Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
File:                     1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json)
Hash identifier:          elQ2qzwPG3v5yEfbtpHCnzjnx14VqnTdsjmy8veBeCI=
Subject key identifier:   4C:18:1E:3E:B7:85:59:D3:7B:C2:4A:BB:88:75:A7:9D:68:05:2F:7F
Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
Certificate issuer:       /CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Certificate serial:       019EBEEC60CF46D8626550F88479431D3111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
Manifest number:          12D5
Signing time:             Sat 13 Jun 2026 03:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:22 +0000
Files and hashes:         1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: MuTgfsQuxiWgtY39CzvD7OAsnOfQoCRsbAhXLvylx7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:60:cf:46:d8:62:65:50:f8:84:79:43:1d:31:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca
        Validity
            Not Before: Jun 13 03:00:22 2026 GMT
            Not After : Jun 14 03:00:22 2026 GMT
        Subject: CN=4c181e3eb78559d37bc24abb8875a79d68052f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:20:2a:44:d4:30:56:d2:61:06:f5:70:80:
                    ca:1b:56:b9:a3:85:14:6f:f3:86:af:bd:2f:0b:3b:
                    63:97:c3:02:62:60:75:a9:e1:c7:dc:ad:f0:bf:9c:
                    d3:e9:70:14:36:b4:2e:9c:fc:96:22:ff:35:71:e4:
                    6b:c9:d6:05:90:ba:60:f9:a9:82:5d:35:be:09:1f:
                    6b:ed:05:0a:0b:63:0a:d9:6a:2e:4e:2b:f9:c7:ec:
                    f2:7e:ea:dc:34:5c:14:6c:df:bb:52:bd:3c:81:19:
                    46:92:94:3d:ae:02:e1:2d:a3:64:5e:d8:f3:c7:d6:
                    de:52:95:ad:72:1f:d4:ba:bb:ec:7d:c4:4e:7e:05:
                    04:48:ec:4e:25:0d:2b:7b:e4:68:37:54:58:06:b4:
                    76:f4:ee:ec:ec:c7:b6:b1:ae:d1:58:aa:06:74:b1:
                    f5:1c:8b:d4:7e:40:34:d3:a5:10:40:be:8a:5d:0d:
                    ab:93:48:a4:11:08:88:33:d5:16:aa:e2:48:4a:38:
                    96:fb:8f:26:26:70:ca:00:8e:dd:15:ed:ce:46:89:
                    c1:46:e6:2e:ea:3c:e9:94:65:04:2e:df:f8:4a:b4:
                    23:f2:d2:a2:0f:25:da:8d:55:a0:5f:52:4c:d5:77:
                    48:b0:74:3b:b6:da:b6:66:a6:62:22:3d:99:d6:97:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:18:1E:3E:B7:85:59:D3:7B:C2:4A:BB:88:75:A7:9D:68:05:2F:7F
            X509v3 Authority Key Identifier:
                keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:5c:3f:5e:6d:43:e0:76:8c:81:d9:60:11:34:20:ce:e9:1c:
         61:15:98:10:16:6d:e0:c7:04:86:cc:f6:9a:32:dd:26:f9:b8:
         bd:d5:cf:46:0b:22:a3:a6:48:b3:f0:5a:d4:bd:33:a1:12:5d:
         06:20:0b:49:aa:8d:0a:24:2f:cd:63:0d:f6:4f:0f:ad:81:9f:
         71:fc:c9:40:2d:4e:39:6f:4a:fe:59:78:d9:92:94:e2:34:40:
         39:89:9f:f7:6a:67:78:ec:17:1c:81:b9:9f:b8:05:2f:fd:97:
         19:1d:1e:8a:ee:c2:15:7a:76:13:ce:c1:17:19:df:1c:64:f6:
         6b:ad:e3:01:9f:66:d3:e8:ec:a3:6e:39:4e:fb:18:5f:fd:7c:
         0b:d2:be:b4:f8:14:3e:6e:8c:f6:d3:08:b8:c6:e1:98:70:10:
         0c:4a:0e:74:c8:51:a5:68:07:82:52:eb:22:08:0b:a4:ca:2c:
         92:04:e0:fa:26:48:3d:d1:e8:1c:05:36:16:bd:0e:97:78:59:
         ab:7f:b3:ed:a7:eb:eb:dc:34:2c:3a:bb:ac:7a:c7:72:5e:79:
         d8:38:16:2c:49:3b:c6:8a:a3:5a:ae:9c:24:9a:ee:d6:f8:cb:
         5c:de:b2:81:b6:7a:6c:27:f1:17:0e:92:89:6d:17:d4:f9:fd:
         db:56:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:49 2026 by rpki-client