Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File:                     CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier:          IuWYfr44C6A4UY/3+xnZOydW3nlmWVjoBKU+9eFNzvw=
Subject key identifier:   ED:E7:CA:9C:38:E6:93:48:D5:CD:C8:AA:C6:B6:97:18:89:5D:0C:74
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer:       /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial:       019EBE10E1536593354910F2B7E8940D20CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number:          1961
Signing time:             Fri 12 Jun 2026 23:00:37 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:37 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:37 +0000
Files and hashes:         1: 1D3XGuEQn9Eo498gEH4KY15UEy0.roa (hash: KfByO/UOYDGSRZuUArFURrgdPsxMkmj0LnL2B657g+A=)
                          2: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: 0mQGE6RLjdT7pMATJq+8FVDAgZMj4okO1x9y8fcTwSI=)
                          3: Ccc9zX-yLeQC6Y55SG5sw8NrowQ.roa (hash: pbSs2ZVDWPwNAeaOknwdNSMSjKf4eYnx2xPq9854z3Y=)
                          4: F6HBhMcBbL9T-2q5JsBwJdD4MJY.roa (hash: JxKTOtTPWfWfAAoHri0onXnZQVwputgAWxySJSE326Q=)
                          5: ZzhGs3xeuqjtegogr3JbD8EGy8A.roa (hash: QzKiuA6J4PH51Dtd4/mrQUF28CyQcdY+pEYCB8jZjMg=)
                          6: wOPk17nv5KIiudN64aSMjj945cw.roa (hash: PusivWzV1D+Sz5sW5Ck+szJ+lL1X1qExgZ8AO7cPnS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:e1:53:65:93:35:49:10:f2:b7:e8:94:0d:20:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
        Validity
            Not Before: Jun 12 23:00:37 2026 GMT
            Not After : Jun 13 23:00:37 2026 GMT
        Subject: CN=ede7ca9c38e69348d5cdc8aac6b69718895d0c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:95:20:de:e8:ce:c5:c6:89:b7:c3:e2:08:
                    84:14:ba:dc:47:d4:41:95:06:c9:f3:d9:6f:6b:d6:
                    29:f9:78:f1:7c:3f:27:60:4f:c0:de:f6:18:7b:cd:
                    7d:bc:3e:e2:f1:b9:74:95:91:2c:8f:c9:d8:5c:a0:
                    a8:3a:15:29:95:ee:13:10:41:96:6e:95:3e:69:1c:
                    e6:5c:9b:0a:81:e2:27:a2:ad:37:e1:5f:d3:76:36:
                    da:d6:af:3c:83:60:c5:25:d0:04:35:65:b8:15:82:
                    fa:e0:05:3e:bd:dc:bf:69:91:49:07:7c:f6:0c:07:
                    dc:58:55:75:8c:9e:5b:63:e2:a5:90:da:df:83:33:
                    f0:e0:9e:46:fd:ae:1f:d4:fa:e2:e2:bf:e1:31:2c:
                    77:2c:72:7f:ab:67:b3:43:1e:0a:42:5d:2e:8d:55:
                    55:01:3e:0e:d4:d4:d6:ab:4a:1d:00:4c:d2:21:35:
                    be:ba:70:3c:01:31:fb:b2:d0:b2:66:39:d2:ad:6d:
                    0d:ab:8c:88:b9:87:7d:97:e9:42:7a:ed:65:73:d5:
                    d2:6a:2c:32:43:46:70:65:71:54:fa:98:a3:06:04:
                    16:d2:ce:d3:af:3e:d5:3a:f2:82:86:8a:51:e1:36:
                    65:a8:61:29:52:0a:c4:cf:58:9a:19:1b:3e:04:3d:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E7:CA:9C:38:E6:93:48:D5:CD:C8:AA:C6:B6:97:18:89:5D:0C:74
            X509v3 Authority Key Identifier:
                keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b5:f0:cd:39:16:2c:a7:7b:cd:bc:6d:86:9e:b8:6c:ea:5f:
         e0:04:81:4e:95:e6:bc:42:22:f4:2c:34:be:22:31:64:17:bd:
         35:df:33:b2:39:e2:7a:68:f6:62:2f:c9:85:22:aa:c9:2f:f0:
         41:d1:92:4d:53:7d:2b:c0:42:71:ec:75:be:84:e1:19:5a:35:
         fc:67:2e:45:7c:08:74:54:c4:53:a9:94:c7:dd:df:1f:c1:2a:
         4f:7b:0e:3c:b1:48:76:95:19:b9:ee:9f:39:c2:17:fc:0a:ae:
         40:16:75:c8:c2:39:e5:ff:da:f0:d0:b9:18:a3:87:b1:c5:5a:
         f3:dc:5c:bb:5f:81:cf:a4:c4:98:4b:ff:40:e8:ec:af:12:1d:
         ca:0d:0b:15:91:21:08:2c:b6:25:15:e6:37:7b:7b:67:d3:a5:
         f1:ca:8e:06:ea:da:86:29:d9:46:89:b3:79:ff:db:da:d6:89:
         6f:b8:e5:51:29:bc:4b:45:28:3b:88:e9:30:2e:2e:e1:b1:c9:
         79:38:bd:3e:aa:1a:a1:bb:42:8a:fd:d6:95:80:4a:c4:d4:75:
         75:9e:48:f1:5e:4f:23:90:4a:58:ca:b2:20:0f:30:c8:c4:91:
         1d:8a:5a:d0:a6:0e:53:87:80:a7:73:09:cb:74:ef:a7:1d:00:
         34:a4:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:22 2026 by rpki-client