Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
File:                     4qEN5v-uWQQnJEoDND22asVkJ1o.mft (raw, json)
Hash identifier:          BCBjrNmmJbPOZZ9K4GZTPMe/1AbZO0LRNvDjEdBbWws=
Subject key identifier:   9E:97:37:CA:AC:04:43:4C:AF:E6:DB:35:AF:68:98:6F:6C:C6:B4:6F
Authority key identifier: E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
Certificate issuer:       /CN=e2a10de6ffae590427244a03343db66ac564275a
Certificate serial:       019EC22443909DB4D4BB12E8A0C386251E1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
Manifest number:          16A3
Signing time:             Sat 13 Jun 2026 18:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:16 +0000
Files and hashes:         1: 0gIiALe6pz1IQicIRlap9JpEjvk.roa (hash: a8WIdauJpV7mniv+m0G3DWtScZS35ac1cb7lSAK0pD4=)
                          2: 4qEN5v-uWQQnJEoDND22asVkJ1o.crl (hash: Wx1TVDWr+E+Frr231PB0rUtHcK6C6tdyBJtYrbC+pwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:43:90:9d:b4:d4:bb:12:e8:a0:c3:86:25:1e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a10de6ffae590427244a03343db66ac564275a
        Validity
            Not Before: Jun 13 18:00:16 2026 GMT
            Not After : Jun 14 18:00:16 2026 GMT
        Subject: CN=9e9737caac04434cafe6db35af68986f6cc6b46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:36:b1:c9:95:7d:90:0f:7e:38:6b:98:2d:fc:
                    3a:99:f4:de:c7:2a:74:59:65:f9:0f:46:da:62:10:
                    05:e1:97:d7:7f:67:ae:06:1f:38:82:bf:cd:ae:af:
                    eb:92:18:bf:fa:5c:03:e4:d8:e9:4f:e1:de:98:42:
                    03:26:eb:65:c4:aa:87:3a:c2:d9:9d:1a:48:ee:96:
                    fe:45:7b:69:b5:6d:be:33:46:85:21:7c:87:b2:e1:
                    01:0b:05:2e:5f:6f:45:74:bf:fb:c4:62:77:33:a9:
                    e6:d5:fc:e7:0d:f0:72:84:0c:ba:98:75:f7:e0:70:
                    b9:05:0a:18:e7:5d:ff:08:2a:16:f5:d4:e3:f7:6a:
                    32:89:b3:6e:33:f7:6f:77:ef:83:10:d7:04:60:38:
                    9f:52:29:b4:81:77:7d:95:47:54:01:41:50:13:27:
                    28:28:a8:8a:82:d5:89:d7:43:9e:e1:82:89:c3:c4:
                    d4:34:b5:77:58:3e:95:4c:85:42:0c:48:01:ca:98:
                    53:60:62:b9:3b:0c:ae:28:dc:9d:55:38:d5:71:17:
                    4d:35:d5:43:8d:ca:ba:95:f6:78:48:61:a0:3b:a4:
                    b6:3b:7d:21:e5:bd:85:0a:b0:eb:d6:d8:77:45:cf:
                    dc:4e:2b:34:c1:5b:1a:47:c7:57:0a:b7:bf:06:59:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:97:37:CA:AC:04:43:4C:AF:E6:DB:35:AF:68:98:6F:6C:C6:B4:6F
            X509v3 Authority Key Identifier:
                keyid:E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:28:4a:55:e3:61:97:18:b3:36:9a:ee:fc:12:49:9b:42:3b:
         7c:5d:3a:2c:cf:56:dd:ff:c1:66:fe:25:ec:0e:b3:25:60:1b:
         e2:b0:68:3a:f1:cf:13:e1:4f:bc:24:7f:e5:8e:63:60:f2:71:
         54:39:87:79:1e:a3:8d:99:b2:02:e5:d3:d1:a2:b2:64:08:68:
         d3:67:ac:b2:66:96:f5:d7:7d:86:54:ea:27:90:ab:3a:9d:95:
         0f:8c:24:fa:73:52:10:a8:d5:ae:ee:66:08:e6:8c:f7:60:57:
         df:90:8b:e0:94:86:44:bb:6a:f7:c1:66:89:b8:74:2a:b3:69:
         29:46:7c:b4:a7:62:40:69:78:64:9d:94:d0:5c:2e:ce:9f:2c:
         dd:16:d0:fe:f1:54:79:39:f0:f5:12:a7:f9:fc:0e:bd:6d:95:
         ad:e8:98:0e:86:6b:cb:67:0b:db:44:69:0b:e1:17:86:87:57:
         b8:34:c0:c7:6f:d1:83:88:48:c9:23:b8:29:ba:6d:90:f6:bc:
         50:f7:5e:e4:d8:42:f6:64:53:ff:98:d5:4e:10:c0:9f:bd:17:
         93:78:8b:ce:80:9b:10:84:e2:20:e1:37:4b:48:81:a7:28:5f:
         49:ea:52:17:57:0b:c4:ff:1d:a8:7a:0c:b1:46:94:fd:0a:e4:
         10:72:9c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:57:31 2026 by rpki-client