Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File:                     4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier:          y6hOWj2jFLlySOI0Q3dDBwLCRvq+oMesGpvAsAuzfzg=
Subject key identifier:   2C:A5:10:6F:91:96:4D:88:12:D6:12:D0:B5:07:0A:90:67:83:7C:E3
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer:       /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial:       019EBEED0272656FFF821458E95807DE6EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 03:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:04 +0000
Files and hashes:         1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: JqGavCMo/7lySJ0ZcSStgqXRlF3uJh2PS5jdh2WkxU8=)
                          2: Ut_nk45-PrVxes0DMrlE6POGcXc.roa (hash: oo94Gr3/o7iKPPOqsqmwUWcuIt1lQW+gn6zRbGd06vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:02:72:65:6f:ff:82:14:58:e9:58:07:de:6e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
        Validity
            Not Before: Jun 13 03:01:04 2026 GMT
            Not After : Jun 14 03:01:04 2026 GMT
        Subject: CN=2ca5106f91964d8812d612d0b5070a9067837ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:75:b2:42:71:78:dd:49:33:b2:a5:08:70:
                    d1:14:2b:66:7b:68:0c:0e:0b:38:bc:1a:eb:fb:09:
                    b6:ee:65:26:cf:a8:bd:d0:d1:b3:e9:de:dd:67:a1:
                    ff:3e:12:c7:d0:32:b2:db:e6:ee:d5:6b:c9:93:47:
                    95:b6:8d:0b:e3:91:e8:b1:aa:ae:3a:3a:61:b4:a3:
                    0a:3f:bd:68:b3:e9:dd:d8:ac:90:1f:61:b8:b7:6d:
                    ce:c1:ac:0b:27:42:b0:67:29:4c:e4:b1:61:62:dd:
                    fb:8e:36:09:93:c3:fe:68:01:ae:6a:e0:ee:77:48:
                    b5:43:cd:3d:18:29:b9:58:20:2d:8d:4f:2a:ce:c9:
                    e7:a1:d5:cb:5f:37:d3:ac:49:5f:40:dd:99:23:81:
                    46:2c:0c:e9:d2:5d:fd:a0:81:1f:f9:68:0f:46:68:
                    38:12:06:aa:1a:89:8c:1e:b8:0e:49:51:2a:dc:54:
                    0e:f3:fe:2a:b5:86:17:a8:69:9b:b6:d2:22:eb:42:
                    ad:c8:4a:96:e1:05:83:10:47:05:a7:23:ea:04:39:
                    c2:05:0b:44:a0:39:a7:6b:e9:8f:01:c2:7f:a0:51:
                    a1:b3:3a:47:bf:c6:e9:6a:ff:33:b8:a9:5a:e7:7f:
                    b8:6b:94:98:4b:05:b2:69:cd:b2:44:4b:d2:d3:03:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A5:10:6F:91:96:4D:88:12:D6:12:D0:B5:07:0A:90:67:83:7C:E3
            X509v3 Authority Key Identifier:
                keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:98:00:24:67:4b:d6:86:33:7f:79:3d:f0:56:ad:4d:3f:21:
         a8:d3:88:50:95:6f:c5:38:cc:82:31:f6:83:8d:ff:1c:b6:e4:
         94:52:7b:33:89:73:fa:a4:15:2e:b3:19:81:65:9a:4c:88:9a:
         1a:31:89:66:d6:fd:33:fa:41:51:c4:76:ca:c1:8e:34:ea:ca:
         0d:11:51:03:2a:25:ad:61:30:0b:5f:28:ef:5c:de:70:52:3f:
         eb:50:ca:5f:e2:02:43:16:30:8b:3e:be:8d:75:ae:69:df:74:
         96:e8:37:cc:1c:48:e4:10:5f:46:c0:1d:73:75:b3:84:0f:04:
         ea:c2:ef:34:7f:e9:29:51:3c:83:24:f3:fe:3a:7a:15:3a:c4:
         8b:a6:99:4b:25:f3:14:75:ab:41:31:e4:40:b5:7b:68:69:9f:
         57:f6:10:3b:52:e0:ae:18:82:e2:70:49:41:6b:60:3f:c1:ba:
         19:dd:69:b9:13:f6:8f:63:e9:79:8c:a5:77:b6:26:53:a2:c3:
         09:ee:81:05:a0:91:67:eb:a8:80:a3:95:2e:26:a0:50:9f:0a:
         4d:1d:7e:53:6c:72:f7:24:3d:db:a2:e8:e2:89:4e:ee:9f:a8:
         8c:38:46:03:05:c8:1d:68:66:e4:02:3d:f2:dd:61:fe:bd:bb:
         cf:2e:61:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:11 2026 by rpki-client