Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File:                     noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier:          lNVFNUgyLJ5KOzehNyvxhByhkd2jrFhR7CYRIATEarA=
Subject key identifier:   1F:63:35:D8:58:30:7C:7C:9B:83:B6:D8:79:BB:EB:E0:E7:F4:08:C8
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer:       /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial:       019EC148E77E16E0E34FB659CCBEFECFE381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number:          1006
Signing time:             Sat 13 Jun 2026 14:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:40 +0000
Files and hashes:         1: WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa (hash: 5/0dAfxj8roSB2N+rzuNs50RghH7Q+7eLmnDrf3ejec=)
                          2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: +0hkX4BF1MV9KPy7SvnI1/POCU6YlxNRPdSj8RdZGgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:e7:7e:16:e0:e3:4f:b6:59:cc:be:fe:cf:e3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
        Validity
            Not Before: Jun 13 14:00:40 2026 GMT
            Not After : Jun 14 14:00:40 2026 GMT
        Subject: CN=1f6335d858307c7c9b83b6d879bbebe0e7f408c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c6:64:c2:72:7f:9f:6c:d1:3d:07:80:a3:b1:
                    c2:dd:e0:ac:c0:aa:ed:4a:52:f1:73:9d:8d:8b:d1:
                    8d:59:76:8a:be:f0:d2:4e:f8:35:6b:01:d0:f8:27:
                    5a:78:a8:bd:16:20:8e:cd:51:26:9d:55:0a:d7:83:
                    34:06:35:fe:a2:c8:9e:bb:92:90:fc:68:53:0d:7c:
                    76:24:0b:41:f8:3d:cc:b3:c2:bd:bb:4b:61:49:ad:
                    f6:e7:54:7c:dc:06:f4:9d:72:3d:9d:04:f2:b2:b9:
                    ee:74:1b:c3:1a:37:f4:a6:d1:13:95:a5:2e:23:ce:
                    dc:82:dc:4d:bc:29:db:bc:47:af:77:04:2a:6b:0e:
                    ed:49:49:a4:6e:6b:f4:1e:46:fe:a7:83:4b:0b:42:
                    60:ed:64:21:d4:8c:97:77:ff:51:8a:64:78:24:48:
                    e1:8a:e0:01:7b:de:47:d4:f5:83:35:67:2e:f2:c7:
                    7e:1a:97:d8:d7:55:13:54:87:1c:0b:27:f8:21:8e:
                    12:b7:01:ec:d9:87:c1:33:52:6c:30:08:e5:98:d9:
                    d6:3a:64:41:f9:34:fd:73:e1:17:25:56:d5:7b:1b:
                    f1:57:25:5f:57:fe:a5:62:cd:1c:ab:27:e4:93:23:
                    ae:3b:96:92:2f:70:04:5f:b7:7d:d6:51:c3:bd:aa:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:63:35:D8:58:30:7C:7C:9B:83:B6:D8:79:BB:EB:E0:E7:F4:08:C8
            X509v3 Authority Key Identifier:
                keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:21:cb:d6:9f:ad:4e:5f:e6:51:35:e1:0e:e5:15:67:44:91:
         3d:69:be:c2:dd:2e:53:e9:f4:62:1a:41:f0:a8:f8:2c:3c:02:
         04:35:d9:02:af:28:77:e5:55:59:cb:17:3e:2d:2f:bc:41:15:
         cd:2d:d8:7e:3f:c1:da:24:3f:7c:c4:76:f4:68:48:53:a6:b7:
         f4:7b:05:89:0d:21:aa:ca:ea:de:52:10:a6:0e:75:0c:f0:57:
         f1:c7:92:46:58:e2:ad:f2:fb:8a:8b:26:8f:42:6f:4b:36:e6:
         9a:ef:5c:a1:de:57:d5:ee:c1:a8:00:12:a0:91:d5:bc:ec:d1:
         94:15:70:63:4a:42:f7:5e:a8:2f:e2:e4:f1:3d:1d:09:fc:31:
         46:d3:95:10:66:dd:d0:42:4d:60:13:e5:53:c1:13:8f:40:6a:
         9d:69:ce:fa:71:59:e8:5f:24:37:f2:ee:51:b2:6e:cf:49:b1:
         b1:cd:d6:66:c4:57:6d:87:22:7e:e6:d9:23:af:33:8c:41:78:
         61:a1:91:05:ee:ff:50:eb:07:8e:94:fa:5a:d4:fc:d1:e2:f6:
         a0:11:0d:7c:a5:3e:da:cb:f8:ae:ff:e7:5d:f6:c2:e8:c9:d1:
         14:24:ce:d6:58:a7:e7:85:07:66:13:7f:34:ae:49:bc:13:12:
         3e:51:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:29:04 2026 by rpki-client