Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File:                     4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier:          6tv+CKS0P2byN5DErY86BUvBjBAFPu32Se38MMSKyFc=
Subject key identifier:   CE:C4:CD:2C:DF:A0:E2:35:8F:5A:7B:F1:9D:B5:2B:31:52:7D:1E:10
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer:       /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial:       019EBE10B0C92870535EB12747178F616CAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number:          06F9
Signing time:             Fri 12 Jun 2026 23:00:25 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:25 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:25 +0000
Files and hashes:         1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: 3vWpkWzjRQsFm3Xr6r8DiN25aJxDK7LvkLBmuDHNJbI=)
                          2: z585MlMo7mSSr9Hk1ivV-63iY4Q.roa (hash: DZmssWKd0chIvnTRvKAN4jdqih24+ZhEvPT2Hj5FZkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:b0:c9:28:70:53:5e:b1:27:47:17:8f:61:6c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e109e278c7862254c88755e4717398a552a49040
        Validity
            Not Before: Jun 12 23:00:25 2026 GMT
            Not After : Jun 13 23:00:25 2026 GMT
        Subject: CN=cec4cd2cdfa0e2358f5a7bf19db52b31527d1e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1c:9e:88:43:c2:f8:f7:82:ff:eb:bd:02:ae:
                    c1:23:7e:a9:bb:6c:6a:06:f9:fd:68:fe:83:a6:f5:
                    8e:37:af:d1:ef:9b:51:bc:d8:37:13:5f:16:17:9d:
                    3b:6e:66:cf:ed:ba:4b:36:8e:6e:83:11:c4:98:ba:
                    cc:4d:a8:ae:fb:f8:c9:2a:5e:24:6d:03:bd:19:e3:
                    01:d2:0b:9d:6f:cd:53:1c:28:81:e5:93:8c:00:2c:
                    a6:02:33:b8:3c:43:ba:0c:90:b7:0e:41:9a:4a:92:
                    ed:01:19:3b:91:98:ba:21:c0:b1:49:27:dd:d2:15:
                    39:de:11:c1:86:00:45:2e:95:ee:dc:1e:fe:75:4a:
                    d7:cc:a4:9b:f0:a0:6e:33:5e:e5:55:3a:d5:29:81:
                    d3:be:31:1d:96:31:e3:98:7d:fb:4e:30:af:bd:5a:
                    30:09:9d:ee:58:3c:cf:d7:9d:c1:a6:b9:65:9d:a9:
                    7a:6e:3d:b4:36:9a:40:f0:5d:75:1f:19:9d:8d:f5:
                    36:8a:70:8d:7a:ce:37:74:f7:5a:8c:ec:02:17:b0:
                    22:f7:4a:5f:89:54:c6:16:b5:11:69:4c:25:d0:ff:
                    3d:32:96:95:98:8f:8d:e6:66:88:89:4f:4e:12:0b:
                    b1:d7:f2:1e:f7:aa:32:ab:b7:f9:8c:17:6e:fa:3e:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C4:CD:2C:DF:A0:E2:35:8F:5A:7B:F1:9D:B5:2B:31:52:7D:1E:10
            X509v3 Authority Key Identifier:
                keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:87:a1:8c:60:df:49:84:2f:c9:c3:12:e7:39:ca:3d:fd:51:
         e9:71:e6:06:47:e2:86:12:f2:eb:6a:fb:49:b8:79:b8:a4:e7:
         69:91:f5:c1:0a:22:21:ad:8f:5d:23:b4:91:5d:17:50:fb:fc:
         e7:7b:e7:fe:2f:86:39:6f:7a:2a:3f:66:1e:91:4f:54:1d:cb:
         fd:4f:9d:a1:b7:63:d7:1b:58:88:24:2c:9c:6d:6e:9e:3c:17:
         88:21:7e:a2:b5:28:cd:60:eb:71:d2:07:c9:71:f6:ac:6f:c9:
         09:89:f9:7b:be:df:c6:02:49:70:0a:8b:77:ea:b9:05:8f:e5:
         b5:80:6e:af:1b:0f:e3:a8:5e:c7:7a:a0:1c:ec:06:80:66:16:
         93:e3:36:a4:09:0a:20:85:52:c6:ae:8d:91:4c:8c:5b:0d:5a:
         bd:e4:8c:a8:6f:d9:59:d8:61:97:83:26:00:da:9a:40:1a:9e:
         5b:2f:08:1c:93:69:99:d6:1a:c6:8e:30:ea:c9:cd:05:11:cd:
         d5:63:42:68:19:80:c4:47:8f:46:96:6f:ed:d2:86:36:38:ec:
         9c:46:11:96:21:a2:0f:51:ca:7c:9a:d9:bc:17:85:b2:54:c6:
         e0:1c:b8:44:b3:b1:9d:fa:a4:bb:14:e1:66:e7:49:29:5c:85:
         3d:03:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:06:03 2026 by rpki-client