Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File:                     4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier:          bsPjuygmCkJofI+xbtIS/7VOC8P/hWFfstSZ73XCCss=
Subject key identifier:   DC:8C:F8:CF:62:F5:A2:51:C9:97:28:4F:B0:10:9E:95:71:EE:16:B4
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer:       /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial:       019EBF91BC732507A16B15096C0C4FB25008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number:          1282
Signing time:             Sat 13 Jun 2026 06:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:59 +0000
Files and hashes:         1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: Q0Y0ZTtMumE4C4Q1PJeFuEhVRJu82v5gGdBdotIHmTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:bc:73:25:07:a1:6b:15:09:6c:0c:4f:b2:50:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
        Validity
            Not Before: Jun 13 06:00:59 2026 GMT
            Not After : Jun 14 06:00:59 2026 GMT
        Subject: CN=dc8cf8cf62f5a251c997284fb0109e9571ee16b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:12:3d:bc:10:08:df:08:7b:2a:77:83:5f:
                    22:25:a9:4d:79:29:2a:fc:ca:10:23:5c:49:f2:34:
                    bb:4d:89:19:ad:c4:a4:24:76:02:b9:53:bd:78:1b:
                    e1:63:c0:d3:98:28:f5:b0:1d:45:eb:cc:62:95:2e:
                    55:b3:38:49:c8:14:69:3f:b8:d8:6f:18:1e:8f:a1:
                    1a:90:e1:12:6e:d9:70:f1:e6:a5:8c:89:73:85:96:
                    c6:db:b3:e4:3a:5b:dd:ee:f1:a2:37:28:57:ab:f3:
                    00:90:13:75:f1:8b:02:c5:c1:4d:1c:b9:32:78:e0:
                    5e:8c:5a:86:2b:18:d7:6e:a6:b2:71:d7:fb:ae:2e:
                    27:e4:6a:54:1e:bc:b7:47:7c:07:0d:86:bd:4c:c5:
                    26:d9:cc:92:f3:bb:4c:cc:ee:7d:f9:fd:a8:fc:b1:
                    ea:11:be:3c:0e:f6:27:b4:a8:70:78:8b:db:02:e1:
                    bf:0e:f0:63:d2:a5:47:18:4e:e3:24:4a:ce:ba:ec:
                    df:f0:56:4a:cd:60:e2:e6:63:4f:74:ea:c9:b9:84:
                    d7:17:75:07:f7:74:b6:d9:0e:e0:10:e7:b2:b3:9c:
                    0d:3e:c1:11:cf:34:16:4b:bb:0f:e1:e3:6a:b2:aa:
                    95:f3:92:fc:d2:68:b2:26:69:bb:9d:a2:9d:72:71:
                    7f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8C:F8:CF:62:F5:A2:51:C9:97:28:4F:B0:10:9E:95:71:EE:16:B4
            X509v3 Authority Key Identifier:
                keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3e:7b:ad:ba:c9:f7:a3:f8:f2:88:49:bc:5b:e4:19:c6:86:
         73:98:34:20:56:8d:53:72:c5:6e:62:34:92:3a:fa:3f:3d:43:
         14:f7:54:7a:e5:e2:40:59:ec:99:f1:76:55:d0:a1:74:98:dd:
         67:99:ed:2b:df:a0:db:55:66:07:73:66:30:e6:6e:3e:50:4e:
         58:2d:21:75:99:16:fa:3c:04:32:d6:02:76:98:76:29:8b:17:
         d6:a6:64:c8:61:bb:c6:bd:56:ec:10:7d:bf:05:d0:04:8f:68:
         e4:cc:ab:e2:6b:d9:af:e2:1e:05:ce:db:46:30:5b:5f:1c:d6:
         27:44:17:ce:be:c9:35:34:5a:e5:93:4b:9f:18:ac:fe:2d:41:
         e6:bc:17:eb:9b:9f:08:c9:66:a6:9c:2c:37:db:0d:76:6a:16:
         41:f2:a1:7c:b8:16:c3:5f:3e:b5:67:05:c2:fc:84:32:50:5a:
         dd:00:7f:15:8d:97:fa:22:dc:a1:2a:5e:7f:95:70:ba:cc:82:
         66:8d:8a:aa:fd:f2:0e:3c:57:a1:cc:e4:51:b1:88:c8:56:92:
         17:46:c3:35:fa:f2:cd:2e:c2:ec:b9:e8:5b:b1:de:04:5a:5d:
         2c:ab:f4:75:b5:c2:46:f0:01:38:6e:74:5b:25:12:36:c9:95:
         40:f4:3b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:54:36 2026 by rpki-client