Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File:                     Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier:          eue6sdeo+1o243LJ26sBrL/yzILOLZoWRJJsZ7uTQMY=
Subject key identifier:   2C:AC:25:CC:B7:3A:9D:2F:B6:C6:96:E6:26:B2:39:9A:C1:0E:03:05
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer:       /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial:       019EC17F7DE4739D47FEAE1E747D85B59D38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number:          18EE
Signing time:             Sat 13 Jun 2026 15:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:18 +0000
Files and hashes:         1: HPyXpgvZq0DmF5lYqywyaXxXuLs.roa (hash: xJJdHEjB0zhK0uHLhPfuryAT20NVmJFJDeJjva/xFEM=)
                          2: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: LwqQN8rWMH4oLloDLLr+zHzXMp13O617T6CS7c7Jv0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:7d:e4:73:9d:47:fe:ae:1e:74:7d:85:b5:9d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
        Validity
            Not Before: Jun 13 15:00:18 2026 GMT
            Not After : Jun 14 15:00:18 2026 GMT
        Subject: CN=2cac25ccb73a9d2fb6c696e626b2399ac10e0305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:bb:72:35:b5:0f:49:c9:0a:17:30:39:d9:
                    17:d0:90:0a:40:18:cb:39:c6:77:cd:1e:a4:3b:8d:
                    e4:b3:3e:43:a5:ad:19:72:1d:0b:25:c9:60:f1:e4:
                    73:f3:b9:42:0d:61:c9:8b:8e:e7:33:27:cf:61:fc:
                    b7:93:11:4f:7e:03:dc:60:57:e3:c3:ef:08:3a:2a:
                    7c:54:60:4f:7f:24:a5:d6:d1:9a:56:48:70:63:ac:
                    fe:29:40:05:a1:cd:d2:74:1e:a8:ed:29:63:e2:be:
                    32:0b:f5:13:7a:c3:3e:bc:91:5a:72:5c:fb:40:52:
                    6b:46:aa:3b:82:37:13:f7:4f:45:5e:a6:7b:72:4b:
                    37:84:3d:cc:ae:b0:2f:77:0a:97:0e:12:1d:3e:19:
                    2f:44:e2:26:11:4b:f5:16:dc:3e:48:35:54:16:59:
                    55:fe:30:07:99:4b:e3:8e:dc:d7:0c:90:51:86:7c:
                    12:43:5c:2d:ee:67:e3:7b:de:1a:32:87:79:04:8b:
                    14:32:ec:58:f1:fd:69:43:c2:39:2f:a2:0a:12:ab:
                    2b:f2:51:1d:90:df:ca:f7:ad:78:12:ca:68:40:84:
                    5c:c4:45:a1:54:11:9e:ab:4b:bc:7c:2f:dd:f4:4c:
                    b1:24:29:85:b1:6f:2d:79:27:b6:84:31:58:e7:09:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AC:25:CC:B7:3A:9D:2F:B6:C6:96:E6:26:B2:39:9A:C1:0E:03:05
            X509v3 Authority Key Identifier:
                keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:91:f2:b3:81:7a:d4:97:5f:d0:ac:c2:b8:bb:ac:e4:34:22:
         4e:37:3d:14:07:00:d4:54:9f:40:0d:ae:bd:eb:f3:32:de:ea:
         91:8b:24:b4:1e:ec:c4:55:3e:d2:57:0b:8c:c9:4c:d6:54:0a:
         96:62:28:06:1e:90:05:6e:20:8f:2a:f4:a6:67:34:77:75:79:
         86:c6:af:56:98:dc:6c:55:2c:c8:5c:f7:ba:74:95:8b:75:28:
         2c:c9:4e:89:a8:66:86:36:a0:cf:9a:42:a4:6c:33:ef:e9:63:
         e3:4c:cc:5c:af:64:cb:bf:8a:3f:99:5f:21:7e:1f:3a:46:31:
         1b:92:75:ee:b6:82:25:48:95:8d:3d:10:c6:41:2a:49:a8:55:
         a6:1e:dc:4b:31:c1:37:35:4d:d6:c2:dd:ab:3b:a4:f1:31:c6:
         45:9d:0a:b9:81:30:a0:43:86:1a:96:9b:e8:42:f8:83:61:74:
         6a:85:f4:8c:0a:46:fd:3a:b3:bb:3c:67:d0:5f:a8:44:cc:2c:
         f8:c9:75:74:58:bf:32:5d:10:32:5e:bc:a0:49:59:91:c4:ca:
         63:10:66:d8:42:4a:ab:b0:ab:a0:bb:43:1d:04:05:f1:53:b8:
         ea:6a:96:ee:95:33:6c:85:a6:94:32:ba:d9:3b:f6:29:93:52:
         d6:55:93:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:18:20 2026 by rpki-client