Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File:                     5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier:          jhAuYxJHdOrpl6XPSmUmQ1tZtcLal96Pkvk40LKZNIM=
Subject key identifier:   4D:E8:AC:4F:FF:1A:34:8B:6B:BB:7A:FE:BB:CD:02:7F:3D:37:36:D3
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer:       /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial:       019EBF91B431AA304B24F120B0E183A89260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 06:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:57 +0000
Files and hashes:         1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: KUT7ifQ7fu9b3zhoqt5wfuTaQj6XM52SC9XgYO4q5QU=)
                          2: 8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa (hash: xYCGhk8KRGNgVElrhL//wuDH3rNsau4dVCz023td3io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:b4:31:aa:30:4b:24:f1:20:b0:e1:83:a8:92:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
        Validity
            Not Before: Jun 13 06:00:57 2026 GMT
            Not After : Jun 14 06:00:57 2026 GMT
        Subject: CN=4de8ac4fff1a348b6bbb7afebbcd027f3d3736d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:5f:67:c4:a2:78:e5:81:17:2e:05:f3:1f:
                    bd:19:94:a1:5c:8f:f7:5f:64:b6:15:d4:1d:91:9b:
                    72:0c:6e:92:27:ee:3d:bf:66:7b:61:e0:3d:06:5d:
                    02:17:46:9b:c9:e7:9a:1b:d8:ce:76:58:24:d4:05:
                    f9:ef:6e:a5:30:fe:78:4c:c4:67:25:c2:c9:c1:6a:
                    e0:77:fe:a9:fb:a2:fd:48:d2:b2:9d:7d:8c:85:82:
                    06:bb:73:b2:33:72:55:94:05:22:d1:85:48:0c:c0:
                    36:02:28:c1:16:4f:4b:9a:22:1c:a0:77:9d:90:6f:
                    ae:10:04:fe:88:1e:29:b6:9a:9e:66:94:d9:6b:1d:
                    a9:15:d6:5b:8d:02:06:a4:3b:9a:82:8e:d2:c8:e3:
                    01:1c:6d:5b:43:22:a1:e3:1a:d3:7c:b9:d8:6d:39:
                    1f:f4:12:60:e7:1a:76:5b:4f:22:90:f6:75:28:d0:
                    35:9f:a1:0b:21:30:35:b5:c9:67:96:6d:f5:00:5f:
                    e4:bf:ed:f6:ab:a8:30:58:b2:b2:2b:36:1c:a6:06:
                    11:43:9b:69:e0:3e:f0:c6:f0:34:e0:17:b3:67:18:
                    09:c3:d5:49:ed:8a:d6:68:bc:b7:8b:0a:01:39:86:
                    02:1b:20:07:42:ef:e7:15:86:14:e2:98:ac:39:8b:
                    b8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E8:AC:4F:FF:1A:34:8B:6B:BB:7A:FE:BB:CD:02:7F:3D:37:36:D3
            X509v3 Authority Key Identifier:
                keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:89:8e:c9:12:a4:1a:af:c8:21:d1:cd:52:6f:f1:3d:99:
         97:8f:d0:0c:33:c5:71:2e:ad:99:1a:61:1f:38:27:d2:11:d7:
         74:2f:a4:ce:3a:e7:33:9a:bb:9a:17:61:dc:3b:2b:f8:f7:6b:
         c6:27:4c:44:c3:a9:7d:46:4d:35:d2:f0:11:67:a7:ce:e1:58:
         d8:ce:3c:28:a4:28:f7:a4:68:6b:83:4e:a5:01:76:43:e6:8e:
         49:2c:97:3f:ae:f5:1b:5c:7e:cb:fa:28:a2:d1:63:a1:5a:89:
         eb:9a:a6:a7:39:bb:e5:37:bc:3a:ad:09:3f:12:31:c9:23:13:
         a7:04:da:a1:4b:1d:5c:10:26:dc:f6:5f:27:7f:c0:3f:f2:64:
         5b:46:5e:6a:95:d1:b7:c9:f9:8f:02:5b:95:fd:7a:3b:99:e9:
         1a:93:40:e1:cb:56:46:e8:5a:23:8d:d9:50:fd:7c:3a:2e:ac:
         cf:22:8f:7b:1a:9b:38:f8:aa:dc:7e:97:a3:d7:f0:6e:0e:e4:
         05:e9:09:55:62:bd:24:be:e7:4b:3c:48:05:b2:3e:5e:ae:a3:
         eb:59:2f:49:5a:ee:b9:3b:9f:5a:cf:4e:5f:8c:82:f5:42:dd:
         dd:dc:39:00:95:ed:6b:37:f5:0a:b7:33:04:e4:53:d8:84:d4:
         3b:a3:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:57 2026 by rpki-client