Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
File:                     5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json)
Hash identifier:          gwergQ8uegmOMJ+JCb76ED5g7R1F0x+rtawWzggi0bo=
Subject key identifier:   C3:61:8C:72:FE:F6:48:12:EB:A1:49:92:79:3A:BD:D4:E3:AE:E7:AF
Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
Certificate issuer:       /CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Certificate serial:       019EBE7F26AB3C7F72B25A68B1291E9202BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
Manifest number:          10B9
Signing time:             Sat 13 Jun 2026 01:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:04 +0000
Files and hashes:         1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: W20wnpMKJczAEoVOpelGkij5ZeU+PwT6CpTYnncIiZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:26:ab:3c:7f:72:b2:5a:68:b1:29:1e:92:02:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973
        Validity
            Not Before: Jun 13 01:01:04 2026 GMT
            Not After : Jun 14 01:01:04 2026 GMT
        Subject: CN=c3618c72fef64812eba14992793abdd4e3aee7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:f8:b2:ed:3d:43:b4:54:70:ec:c2:f7:53:
                    d4:ff:13:70:c7:5f:cb:ec:b1:02:16:ad:87:66:12:
                    ca:b3:ab:da:ac:75:ef:8c:f5:ad:bc:5c:df:fa:a7:
                    97:53:d9:54:83:27:0b:e6:95:47:ff:b6:0d:96:98:
                    aa:a0:97:03:09:36:81:46:aa:04:a5:87:be:a9:02:
                    09:bf:f2:35:9f:fc:0e:3c:4a:b9:71:bc:32:d0:4d:
                    5c:9a:a9:12:52:c1:12:ef:8f:9c:92:5b:a4:6f:96:
                    bc:38:d2:0f:34:4c:50:63:55:09:53:73:6e:65:8f:
                    40:43:21:cd:05:48:04:13:92:d2:21:5c:fe:13:b9:
                    98:ac:dc:ef:02:ea:21:2a:c9:4d:b5:97:e7:83:a5:
                    fd:8a:4d:d4:25:56:c4:42:cf:ee:25:bb:0b:77:8e:
                    d8:b0:3b:9a:24:54:2a:38:12:de:1b:63:c2:f2:48:
                    4e:2c:a6:11:45:d5:3c:8e:e4:b2:87:72:e4:1e:1c:
                    25:3e:9e:9f:28:05:a2:b0:bb:51:27:7d:dc:1c:8f:
                    a2:ee:57:2c:de:b8:42:25:84:aa:3c:13:7b:f7:2c:
                    35:0f:e7:a3:5b:08:88:90:e2:f7:49:9f:4c:d0:3e:
                    bd:78:da:e1:d6:60:47:3e:31:e0:a9:eb:87:03:d8:
                    bb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:61:8C:72:FE:F6:48:12:EB:A1:49:92:79:3A:BD:D4:E3:AE:E7:AF
            X509v3 Authority Key Identifier:
                keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4d:df:f8:95:8e:77:56:c4:e5:01:44:f6:09:20:cf:53:c0:
         48:ee:36:92:76:ca:bd:46:b1:91:45:5a:56:7b:b1:dd:30:63:
         35:75:0b:27:48:bf:d1:0a:16:91:6f:12:97:ea:7e:be:1b:22:
         83:0a:72:f7:37:ec:d8:f2:81:0e:98:98:48:9f:5b:59:57:7f:
         5c:0b:44:17:1e:01:a2:06:9c:de:05:1b:fb:de:6d:15:d3:1b:
         b3:5b:1b:7c:68:9d:4b:b0:36:00:06:39:95:a8:8a:bd:29:ae:
         77:58:53:91:1f:a0:d5:3b:31:34:b0:86:1a:80:62:ee:34:91:
         a6:c2:6a:b9:6b:02:cf:e5:77:78:d6:ec:f9:1d:b3:6d:08:df:
         ff:eb:7a:88:5d:94:8c:a7:bd:71:a8:8f:57:4e:a2:c4:7f:59:
         2f:25:4e:cc:a0:be:ca:d5:9d:53:3d:73:c4:69:48:8c:8e:c5:
         52:e9:c0:ac:cb:77:26:75:99:34:56:b6:7e:4f:89:db:ef:8a:
         fb:a8:00:c3:ca:df:29:ba:50:e9:5f:da:f9:31:b6:d0:39:5a:
         b9:5f:c9:90:47:be:0b:f6:de:cb:5d:5e:fe:ef:8d:a7:c8:b1:
         be:ba:cc:cc:4e:85:bf:69:29:5b:ec:a8:90:48:46:d6:3c:09:
         8c:79:d8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:37 2026 by rpki-client