Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File:                     793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier:          u0T6ZjXPY+VXsJ5+OBMmm6D7+8G0vOQQj0Ro3OLJiM8=
Subject key identifier:   3D:91:06:D4:41:1F:2F:53:48:E9:FE:E1:7B:B2:89:FB:C8:FA:89:B6
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer:       /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial:       019EBE7EC36F35A3CA5660EFAAD3C354D3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number:          1955
Signing time:             Sat 13 Jun 2026 01:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:38 +0000
Files and hashes:         1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: hZ/A9OGYRlU7djwdBevSAJ4waq6dGG1X87Sw6dCrbTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:c3:6f:35:a3:ca:56:60:ef:aa:d3:c3:54:d3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
        Validity
            Not Before: Jun 13 01:00:38 2026 GMT
            Not After : Jun 14 01:00:38 2026 GMT
        Subject: CN=3d9106d4411f2f5348e9fee17bb289fbc8fa89b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:44:56:84:f7:8f:b5:4a:22:52:28:03:5b:
                    bf:3a:87:53:5c:00:c4:30:81:50:92:69:9b:78:c8:
                    e6:08:26:cd:72:4b:17:78:18:8d:b4:02:7e:62:d6:
                    22:6c:8a:71:59:14:a3:b2:3a:58:e1:00:e1:9d:70:
                    b7:10:84:17:c6:f0:8c:0e:a9:71:77:fd:bc:7b:1d:
                    ff:1d:e9:4a:1f:ac:d5:f3:5c:35:6e:2d:05:57:c0:
                    9d:32:ca:72:8b:27:2f:6c:b1:3c:1b:14:16:25:d9:
                    d8:29:98:63:cc:98:3a:b9:95:b8:0a:9d:40:05:05:
                    29:ef:5b:80:02:a3:89:06:7b:fc:58:49:28:01:c6:
                    e1:88:76:a6:d1:26:28:02:1c:93:df:ef:58:09:b3:
                    fd:be:30:10:5b:19:b2:6e:7d:d5:e2:7c:9c:3c:bd:
                    61:1e:d3:a3:36:f3:3d:fd:b1:2d:31:96:b4:8c:89:
                    b7:52:c6:fc:b9:16:78:40:86:3d:b0:f6:7f:40:e0:
                    cd:bc:e9:49:b7:fd:f6:f9:c1:19:a3:15:9a:3a:ca:
                    a7:c0:d6:ef:5c:f4:ea:1e:f2:6b:85:e9:75:a9:dd:
                    28:57:ac:65:5b:c0:91:35:90:ff:c1:5b:16:81:99:
                    76:01:8e:4b:56:a1:33:a6:b4:9f:90:3e:bb:ad:17:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:91:06:D4:41:1F:2F:53:48:E9:FE:E1:7B:B2:89:FB:C8:FA:89:B6
            X509v3 Authority Key Identifier:
                keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c6:59:98:fb:87:0e:0b:1e:79:5f:4b:ca:db:75:5b:81:60:
         96:f1:35:1d:d3:c4:4d:1c:78:d5:a3:ea:98:c7:e6:f0:61:71:
         78:35:e0:4c:2d:79:55:7a:16:fe:66:cf:0f:ad:21:47:16:0e:
         29:a8:9d:b3:c1:f6:ce:b2:c5:44:2c:38:35:b1:c9:77:f1:9c:
         d2:a2:4c:2b:0a:12:7f:9e:91:b1:97:90:16:c8:90:1a:52:77:
         22:40:89:8b:f4:c2:ec:1c:da:c5:dc:df:8b:a8:bb:01:eb:40:
         e2:81:1f:4d:79:af:d2:df:66:3d:f9:10:49:9c:38:d8:69:7f:
         a9:1e:e6:93:49:d8:77:2b:0e:86:24:0c:3e:db:79:b8:8a:de:
         53:bd:2e:21:58:25:f3:cd:54:dc:45:9d:36:07:80:0e:1b:76:
         8b:95:d9:d3:0b:0c:54:f6:47:1b:0e:7a:9b:a6:1e:03:6a:63:
         f9:f0:fe:7a:0d:ad:8e:e0:df:e0:26:13:d5:0b:c0:d0:1c:35:
         53:de:57:7b:c6:d0:50:d0:c7:bc:fd:91:13:f2:7c:60:23:3d:
         95:c6:58:90:37:3c:f9:6b:7f:30:05:41:02:f7:70:7a:3f:db:
         46:a8:0a:0e:56:03:ac:8b:eb:c0:dd:3b:1c:4d:a9:43:a2:40:
         2c:cc:06:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:07 2026 by rpki-client