Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File:                     4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier:          VbQXWikcPatv9VKKczyqDyuxXqCAtA9yrEYT6/KELPs=
Subject key identifier:   08:7B:EC:A4:6C:73:BB:CC:C4:1B:98:58:77:60:43:E3:47:2A:1D:87
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer:       /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial:       019EBE7EE524C1FAC23F6523CA6206A49F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number:          0EB1
Signing time:             Sat 13 Jun 2026 01:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:47 +0000
Files and hashes:         1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: bvlJOlecaZULPsGJ5+cH3d4WusGgJlqUZris3XyBDqQ=)
                          2: QtPhnyLsRRN8U6hpcPXp4Z0oWqY.roa (hash: i0nu2P6NxLQ5ERHa8d6GR72neeBYjpf7KkNPNvBe0Gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:e5:24:c1:fa:c2:3f:65:23:ca:62:06:a4:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
        Validity
            Not Before: Jun 13 01:00:47 2026 GMT
            Not After : Jun 14 01:00:47 2026 GMT
        Subject: CN=087beca46c73bbccc41b9858776043e3472a1d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:b4:26:b1:ae:0f:b5:01:94:a8:ca:82:e3:
                    29:a1:36:8b:d2:92:3b:53:68:a1:2b:c6:77:b5:9d:
                    be:a1:d3:73:3f:7f:41:78:eb:9e:1b:32:01:52:b6:
                    a5:c3:db:40:e4:91:fd:7a:16:26:14:7a:cf:fc:cb:
                    e8:05:3c:bd:b2:2e:06:76:da:f8:b1:92:46:9d:bd:
                    db:4f:f7:fe:e6:a0:d1:5b:f4:04:fc:59:b0:99:60:
                    0d:56:95:3f:77:48:4b:75:af:82:e1:aa:89:80:b6:
                    ff:5d:15:98:eb:0d:0d:60:9c:04:c5:7f:bb:f1:26:
                    cd:c7:19:2c:a6:f3:d6:ac:75:e2:04:46:8e:3d:aa:
                    d6:e1:38:13:b1:74:1c:a4:cf:8c:f0:11:f9:70:50:
                    34:21:29:8d:60:85:24:15:81:7b:bd:55:0f:14:53:
                    e1:b5:e9:78:cf:55:a6:d6:f9:ca:39:c3:b5:11:6a:
                    16:65:cf:c1:cf:94:3d:c8:2c:7c:97:17:07:e3:4b:
                    57:34:a4:8f:a8:b3:13:c3:c1:fa:bd:1d:0b:cc:a8:
                    98:89:40:42:29:6f:d3:d2:fa:e9:27:04:4f:87:89:
                    df:5b:75:a4:8d:da:8f:c8:30:78:97:57:bb:33:5c:
                    7b:68:1c:04:a1:c6:3b:5c:27:b5:87:06:71:9c:de:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7B:EC:A4:6C:73:BB:CC:C4:1B:98:58:77:60:43:E3:47:2A:1D:87
            X509v3 Authority Key Identifier:
                keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cb:0b:4e:ca:dd:fc:b4:4e:68:68:5f:63:c3:e4:5b:24:9e:
         a2:db:ec:71:d3:15:ba:a7:66:6f:42:d7:69:a2:ee:46:1e:df:
         43:b6:47:54:2b:0d:79:df:7d:eb:c3:7d:c2:e6:09:e4:5f:05:
         5c:58:de:db:44:93:88:74:50:e6:27:41:50:bf:94:9c:ee:fa:
         8c:5c:15:4b:32:75:36:5d:68:45:b2:06:1e:27:47:7c:a2:d1:
         eb:5a:61:c1:ff:b7:bf:be:d3:32:c9:ce:c6:72:18:52:89:6f:
         c5:7e:1f:8d:24:7f:3a:ff:06:91:82:0e:ec:d6:25:96:27:e0:
         97:91:bd:2b:87:f4:39:57:14:c2:3f:be:7a:22:67:9f:7e:16:
         5d:f2:3b:47:ec:1e:c8:10:81:d8:29:35:3a:1e:d5:4a:a2:58:
         53:60:0a:10:82:bb:fc:bf:79:9e:02:90:ef:2d:5d:9b:9c:cb:
         05:95:c0:b6:1f:37:bd:51:4c:98:f3:c4:47:80:42:01:15:15:
         df:43:84:1c:a7:2f:31:e8:c7:38:7d:a4:2e:7a:7f:0d:b8:4c:
         2b:a2:5b:e9:fd:ca:89:39:ac:5d:76:df:e3:7c:0c:e6:3c:a3:
         a0:3c:45:d5:da:2d:da:e4:57:48:8a:67:e0:35:4d:9f:5c:ba:
         9f:cd:bd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:39 2026 by rpki-client