Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File:                     28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier:          J5kCRxhEntOKHmyMKEkkJGAXCY1ZOy1PWrynCHoVaYc=
Subject key identifier:   D1:EF:D5:1B:1E:50:EA:59:E9:37:02:52:72:1D:60:AC:22:BD:8E:3D
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer:       /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial:       019EBE4792427595DC591426D5AD4C90B0CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 00:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:21 +0000
Files and hashes:         1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: GI9lYDyhVJjsaM8cH5TXAXtD3C5IpcUvMpUwjnsOJjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:92:42:75:95:dc:59:14:26:d5:ad:4c:90:b0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
        Validity
            Not Before: Jun 13 00:00:21 2026 GMT
            Not After : Jun 14 00:00:21 2026 GMT
        Subject: CN=d1efd51b1e50ea59e9370252721d60ac22bd8e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:99:66:63:08:1f:bc:20:46:df:c4:c1:e5:
                    d8:5e:4e:48:4f:d9:90:18:2f:4c:99:cf:fd:d4:7b:
                    f7:46:99:46:76:b0:c3:49:bc:09:f7:74:b2:e6:39:
                    0d:67:31:61:37:a4:5d:d4:b0:d6:55:7a:07:46:41:
                    2b:08:4e:1b:1a:e5:28:d2:09:73:49:bd:fb:1b:51:
                    c6:53:a7:95:07:51:18:cf:cb:29:a2:eb:57:b1:d7:
                    2a:f3:a1:49:11:05:0f:e5:4b:37:fd:c1:cb:af:c2:
                    b4:9a:18:5a:e4:11:7d:f3:e8:7e:dc:66:a6:89:a9:
                    a6:b6:af:ed:bc:2d:17:4b:ac:5c:cf:97:ab:e6:ea:
                    b7:39:f2:66:35:57:14:e0:e3:02:a8:b6:8e:3c:5d:
                    5f:f1:79:5c:77:89:07:76:51:c8:bd:eb:f2:63:19:
                    61:26:3a:a8:21:5a:04:99:e9:0e:7e:19:01:70:55:
                    c4:22:73:4e:d7:6b:62:c4:fd:b9:14:48:1c:7b:4c:
                    79:5d:57:4d:db:15:66:e7:66:78:a5:fc:de:0c:b2:
                    9d:a4:5a:d4:ea:96:e1:92:10:d9:76:21:d4:54:12:
                    78:de:7c:1a:09:b2:dc:be:c1:33:95:8a:f5:48:f7:
                    e2:75:0f:f6:9a:28:de:7e:4d:a2:b9:69:93:92:4b:
                    50:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EF:D5:1B:1E:50:EA:59:E9:37:02:52:72:1D:60:AC:22:BD:8E:3D
            X509v3 Authority Key Identifier:
                keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:46:59:ad:d8:52:ac:55:6e:78:e6:3b:c6:94:9e:c2:55:f1:
         f0:8e:5f:a4:df:94:2c:b0:55:d3:98:8c:22:01:92:3c:2a:3d:
         85:b7:41:cf:7b:26:6f:ba:78:8d:b9:19:e7:e7:60:17:8f:a5:
         41:10:b6:9b:f8:04:85:af:3e:46:e9:af:e6:df:23:f1:af:bf:
         e6:a3:bf:41:69:79:67:0b:d2:71:23:56:67:40:f7:4c:f7:c2:
         de:f0:9c:da:c1:bb:0f:4e:ef:f3:dd:b7:f9:42:e9:c1:35:82:
         33:bd:c6:8e:10:db:c4:d2:c9:8b:38:fe:57:ea:65:66:fc:56:
         4f:8f:68:b2:44:75:93:65:e1:ae:7a:87:0e:98:1b:0b:86:78:
         eb:a5:da:65:95:8f:d8:35:6b:86:3f:11:6a:84:48:24:0c:21:
         9d:19:f0:b4:bc:80:79:ea:99:09:b3:02:fb:83:71:8e:f9:34:
         13:6a:c1:51:e5:18:8d:bd:ef:d8:e4:bc:00:4c:31:de:02:f6:
         35:5d:0e:94:a7:38:26:cc:ec:7a:11:f3:e7:74:12:66:ad:fc:
         a7:e9:4f:a0:41:4d:10:87:5f:ae:03:28:e2:f0:e4:df:80:60:
         b5:45:f9:5c:0c:31:cd:50:2f:7c:fe:25:37:d7:f9:41:a8:1a:
         06:60:27:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:36 2026 by rpki-client