Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
File:                     4TbBQNV8BgOYHZBG1McqrcZJe48.mft (raw, json)
Hash identifier:          f6x5eirYkJF+PQi/ehoe+GLyNdNHDunDiDGKMjfGVSQ=
Subject key identifier:   3C:CE:B0:C8:70:5B:79:32:32:8B:B0:03:B1:60:DE:61:A6:61:A1:AB
Authority key identifier: E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
Certificate issuer:       /CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Certificate serial:       019EC1B6E24D88906A31B3B6245AB0D7E88D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
Manifest number:          EA
Signing time:             Sat 13 Jun 2026 16:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:48 +0000
Files and hashes:         1: 4TbBQNV8BgOYHZBG1McqrcZJe48.crl (hash: KL5ZDZ6yy2TzQBpFMF4mIO9SgjX0FZdEu1vEDmF+YyY=)
                          2: flO6XJpnIFOsdZyjDNefmOQ-G_w.asa (hash: MR9nPjOlXBd3N+fXKFHrapKtNEWrnTEaOnHmqRgXcfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:e2:4d:88:90:6a:31:b3:b6:24:5a:b0:d7:e8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e136c140d57c0603981d9046d4c72aadc6497b8f
        Validity
            Not Before: Jun 13 16:00:48 2026 GMT
            Not After : Jun 14 16:00:48 2026 GMT
        Subject: CN=3cceb0c8705b7932328bb003b160de61a661a1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:c1:ce:9e:d8:0f:e6:54:58:60:cc:7a:d6:
                    2f:23:c1:e5:99:26:1e:e0:50:13:f3:c3:dc:66:35:
                    99:a4:85:55:c1:db:74:b5:12:49:6f:3d:d5:30:d4:
                    0d:26:93:c8:2e:be:de:0b:dd:f6:3e:88:b3:7f:e0:
                    fe:e0:5c:fc:78:c9:ed:45:61:6a:9e:95:1f:52:23:
                    64:3a:a6:52:29:f7:8f:03:91:a2:fd:e5:02:5c:a9:
                    d3:e3:d5:01:a7:1b:7e:b0:99:c1:8a:4c:23:9b:6f:
                    18:47:12:cc:21:91:08:a1:50:c0:ff:67:c7:57:f0:
                    97:7f:99:24:b0:ce:04:d8:03:a8:f3:8f:89:6b:8d:
                    ba:83:32:2d:8e:d1:af:0e:d9:3a:c3:95:45:59:57:
                    25:5d:bd:77:da:78:09:65:b1:6c:54:c9:fe:ca:79:
                    19:45:08:6e:65:fd:3c:79:99:4c:45:1e:9d:20:38:
                    79:6f:c3:57:ad:89:31:d3:6a:27:52:d3:6f:1c:1b:
                    b5:f1:25:df:1e:aa:28:f2:f6:9f:e9:3b:1c:bc:19:
                    be:55:0b:b8:fe:b1:87:3f:0f:18:11:2a:bd:29:5c:
                    e4:ca:1f:0e:03:f1:18:e6:cd:fa:c1:80:8a:f4:f7:
                    b6:a0:91:a2:0f:64:fb:53:47:c2:52:36:ee:8d:0b:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CE:B0:C8:70:5B:79:32:32:8B:B0:03:B1:60:DE:61:A6:61:A1:AB
            X509v3 Authority Key Identifier:
                keyid:E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:be:70:99:be:b9:46:dd:e0:37:5e:2c:a6:cc:a2:21:91:72:
         37:8f:64:6f:d0:36:2c:66:7e:85:62:35:77:68:88:b4:49:ca:
         ce:33:7c:f0:32:02:52:62:8b:ca:d3:2b:8f:e9:59:51:4e:2e:
         77:10:47:8b:02:bd:ea:0b:f6:5d:be:44:43:0d:4e:c2:52:d1:
         3b:95:c2:da:a2:9e:da:03:e8:fb:02:b1:9a:54:a8:a2:ba:35:
         36:4e:dc:2c:f9:86:75:33:ac:3c:a4:b1:0b:78:9b:f7:50:14:
         56:53:6b:71:44:90:ca:08:1c:5b:dc:37:ea:a1:97:c0:e1:7c:
         e6:72:f7:5d:f3:04:bc:35:d1:88:bc:be:81:f0:3e:17:7f:f8:
         2f:44:67:56:cc:a0:85:bd:cc:f4:e0:d6:c9:f4:73:da:4b:15:
         f3:ba:09:3d:0a:86:d8:d2:63:08:28:4e:7e:7e:ba:3e:02:c0:
         57:ad:5b:05:c4:52:c5:9e:12:49:43:90:41:59:d8:9d:3b:00:
         35:0a:c6:8a:0b:d2:c1:6d:fe:e5:67:c5:18:07:94:43:f4:2e:
         8d:5f:31:bc:bc:e5:68:0c:d5:51:08:b1:90:97:56:d5:51:35:
         fc:82:60:2a:20:da:83:72:07:e8:c1:b4:33:76:86:0a:11:22:
         23:9b:92:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:21:32 2026 by rpki-client