Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File:                     e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier:          Zgzn8rU15QvW6e2PGoGwuKaQfw/X6Lm1cBgQidioHvc=
Subject key identifier:   75:64:D0:6D:42:20:60:E8:04:13:DE:26:77:6C:07:6B:AC:8C:B7:F7
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer:       /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial:       019EC2CA2C430C931C6ECCC509F4CD9F5BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 21:01:29 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:29 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:29 +0000
Files and hashes:         1: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: 6N8NFwqOqNGzVxLDYdXOUOL7lbuIiGZoi2c1pCjpk60=)
                          2: rBb-Zp2DN1YryszXlTcGsxUi8kg.roa (hash: VjavbSWKLaeBoYTEkUDvu679eNkgyVWO00COvRWyhp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:2c:43:0c:93:1c:6e:cc:c5:09:f4:cd:9f:5b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
        Validity
            Not Before: Jun 13 21:01:29 2026 GMT
            Not After : Jun 14 21:01:29 2026 GMT
        Subject: CN=7564d06d422060e80413de26776c076bac8cb7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:78:15:02:c5:fb:da:0e:05:d9:5e:4f:aa:
                    78:15:26:e4:47:41:2d:a2:40:53:ac:34:27:b6:4b:
                    91:29:c5:86:9f:ac:bc:57:af:ef:9a:65:db:ae:8c:
                    e2:3c:5a:60:03:4c:c8:51:95:be:42:ea:08:eb:06:
                    ee:80:7e:3e:57:dc:9a:b5:52:e0:d1:7c:6b:39:98:
                    ed:ee:21:c6:4a:35:3a:1f:4f:a0:a4:93:2e:b7:66:
                    bd:a0:90:a5:6f:7b:f5:a2:34:47:f4:59:1d:d8:fc:
                    a2:f4:10:e6:68:61:bd:fa:a9:e5:91:1e:76:a3:64:
                    9a:24:0f:dc:ff:1a:2d:e5:a9:c1:6c:6b:23:f8:0e:
                    3a:70:97:c9:eb:74:12:3b:94:ab:ba:0e:48:19:6c:
                    ac:33:74:49:58:76:b4:e6:b3:5e:09:ed:31:c5:73:
                    5c:da:a4:bf:18:f1:bc:3f:8a:12:ad:7e:f6:24:c0:
                    34:1e:cf:57:81:bf:a9:59:76:2f:75:75:44:db:d9:
                    77:df:68:2f:3e:de:38:e1:4b:5c:ac:94:94:e6:6a:
                    df:cf:59:ce:2b:28:23:67:81:71:b8:19:0e:44:da:
                    63:a1:3e:54:17:9b:cb:fa:14:9e:44:2a:61:46:b1:
                    f2:1d:65:56:59:da:d5:63:84:1a:f3:99:f7:9c:cc:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:64:D0:6D:42:20:60:E8:04:13:DE:26:77:6C:07:6B:AC:8C:B7:F7
            X509v3 Authority Key Identifier:
                keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:2e:4a:1f:02:2e:f6:a9:2c:d0:54:ea:fd:d9:ee:4e:48:
         f3:fb:b3:e8:bb:c9:9f:4c:09:88:40:34:5b:47:97:77:c2:a6:
         fb:fc:50:f4:21:2f:9f:00:d4:89:b0:b3:3e:54:98:65:8e:25:
         ed:b3:ba:1d:f1:4b:c6:b8:94:c2:1d:4b:df:32:91:64:8c:03:
         46:cf:c1:f1:94:15:52:3b:50:8e:c0:25:e7:44:76:e9:b7:a5:
         e9:31:79:1c:2e:e1:6c:52:1e:a8:b8:d9:40:95:df:bd:fe:a3:
         fc:92:a3:0c:37:e8:96:69:67:f9:e1:f4:76:64:0a:d6:03:01:
         e3:ae:28:2c:e7:68:77:0d:4d:ce:4e:ce:55:8d:67:bd:b4:8a:
         eb:d0:2c:7f:b7:55:d4:87:b2:54:12:8f:60:1a:f2:ba:bf:7b:
         ea:94:59:e8:a2:00:85:5e:45:df:5b:48:ce:94:2a:60:0b:e0:
         f0:65:ff:19:56:2c:2e:7b:c6:a8:4e:6e:f0:cc:5b:9b:56:72:
         a8:a7:7f:00:3c:4b:33:74:ec:8e:a7:7b:44:ff:1a:6b:7a:dc:
         43:5e:94:9a:90:7b:eb:38:49:1c:a4:34:e1:ae:ea:4d:4d:95:
         31:4f:28:ea:66:e0:bb:db:27:91:51:a7:b1:43:74:46:26:38:
         21:5c:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:15 2026 by rpki-client