:12:c9:49:af:14:2f:
                    5c:4e:2b:f1:83:a1:10:3a:8c:40:21:0d:9b:52:34:
                    50:08:8c:1f:25:7e:d3:57:31:3e:a4:64:cb:40:3e:
                    32:5f:33:d1:0e:66:b4:a9:2f:b8:15:af:13:92:59:
                    c9:bd:02:7f:e9:03:89:9d:c8:9c:e5:6c:cf:02:81:
                    98:5e:38:76:7e:b4:a0:67:a0:71:b6:a2:d4:cf:aa:
                    31:fe:31:27:47:ca:6f:9f:86:a8:7d:6c:91:53:f1:
                    fa:41:fa:9f:0b:e2:96:7c:da:50:27:5c:2b:3d:de:
                    27:76:e7:6a:6a:ab:ce:ad:b3:88:24:47:0b:5e:3f:
                    ed:ce:5a:43:49:33:c6:28:fd:85:9b:5e:08:fc:09:
                    27:59:1b:a3:32:8a:cf:71:1f:38:f5:7f:22:d9:c5:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4C:83:E8:1A:57:83:36:7C:42:06:22:21:C0:EB:94:0D:24:CE:AF
            X509v3 Authority Key Identifier:
                keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:67:88:29:f9:4a:91:84:62:55:6b:7f:47:88:88:a5:c1:25:
         60:fd:00:3b:16:91:7f:e0:d6:e8:5a:1e:e9:fc:a6:23:59:91:
         39:e6:38:bd:5a:2c:ad:bd:81:a6:7b:c0:81:08:be:77:31:82:
         b7:84:83:ee:bd:f2:82:89:3c:a3:2a:6e:9e:dc:30:88:41:3b:
         2c:18:ba:14:b6:ec:be:d2:82:52:fe:0e:c3:49:15:43:b8:37:
         7c:d0:16:87:60:44:a8:8b:f3:d7:8f:50:8d:68:61:5c:15:e4:
         5a:56:d8:80:9b:48:48:1a:94:43:0a:87:73:13:5a:df:f6:52:
         13:de:b8:ae:e3:2c:22:60:0f:27:dc:4e:be:b2:29:1b:12:71:
         a4:f5:65:32:06:b1:00:c4:3c:96:85:27:d2:7b:f5:42:fc:4c:
         db:9c:d5:95:f7:0a:09:84:46:c8:45:c7:ea:67:4e:f6:67:a9:
         86:2b:6b:52:1b:4d:52:ea:45:53:3e:cc:9d:70:3b:14:1c:5b:
         5d:e5:a6:b5:6d:30:a5:d0:62:c4:cd:9f:e0:f8:47:33:b1:54:
         68:5e:98:95:5c:2a:b4:8a:53:1e:60:bb:a0:14:31:29:a7:47:
         07:ba:eb:ec:a9:7b:20:4c:f8:13:d9:4e:1f:a2:fa:9b:c9:b1:
         f4:16:5e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:00:23 2026 by rpki-client