Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File:                     4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier:          fdOJtO7KU+be6F/5wJ5luZPlxw2tBmXMvSbWERr5OPQ=
Subject key identifier:   83:CD:63:29:47:E9:9A:6B:C7:AE:B5:F1:40:6A:E3:96:20:0B:E0:BC
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer:       /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial:       019EBFC86A456D9039892C21BA42D6704421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 07:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:42 +0000
Files and hashes:         1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: nvn93hQqn6y4Te4CicHFeTJnZv/StFarxjXeirosQd8=)
                          2: oxOUpQ0FwseclzcVvtlkSLjr_aM.roa (hash: 39PmeADT0B2o6dhGdHc5CXRqYkD6fuj6z5G5c2KqgVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:6a:45:6d:90:39:89:2c:21:ba:42:d6:70:44:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
        Validity
            Not Before: Jun 13 07:00:42 2026 GMT
            Not After : Jun 14 07:00:42 2026 GMT
        Subject: CN=83cd632947e99a6bc7aeb5f1406ae396200be0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:fe:a9:90:08:66:b6:1c:21:b0:ba:c5:28:
                    1e:54:34:dd:3b:71:d9:1d:b7:5e:ab:8c:bf:01:04:
                    b5:f7:5a:e7:4c:46:71:3f:5f:86:6a:e4:87:9c:6d:
                    31:52:30:53:2e:1c:c3:56:0a:30:96:5d:50:eb:e1:
                    17:94:a9:42:af:37:65:72:2a:a0:c3:c0:7a:4e:1b:
                    08:dd:88:fe:01:18:cb:e0:91:32:c6:be:4b:d3:08:
                    45:a6:65:f7:44:2a:c6:60:00:40:62:e5:8c:7d:74:
                    19:aa:e6:30:87:b0:72:53:17:86:20:a5:e7:42:63:
                    88:3f:4d:f8:38:1c:7e:ec:33:94:e6:d2:02:ab:f9:
                    bd:34:79:2a:ec:b5:64:bb:6f:5e:36:dc:bd:5f:49:
                    51:06:05:7e:6a:45:06:7d:24:6b:be:7e:17:87:db:
                    30:ea:df:e9:88:c1:35:10:36:8e:f7:57:ab:3e:d0:
                    30:16:fa:3d:16:a1:4c:cd:46:85:62:1d:09:75:00:
                    e9:09:e8:88:d0:95:ea:33:4e:99:65:99:53:34:9b:
                    e8:8e:3c:fb:cc:11:44:b9:e6:4d:9f:58:45:1c:87:
                    a5:5f:da:76:90:ec:87:5b:c6:95:fd:30:f6:60:cb:
                    b5:25:d5:43:01:5b:a8:cf:d8:59:d4:91:67:63:f8:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CD:63:29:47:E9:9A:6B:C7:AE:B5:F1:40:6A:E3:96:20:0B:E0:BC
            X509v3 Authority Key Identifier:
                keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:49:f6:f5:0c:53:68:e6:64:58:05:b8:e6:82:51:b9:95:
         b1:68:1a:b5:75:11:56:d6:96:ae:d2:03:8a:94:39:61:b8:2e:
         f6:a8:98:22:74:f4:89:58:96:6a:46:55:4e:86:8c:15:72:ac:
         84:af:1c:bd:45:25:7f:e0:e6:93:0b:c7:ed:0a:82:b6:d9:c1:
         93:12:d6:85:16:65:e3:17:9b:0d:5d:85:be:39:df:12:e7:f9:
         9d:0e:48:16:47:0e:2f:57:a9:2a:11:e3:bd:9a:a0:da:94:80:
         16:18:1c:3c:22:55:87:54:7f:57:32:e4:60:0f:a8:bb:9e:f9:
         44:1b:95:40:1e:77:d3:7e:52:f8:f3:9b:af:26:7a:d0:cf:e3:
         e2:2a:ef:d3:38:3a:e5:51:04:ec:b4:f0:d9:87:5e:9d:d4:e1:
         55:f8:07:89:ac:f6:c6:d5:ca:2b:03:37:30:a5:7b:06:59:d6:
         69:b3:6b:2e:2c:8c:01:11:df:7c:14:38:dc:e2:aa:eb:f3:ab:
         89:b7:cd:9d:60:3a:e3:69:1d:e3:f5:cb:3e:03:95:b1:93:f5:
         48:bc:ef:00:2b:b1:bd:3f:8f:ed:60:06:61:3d:c1:e5:79:8e:
         97:13:df:ae:6a:cf:7c:fc:8f:9b:02:58:ae:a9:56:6e:94:10:
         d9:07:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:29 2026 by rpki-client