Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File:                     B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier:          IP7tcMxEkl0g9z8Pss8va9JcCgdxwiHollF/tPf8OOw=
Subject key identifier:   E2:53:50:76:28:01:83:40:D7:1F:60:78:54:A7:EB:E2:C8:EA:18:AD
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer:       /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial:       019EBEB5DCCBC7DC7E84DFC649C0C7987DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number:          1458
Signing time:             Sat 13 Jun 2026 02:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:50 +0000
Files and hashes:         1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: MfULZ3p5Yt/G3jTabCMsO3PXcTaXOVw5AclCqsPu3qU=)
                          2: DUkKAgihVQLx-9lRs9kP656LAqs.roa (hash: Q209pcJqFgT3dRAcDq1sFjsPW/cttABhC0fxm9KWWRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:dc:cb:c7:dc:7e:84:df:c6:49:c0:c7:98:7d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
        Validity
            Not Before: Jun 13 02:00:50 2026 GMT
            Not After : Jun 14 02:00:50 2026 GMT
        Subject: CN=e253507628018340d71f607854a7ebe2c8ea18ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ac:e1:ed:98:75:3c:10:7b:9d:2e:6b:7c:0c:
                    21:e4:53:83:ec:07:b0:95:f2:2d:67:4d:8c:67:8b:
                    0a:2d:4c:a9:a4:54:84:5d:79:e6:c8:e5:68:5b:e4:
                    f9:aa:5f:b9:eb:b2:01:1e:3c:0c:a8:8b:5d:06:9c:
                    5d:92:ae:39:58:c9:7d:ea:e7:ba:5d:cb:10:e8:9c:
                    b6:f2:51:29:0d:d2:d3:d6:0a:fd:30:9c:c2:08:4a:
                    f7:15:f1:29:60:f1:cc:59:3d:4d:04:60:0b:23:20:
                    ae:a9:7c:68:07:33:54:da:8c:72:9f:bf:f8:1a:7f:
                    e8:8b:18:b5:ee:1a:88:83:3d:f0:5a:eb:4f:e6:9e:
                    1d:20:af:2a:cb:48:32:4d:6a:c9:2d:b4:03:02:d2:
                    d3:43:da:f2:95:37:f1:4e:9f:93:3f:32:19:60:25:
                    b4:c5:f2:00:8b:d4:31:7b:7f:62:37:a1:c1:31:b0:
                    a1:6c:34:2a:8f:5d:df:29:b8:08:66:2d:41:e6:91:
                    82:0d:dd:15:2e:ef:c7:4a:21:00:85:23:e2:7b:b0:
                    99:c3:49:28:46:0d:e1:6d:c8:10:38:3a:71:d3:1f:
                    53:3e:92:76:ef:43:57:ee:47:dc:9c:9c:e2:9a:ac:
                    f9:81:94:79:3b:35:b0:30:9e:cb:20:3c:42:1e:54:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:53:50:76:28:01:83:40:D7:1F:60:78:54:A7:EB:E2:C8:EA:18:AD
            X509v3 Authority Key Identifier:
                keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:6c:fc:16:1e:e5:e3:5a:a4:ae:52:f0:b7:9c:e5:f2:bd:0d:
         63:1a:18:d4:df:8e:f5:0a:12:3f:33:cc:a1:67:ad:b6:47:ee:
         e9:41:18:dd:02:ea:a3:b8:9b:80:9d:87:87:c9:ce:d8:25:de:
         7f:12:ee:ed:c6:8b:90:07:c4:b7:c3:af:e7:13:7e:bc:f9:94:
         d8:46:32:89:fb:21:e1:83:cf:c1:ed:76:b2:60:19:5a:39:2e:
         64:c3:20:13:ba:80:f5:12:2c:3f:98:17:b8:e9:a9:75:10:23:
         2b:4f:d1:21:3a:be:de:67:34:e9:85:a6:21:21:a9:92:be:91:
         d2:90:54:bd:51:f1:88:f5:7d:4c:d7:7f:18:e6:d6:9c:a8:24:
         33:c9:9e:a8:11:a1:00:2b:24:dd:ac:31:15:6b:a5:6e:05:fa:
         64:27:86:50:7d:40:f5:23:65:2c:57:29:79:47:01:12:67:f5:
         d8:5d:4f:7f:20:96:fd:39:79:95:06:0d:7c:b2:88:c7:32:fc:
         95:95:b2:45:55:74:b6:c3:eb:7b:bd:a4:86:b9:63:e4:de:c5:
         79:cc:72:bc:00:4d:c6:36:90:b5:73:1f:da:08:d0:5d:e8:ae:
         4a:05:17:3f:94:23:45:f4:03:47:45:16:0f:9d:c3:a9:8d:7e:
         5b:df:f0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:41:26 2026 by rpki-client