Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
File:                     rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft (raw, json)
Hash identifier:          GVGIg0i5hWgHVjz291FvMxud+xmyma618c0yWOz+3S4=
Subject key identifier:   3E:AD:05:8A:DB:4A:82:11:78:00:5F:81:C6:7D:46:13:DF:69:79:DF
Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
Certificate issuer:       /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Certificate serial:       019EDCC0766E340EBA4F5DC94552D4D77398
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
Manifest number:          0312
Signing time:             Thu 18 Jun 2026 22:01:01 +0000
Manifest this update:     Thu 18 Jun 2026 22:01:01 +0000
Manifest next update:     Fri 19 Jun 2026 22:01:01 +0000
Files and hashes:         1: 69NtXxeSLWDXdtXT_AfelypQXB8.roa (hash: 9gKtg7KDzyNzZzLU7I/BaczkZvgxDpjrp3J+QzLnL1Q=)
                          2: PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa (hash: /lazpWv9V1FL2+iyQutogNw6pk8iaaxkITCs/3RcC10=)
                          3: rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl (hash: 4B+afMjLgBUo4BX4nPIPVi+4JNQOF0ghFR1jSqYMN0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:c0:76:6e:34:0e:ba:4f:5d:c9:45:52:d4:d7:73:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
        Validity
            Not Before: Jun 18 22:01:01 2026 GMT
            Not After : Jun 19 22:01:01 2026 GMT
        Subject: CN=3ead058adb4a821178005f81c67d4613df6979df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:62:79:c6:04:47:d7:9b:42:84:b6:41:1d:
                    42:68:30:d5:44:d2:b6:1c:92:d5:08:1c:c8:ea:4b:
                    0a:1c:a2:46:38:19:e6:d9:8a:bd:5e:e3:c7:a1:55:
                    0d:fb:ac:85:cd:9c:01:0c:03:f7:d2:0d:e5:d7:6e:
                    ab:fb:d2:3b:d2:a9:96:a3:7b:0c:46:1e:e9:ea:92:
                    e8:6c:cb:7d:10:43:d2:c6:ef:fe:c6:17:20:32:64:
                    b2:9e:25:f8:f4:66:09:a9:16:2b:2e:5d:e5:9d:f9:
                    8d:9e:71:35:9b:ef:31:07:ed:4c:f0:a8:21:f1:ae:
                    40:c6:20:d0:a2:26:c9:21:21:bb:f8:4e:06:20:f1:
                    59:cc:74:c1:dc:95:49:0e:c9:cc:0b:08:5b:c7:af:
                    19:60:2b:27:12:a4:7d:3c:a1:67:3f:65:9b:2b:b6:
                    35:61:92:4f:59:9a:92:0d:15:d4:bf:b4:7f:ce:e7:
                    16:01:37:64:e4:7c:56:36:7a:38:31:6d:c1:ca:01:
                    ab:f0:d8:19:12:c8:76:e5:4a:31:27:b3:e3:4f:2b:
                    b1:a8:e1:96:5f:46:98:2c:c5:c9:51:ed:03:3d:57:
                    05:50:99:0c:ad:7b:8d:bc:ce:86:c4:29:c3:fe:f2:
                    74:a3:06:9f:82:e4:ad:e7:11:48:31:d6:af:de:6d:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AD:05:8A:DB:4A:82:11:78:00:5F:81:C6:7D:46:13:DF:69:79:DF
            X509v3 Authority Key Identifier:
                keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:dc:58:00:12:06:35:4f:d1:72:38:f6:b1:47:7c:44:54:91:
         e7:c7:91:d4:60:1d:55:76:ba:7d:45:7d:28:57:3a:89:2e:68:
         02:34:c4:3d:d2:29:63:35:36:f8:3e:4c:3c:51:99:a0:1c:ed:
         8e:7c:b9:96:0b:3c:7b:cc:ac:68:5d:3e:6d:79:b0:2e:8d:b5:
         59:83:e6:bb:ff:47:82:a3:3a:0f:de:3e:5a:c6:7d:ad:a0:65:
         b3:b2:45:65:58:97:4c:01:2a:1d:57:f5:9c:c8:eb:ae:ee:2c:
         79:66:62:a8:d2:aa:11:90:58:a7:94:96:ec:17:15:17:c4:55:
         1c:f9:93:d9:b8:46:29:a6:ea:30:6d:92:7a:cc:85:93:43:04:
         b2:90:95:4b:e7:b1:23:e6:74:36:45:e8:1b:03:4e:21:fd:56:
         28:77:ef:5a:b1:60:0f:66:77:d4:f5:f3:88:74:87:a9:e9:ab:
         91:65:5d:a7:4a:01:53:77:6c:b5:07:ad:68:ec:a0:4b:3d:ad:
         ba:af:fc:9b:53:82:46:1e:6d:59:c9:c0:4b:23:c6:ee:b9:2b:
         26:2c:2c:ef:b2:cc:bb:59:dd:0c:76:fd:35:27:0b:b1:32:6d:
         64:20:45:d7:c7:39:12:15:ac:e8:ec:61:59:de:35:56:26:f1:
         d7:ea:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:23:07 2026 by rpki-client