Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File:                     dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier:          Efs94VhVgdY8PJq/j3fy+7K1IWvHmMlBhxXpnQ2rTp8=
Subject key identifier:   7F:B1:2C:5C:2A:1B:94:B5:6C:C0:9B:8D:3B:D7:55:4A:8C:00:3D:9A
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer:       /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial:       019ED3BD67923889DDC49E615DED5782CB69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number:          1964
Signing time:             Wed 17 Jun 2026 04:01:05 +0000
Manifest this update:     Wed 17 Jun 2026 04:01:05 +0000
Manifest next update:     Thu 18 Jun 2026 04:01:05 +0000
Files and hashes:         1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: fuyzLXnACZQyXfj1n1ID7+SmQC5kkgdQT9z+C6voZVU=)
                          2: jeUCTnllWBc2YjwSNbaBtlWcww4.roa (hash: A3urkixwNeWZh9C+aMoLes8n2HeLxR2S7cO9Wh2QMPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:bd:67:92:38:89:dd:c4:9e:61:5d:ed:57:82:cb:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
        Validity
            Not Before: Jun 17 04:01:05 2026 GMT
            Not After : Jun 18 04:01:05 2026 GMT
        Subject: CN=7fb12c5c2a1b94b56cc09b8d3bd7554a8c003d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:75:94:1f:4b:23:21:40:d0:b5:71:c5:ea:
                    9b:11:2c:4e:33:cd:f9:42:3b:54:ba:b9:f3:92:d2:
                    74:fe:f3:59:5b:a3:49:98:10:a9:fd:29:b1:09:ff:
                    3e:47:0d:a6:bd:2d:51:28:45:f9:03:ef:6e:28:3a:
                    4a:b2:14:b1:22:c5:1a:12:ac:e2:b6:79:ef:ce:85:
                    56:49:d2:12:66:61:b8:9b:6b:b9:05:d7:f7:c2:5b:
                    b2:0d:a7:b7:22:ad:e5:41:b3:f1:53:39:13:32:73:
                    15:65:0b:a8:c0:b3:74:1a:bf:01:16:c6:6f:04:17:
                    71:07:98:a5:c0:52:c3:c6:72:63:9e:66:db:1b:e1:
                    36:7a:ac:42:02:56:66:98:a5:ce:b5:a9:e4:6f:89:
                    19:a0:51:ee:cf:5e:99:92:e2:aa:ee:55:f4:22:2f:
                    c3:09:3c:49:6e:bd:82:ee:74:69:3a:8c:25:82:2f:
                    ce:50:a7:f2:e2:2a:2e:70:08:d5:6c:84:d5:70:64:
                    82:a7:5c:81:6c:fd:67:fb:9f:52:1b:43:aa:72:e8:
                    f2:35:45:31:24:58:72:37:32:48:3a:9f:d0:58:81:
                    ad:30:0b:66:ed:e6:7e:36:e5:a8:b6:c5:73:4b:5f:
                    b1:b2:9e:a7:aa:26:7e:37:c5:7d:4f:47:e4:88:81:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B1:2C:5C:2A:1B:94:B5:6C:C0:9B:8D:3B:D7:55:4A:8C:00:3D:9A
            X509v3 Authority Key Identifier:
                keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1f:9c:c4:8b:5a:6d:ad:06:45:fe:a1:e6:b3:c9:5f:a8:99:
         cf:20:f1:d6:f1:16:65:7e:31:98:73:ee:9b:76:c7:4b:f1:24:
         7f:91:be:db:24:e5:27:fb:39:cd:f2:f8:bf:92:cb:f1:5a:c0:
         52:64:4c:c5:2d:5d:6e:28:db:b0:32:23:d6:1c:a1:3c:f3:8f:
         32:b6:2b:e7:8f:de:7f:e7:84:d7:e3:be:3e:e8:55:9a:b4:54:
         77:ca:54:18:17:5e:96:8f:16:d5:20:5e:04:32:b0:1b:db:55:
         7b:5c:2c:65:77:98:cf:b9:54:b2:87:22:5d:c1:b6:59:46:fc:
         46:de:da:7f:ca:41:22:30:34:6d:ed:1f:75:0f:36:a1:49:03:
         49:55:6a:b3:b3:00:f5:1e:ed:d9:b3:d7:db:a5:4d:25:7a:26:
         6b:2c:9c:b1:d1:c9:a0:27:49:ed:ff:e9:1d:07:1e:82:bd:7e:
         a2:02:f7:48:aa:a5:fb:df:d4:b7:82:7d:b6:ff:b7:92:a9:6f:
         34:51:a1:26:85:a5:1d:92:11:f1:f2:79:16:e1:81:9d:44:31:
         f8:4e:77:4b:b0:b0:f2:82:c7:4f:2e:fc:89:32:64:50:a5:d3:
         79:a1:b9:9d:90:23:54:29:93:0d:c2:81:e7:2c:ba:1e:3a:a0:
         a4:b0:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:41:56 2026 by rpki-client