Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File:                     5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier:          HPocgJYiCqs+PPY6QeUk1Pudpt5E3W6w/u7y0ZfVLec=
Subject key identifier:   31:F1:56:41:2C:28:83:37:E8:5F:7C:8D:D9:CF:2C:D6:13:AB:0A:9F
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer:       /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial:       019EBDD9EEBF37E742E6E913D5B7DB25BBDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number:          0EAB
Signing time:             Fri 12 Jun 2026 22:00:36 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:36 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:36 +0000
Files and hashes:         1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: VDhc+UheaGfiJQLn2pLRb96MkJkyrNpq4qQrc6drn1U=)
                          2: kkPGy3M1-5xu9OIRpXmU25SAI2Y.roa (hash: cyrjAwqc3oU6K0wTg1ctpzSIWyDuDU/OKlnASWiAbYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:ee:bf:37:e7:42:e6:e9:13:d5:b7:db:25:bb:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
        Validity
            Not Before: Jun 12 22:00:36 2026 GMT
            Not After : Jun 13 22:00:36 2026 GMT
        Subject: CN=31f156412c288337e85f7c8dd9cf2cd613ab0a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:35:a6:de:59:38:46:2d:62:1d:48:ef:48:f2:
                    80:64:80:90:60:56:9c:e0:33:df:1f:89:aa:df:79:
                    95:51:d8:e6:a6:41:db:ce:d1:ef:31:10:82:1c:c0:
                    ac:84:16:ed:84:1f:99:1d:94:77:2a:1f:86:d8:e0:
                    f6:4d:1c:b7:db:07:e8:c8:57:9b:b3:1e:15:8a:fb:
                    56:41:ec:01:b4:27:a3:65:61:e7:97:6a:3c:1f:97:
                    ff:c8:b8:c9:0e:99:f5:c4:1d:8f:c2:fd:62:88:ac:
                    60:32:4b:17:28:cb:4e:b0:12:77:4c:99:7b:d5:53:
                    2a:dd:41:cd:cb:90:e0:62:26:17:9d:81:f5:90:9e:
                    a2:33:e1:1a:0d:db:50:f1:9e:7f:c3:d7:73:c9:02:
                    fc:b8:08:1c:14:0a:85:4f:94:4c:2e:0a:16:8b:ac:
                    69:af:59:d5:90:52:66:0b:39:32:7e:fa:dc:1f:17:
                    0b:96:e6:3a:b0:c8:53:38:79:b2:ac:10:73:9e:ef:
                    b5:aa:a8:86:d5:12:c3:bc:4c:56:e4:81:4e:93:8b:
                    b3:4a:a6:ab:21:59:06:15:f6:b9:51:92:30:c3:66:
                    01:76:61:32:7e:08:3d:2d:8b:9a:f9:07:27:9f:6b:
                    68:3f:8c:44:5a:82:77:97:cf:c2:5b:aa:dd:bf:e7:
                    e6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F1:56:41:2C:28:83:37:E8:5F:7C:8D:D9:CF:2C:D6:13:AB:0A:9F
            X509v3 Authority Key Identifier:
                keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c3:11:48:5a:44:c1:59:d6:96:06:a6:a7:01:dc:d7:e0:43:
         e9:15:64:de:0c:6b:3c:79:88:90:b4:85:d4:28:75:b2:32:97:
         45:9a:a1:ca:88:47:af:f6:e9:6c:49:22:c0:86:23:38:54:06:
         cc:49:af:2b:83:70:8b:5f:0b:2d:41:9b:e2:c7:cc:3c:75:c8:
         11:d3:c5:74:e1:b5:15:1e:7a:56:f3:5b:48:ee:50:ae:ca:b3:
         ae:24:24:a9:7d:56:7a:15:91:84:5d:8c:aa:5a:29:e0:84:6a:
         36:47:74:7d:62:8f:49:6d:d4:75:ed:f8:6d:ce:0e:29:88:30:
         1b:83:55:27:24:0b:23:4c:a8:21:78:07:f1:e5:f2:9b:4a:dd:
         41:3b:80:bd:24:c5:71:1a:5f:91:0c:1b:d2:1e:d8:3a:94:36:
         08:93:2f:de:fe:76:13:4b:4c:57:1a:46:81:a7:a6:8f:8e:ab:
         a5:8a:f9:a3:ab:9e:10:e8:4c:38:30:01:83:8f:40:5a:c7:da:
         8c:73:b5:e3:f8:94:c1:1c:e8:0b:aa:2f:be:8a:e9:26:40:f2:
         e8:39:fc:b6:88:3c:1f:10:0b:bf:2a:64:10:d5:62:53:db:49:
         04:13:b6:3b:89:5f:1f:e6:c8:46:f4:ce:79:b5:29:34:cc:87:
         a9:86:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:49 2026 by rpki-client