Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
File:                     04G3AXBRkLnOnRsYRTU4TnHKMWU.mft (raw, json)
Hash identifier:          lrOtOQ1zz5QnJh6cOF7WJmYLKy/zxVX3rrsmtZ4MMS8=
Subject key identifier:   FC:BA:22:D3:7B:5C:DA:8F:ED:75:DC:F5:BA:22:B4:3D:7E:DA:27:C7
Authority key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Certificate issuer:       /CN=d381b701705190b9ce9d1b184535384e71ca3165
Certificate serial:       019EBE7F218769EF87EBA28D0DC9166F5BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 01:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:03 +0000
Files and hashes:         1: 04G3AXBRkLnOnRsYRTU4TnHKMWU.crl (hash: 0+8V1qDnKo+OVO2UImhIiHJaOCVYo2q/nWccTXUvcUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:21:87:69:ef:87:eb:a2:8d:0d:c9:16:6f:5b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d381b701705190b9ce9d1b184535384e71ca3165
        Validity
            Not Before: Jun 13 01:01:03 2026 GMT
            Not After : Jun 14 01:01:03 2026 GMT
        Subject: CN=fcba22d37b5cda8fed75dcf5ba22b43d7eda27c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:f5:86:0b:84:a7:ad:a8:6b:b2:a6:f4:ef:
                    27:2e:ce:ea:56:79:b2:28:c1:57:ee:62:d6:0d:b9:
                    45:89:f6:ae:00:c3:12:ef:5b:30:c4:f0:9d:9c:f9:
                    8f:d1:47:5d:1d:fe:4a:69:17:c3:cf:0f:d0:c2:13:
                    84:0f:42:bc:d5:59:b0:e4:62:97:a5:11:74:c9:f0:
                    3c:d5:45:73:45:bd:7b:e3:3e:04:e0:e5:a5:76:9f:
                    3e:56:3e:3a:b7:6d:b9:68:94:a8:43:86:66:f0:1e:
                    16:63:a4:9d:00:b1:b2:1e:1a:5a:b8:0f:83:f4:77:
                    1f:35:e9:2c:45:42:b2:9d:8a:34:ce:cb:0a:0e:b2:
                    e0:0e:5b:0c:59:36:c0:b6:e1:b8:67:be:d7:5e:80:
                    3b:dc:a7:87:0f:19:7f:8d:c9:bb:84:e0:e2:5e:5c:
                    3b:f9:ce:31:d9:d7:92:d1:0d:bb:7b:19:77:bc:f9:
                    c8:f4:4a:38:c1:5e:ed:1e:a9:68:ec:34:41:cc:ff:
                    ab:70:6b:11:35:69:b9:08:56:43:2f:f0:c1:3b:21:
                    e6:1f:bb:ad:b7:b7:a2:23:67:16:aa:d5:3d:63:2c:
                    bd:39:55:21:ae:8e:a5:a7:e9:38:b6:b7:e6:76:b4:
                    5d:35:cb:a6:a4:ee:2d:18:bf:9c:b5:f0:d0:3d:23:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BA:22:D3:7B:5C:DA:8F:ED:75:DC:F5:BA:22:B4:3D:7E:DA:27:C7
            X509v3 Authority Key Identifier:
                keyid:D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:8b:63:40:ab:47:00:8d:94:a8:d9:36:82:7b:0a:3f:ed:9c:
         d6:d5:9a:26:02:af:14:e4:4a:4e:78:a4:03:f4:6a:ee:0c:05:
         c8:b2:88:1f:e7:7c:a0:db:25:b5:2c:ee:1a:32:70:07:7f:27:
         db:d9:1e:cf:71:06:f8:fb:17:dd:79:e7:65:b8:b2:ef:ae:b2:
         38:0d:41:48:66:42:fc:38:a0:23:52:4a:ac:98:d9:44:b1:b1:
         28:0c:60:4c:6a:37:3f:c3:fd:2a:31:24:7a:71:e7:6b:06:ee:
         99:a8:62:89:9a:63:b9:31:f4:d9:11:10:48:f1:05:53:3d:7e:
         b1:0e:35:5d:ff:70:b6:3e:16:1c:9b:8f:6d:32:81:97:56:bc:
         82:0c:92:26:99:3c:f0:4f:b9:96:97:c8:12:5c:96:1b:41:f9:
         5c:50:6b:f6:77:a4:4d:81:76:29:fa:19:71:35:e4:5e:35:25:
         1a:a0:05:1f:ac:96:5e:c5:d2:9f:62:c2:5b:92:9d:78:ce:62:
         1f:ee:b6:2c:b8:2b:26:e7:0b:68:70:ef:08:7e:a0:5a:a4:43:
         17:fd:19:e3:0e:a9:d0:88:b1:21:75:e6:2d:7e:54:83:ba:42:
         f7:83:47:c9:32:6b:d1:21:d7:80:ee:9b:bc:49:9e:d3:39:3d:
         16:85:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:22 2026 by rpki-client