Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
File:                     cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft (raw, json)
Hash identifier:          ONzivteLv9yk5rTMlRppInrFqj0NKeH9VXL9NBr+zos=
Subject key identifier:   EE:35:34:35:56:AE:DB:EC:0E:E6:7C:7B:C4:D8:83:B1:22:79:34:7D
Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
Certificate issuer:       /CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Certificate serial:       019EC22459F31C3B7D24BA0212DEABFC7EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
Manifest number:          0414
Signing time:             Sat 13 Jun 2026 18:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:22 +0000
Files and hashes:         1: 1tgtjL3B3YdYAU03MUR31VYv6CI.roa (hash: 16zjErqZd+Fe3OsAh8pnaOrjHjMKr/IPGlIT7NNIBL0=)
                          2: cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl (hash: 6bYviadngN7lf8eTf6vgG5Ys39rHFiO9BRa7JY4w7d0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:59:f3:1c:3b:7d:24:ba:02:12:de:ab:fc:7e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48
        Validity
            Not Before: Jun 13 18:00:22 2026 GMT
            Not After : Jun 14 18:00:22 2026 GMT
        Subject: CN=ee35343556aedbec0ee67c7bc4d883b12279347d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:c5:da:72:f0:02:73:ba:ca:66:3b:41:10:
                    0d:33:75:af:eb:8c:cd:ce:b5:8f:be:3c:b0:c8:b8:
                    fd:76:dd:19:80:ab:74:e4:dd:9a:ae:f4:db:ad:f8:
                    e4:be:a7:41:d3:76:ba:da:dc:31:26:5f:6e:c3:f4:
                    34:3b:2a:1a:79:5e:b4:3d:b8:0d:0e:95:55:de:94:
                    73:a7:67:58:d1:3a:74:c3:01:e3:89:c0:fc:22:ee:
                    f2:ff:0b:b5:f6:c9:de:88:a3:a6:20:9b:cf:ed:c4:
                    dd:82:91:46:fb:5a:98:66:d6:09:8b:e9:fa:f8:71:
                    f4:c5:f6:f6:01:e9:99:d0:93:f2:d6:25:27:8c:6d:
                    ba:95:3d:b2:f4:05:90:df:34:86:22:68:36:1e:fa:
                    bb:5b:e0:73:61:8a:04:c4:0d:b0:60:42:e7:11:5f:
                    2f:17:a6:ab:60:95:29:8e:46:e7:f7:bf:e9:09:7a:
                    43:28:ef:9d:59:47:87:36:bf:6c:34:18:3e:d7:db:
                    8e:d8:d4:05:13:ae:34:f5:16:5a:c2:1f:0f:c1:6e:
                    5a:78:49:f4:1e:c6:ec:cd:36:5b:f6:8a:c6:55:f2:
                    8b:23:5f:46:81:ec:ce:62:99:d1:af:ef:7b:18:93:
                    5a:73:c8:33:be:6c:39:e6:18:40:48:79:90:7e:4a:
                    c3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:35:34:35:56:AE:DB:EC:0E:E6:7C:7B:C4:D8:83:B1:22:79:34:7D
            X509v3 Authority Key Identifier:
                keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:24:0f:9b:3c:4b:38:29:5d:07:59:44:90:d2:86:d7:22:7d:
         ad:68:17:db:40:76:98:24:cb:28:1d:b3:80:4a:55:93:87:05:
         90:03:e1:71:85:0d:ba:c1:09:19:8e:8a:47:63:6f:ff:43:89:
         06:77:ab:e9:10:30:a9:3a:7b:a3:0a:7d:4c:ce:a0:ec:8c:be:
         9c:f0:9f:3b:9f:dc:33:d0:31:11:94:35:e2:50:12:15:aa:81:
         43:7f:a9:ba:18:55:32:b8:15:0e:80:2e:80:e1:c1:d5:52:dd:
         2a:a2:7b:61:53:44:78:2b:50:e4:ca:bd:06:55:73:e7:17:f1:
         bd:ba:9f:1e:80:6b:55:ef:35:73:04:30:f6:70:3a:da:21:ec:
         cb:d1:ac:67:99:60:c7:b1:13:78:1d:bd:f5:15:dc:6d:be:fc:
         47:a9:4a:00:2b:f3:bd:51:c1:62:9a:00:a8:a4:1a:a1:c1:6b:
         ff:9f:a2:b0:e5:db:69:29:82:10:1a:79:34:90:58:33:72:75:
         79:1d:e4:14:64:c5:47:3d:da:90:84:c3:1d:a2:60:09:a3:3f:
         6c:69:d1:ab:90:37:d8:e0:a6:66:ab:c1:1a:29:b7:39:00:ef:
         ea:7e:91:52:6a:be:4b:5f:ab:bd:ee:38:84:fc:91:d3:0f:d3:
         77:00:7c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:24:10 2026 by rpki-client