Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
File:                     ESunl1d-pgpWGvmkWYxFBg47cIg.mft (raw, json)
Hash identifier:          LInZDOJF/qEY46MOQ4ArA9WPpfP0fWKg58nu2Vd7AY8=
Subject key identifier:   34:E9:FA:EF:FB:8A:64:61:8C:5D:C5:87:C9:0C:A9:80:D4:8C:69:44
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Certificate issuer:       /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial:       019EBF5AA3CB69D769AD0989D89EC92848E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
Manifest number:          1962
Signing time:             Sat 13 Jun 2026 05:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:48 +0000
Files and hashes:         1: ESunl1d-pgpWGvmkWYxFBg47cIg.crl (hash: VY6TLQd04M0TGmJUfE6a7/xzvlOUtYZUGxCNZbyo7Rw=)
                          2: bMsWuNjJeP6phBVhg103vHZmDa0.roa (hash: s0x48DlOykKpKhvQQl3SddYhoNO1CHyfuX31p3oQ2Xc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:a3:cb:69:d7:69:ad:09:89:d8:9e:c9:28:48:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
        Validity
            Not Before: Jun 13 05:00:48 2026 GMT
            Not After : Jun 14 05:00:48 2026 GMT
        Subject: CN=34e9faeffb8a64618c5dc587c90ca980d48c6944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:e8:a2:a9:a3:ea:7c:91:fe:59:b2:4b:c3:
                    00:ae:e8:17:b8:1d:2f:d1:e1:9c:0c:ac:d3:af:e0:
                    a3:db:f2:4d:af:11:ae:71:a2:5e:1d:c2:c8:7f:22:
                    6c:6d:50:1c:43:de:a0:b1:76:31:00:70:c2:63:39:
                    b9:a9:66:55:11:fa:ae:17:bd:d4:a9:69:14:aa:1a:
                    a2:94:62:96:27:a7:fb:f2:8c:b2:86:44:00:45:c0:
                    66:4b:d6:6c:43:2e:44:f1:2e:89:85:22:88:80:8c:
                    23:e1:f7:58:4e:8d:3a:07:db:19:73:94:3b:2c:49:
                    7b:22:24:86:23:ce:1c:20:84:f6:fd:74:7e:8e:36:
                    5e:a0:16:de:52:c4:ae:dd:8c:1b:35:56:f4:77:07:
                    97:b2:97:19:52:bf:b8:e1:88:44:7c:de:cd:b9:f9:
                    52:99:de:49:38:d6:0d:83:55:97:ff:30:08:32:45:
                    63:81:f0:bd:c4:2f:18:d8:c0:09:2b:f9:3f:9f:c2:
                    db:60:ad:cd:cb:24:09:0e:77:ab:50:cb:8d:0f:03:
                    83:50:af:d1:57:51:5a:cd:fa:14:3f:64:0d:8e:a3:
                    00:93:5f:dd:81:a1:9e:00:a0:f7:58:74:70:97:2a:
                    75:ed:91:42:ef:0c:e4:09:7e:d0:37:b5:70:4d:6a:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E9:FA:EF:FB:8A:64:61:8C:5D:C5:87:C9:0C:A9:80:D4:8C:69:44
            X509v3 Authority Key Identifier:
                keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:95:bb:fd:7a:c4:0c:13:6c:6c:84:36:ab:8c:f3:84:30:44:
         84:a5:cc:13:09:0c:46:4c:5e:74:ed:17:2d:01:97:c6:bc:a6:
         6f:e9:be:e1:b0:39:83:83:fa:30:2a:55:7b:10:dc:1d:1a:51:
         ad:ee:b4:76:b7:27:fa:6f:a2:c4:56:0c:7c:48:11:41:4c:28:
         e2:b9:ce:30:21:cf:39:05:f9:47:9a:ef:6e:a1:b3:19:ca:fc:
         32:fa:ab:c7:e3:6c:26:27:09:d3:1f:17:df:a3:77:4f:3a:5f:
         07:e5:a6:0a:d9:29:79:5b:4f:3c:61:d0:71:4e:a7:fc:dd:23:
         1e:fc:38:6a:bd:01:11:0c:df:da:bb:19:7a:00:15:bd:a4:21:
         68:2a:27:19:65:b0:a0:b0:28:7e:8b:72:b0:de:a1:8e:34:eb:
         76:bd:bf:89:f5:89:1b:7b:ab:ad:5a:63:55:72:2f:f4:c7:d5:
         a5:f7:11:7f:44:2a:b6:ed:5f:45:c0:1a:d6:67:29:1d:58:d9:
         34:78:8b:cb:c4:36:04:6b:a3:06:3f:c8:8a:9b:17:fb:e9:25:
         02:54:d8:a3:d7:1b:f4:d0:58:dd:57:bf:73:67:e9:3a:2b:95:
         bb:01:c1:fc:14:f9:33:26:55:9c:94:5d:88:01:82:46:6d:2c:
         84:96:47:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:08:58 2026 by rpki-client