Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
File:                     5Neqo9JcL5677HTIMMwM3pMYyPg.mft (raw, json)
Hash identifier:          jRlkuq+da9BfEGjPp6/cinDwS7J1ql8RntqwHBeT27E=
Subject key identifier:   B2:CB:F2:86:2B:20:F7:4D:6D:9A:BB:EB:1C:41:30:FB:68:BD:2C:0A
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Certificate issuer:       /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial:       019EBEB5DB89C26BF5404A8F255E15DDE5AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
Manifest number:          088B
Signing time:             Sat 13 Jun 2026 02:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:49 +0000
Files and hashes:         1: 5Neqo9JcL5677HTIMMwM3pMYyPg.crl (hash: TETtI270NMsTqGStQPOENFa7jsX53fWUXtEXj7eQVt8=)
                          2: dfA2VO-Kxn8s5wuCFyfgyHLiuBU.roa (hash: WWmp8FZy5WZkHZy+XAkDz3z08JgrKOhbfA0wwG5V1bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:db:89:c2:6b:f5:40:4a:8f:25:5e:15:dd:e5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
        Validity
            Not Before: Jun 13 02:00:49 2026 GMT
            Not After : Jun 14 02:00:49 2026 GMT
        Subject: CN=b2cbf2862b20f74d6d9abbeb1c4130fb68bd2c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:e0:55:7d:32:9d:65:12:bf:15:01:8d:d4:
                    a2:c2:40:16:2c:45:46:cd:28:61:6a:57:72:c6:45:
                    64:26:d1:21:16:c9:d7:54:43:8a:a2:42:19:33:de:
                    8d:dd:7d:80:fc:1a:63:b2:ab:58:41:70:b2:10:87:
                    a6:5f:1a:5d:71:b5:06:d7:b2:52:85:ff:83:ee:05:
                    06:0c:aa:cf:d3:e5:eb:e6:ae:5d:77:cc:b4:e3:0e:
                    e3:79:08:85:22:4b:c8:01:0a:81:67:2d:95:1c:9d:
                    2c:d3:35:db:cc:e7:59:b1:64:59:8a:ff:91:84:69:
                    1e:4e:f3:15:3f:a8:1e:f1:94:a4:8b:f9:58:1e:aa:
                    b2:79:54:55:8a:bb:d8:7a:93:eb:96:c8:e8:e7:0b:
                    4b:8a:ab:24:80:18:19:89:6e:ef:3a:b2:b6:47:c7:
                    bc:9a:af:19:c7:97:5b:88:ef:f4:c8:9e:ed:06:b9:
                    f3:02:fb:70:be:09:85:0d:d3:9a:c6:25:4f:49:af:
                    75:d0:90:51:6f:37:50:13:7c:f9:34:25:98:de:b6:
                    9d:93:84:91:05:d0:f8:50:62:45:24:05:71:c0:7e:
                    0c:a3:1b:1b:0c:92:60:d7:4f:44:c8:c9:fa:1d:ca:
                    57:4b:00:70:21:01:4c:92:8d:43:23:18:bc:4a:c0:
                    10:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CB:F2:86:2B:20:F7:4D:6D:9A:BB:EB:1C:41:30:FB:68:BD:2C:0A
            X509v3 Authority Key Identifier:
                keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:09:10:52:d1:43:e1:a1:e2:06:22:70:bf:da:75:1e:c4:7f:
         28:77:9c:90:19:d2:53:21:34:ab:86:50:32:a2:c0:5a:73:98:
         80:0e:ef:ce:ff:9c:54:77:f4:93:f2:1f:bb:6e:aa:ab:61:cd:
         9f:2c:eb:a4:ad:21:05:02:3e:a5:7e:df:1d:c0:30:4c:a3:bc:
         9f:a0:f6:97:36:67:36:c0:2d:d5:d3:1e:08:57:a9:61:be:91:
         91:45:c2:6a:ac:34:ab:e1:54:d1:5e:d3:ca:d4:36:2e:76:fd:
         ea:46:cd:27:d2:11:8f:e3:5e:f4:ba:67:74:35:90:de:0c:59:
         17:e8:45:e6:69:92:40:46:18:39:a0:69:e5:36:51:da:cf:82:
         4d:94:d7:00:02:2b:87:e6:d4:71:3e:5b:24:88:6c:c6:99:d8:
         fc:4f:20:25:f5:40:6f:72:96:59:72:3c:29:fd:54:42:5f:73:
         13:d2:09:46:a9:73:59:3d:50:4f:6f:41:a1:b3:6c:29:7c:53:
         52:79:bd:6a:ac:15:81:6e:ae:40:b6:6b:b5:7a:27:6a:00:a5:
         f2:eb:ac:c5:e5:66:2e:c7:ef:d9:25:2b:a2:ba:a1:35:aa:da:
         fc:0c:fe:38:e7:fb:95:17:90:4a:a1:27:6a:d0:29:a1:27:7c:
         8a:da:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:35 2026 by rpki-client