Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
File:                     5r62dxRfZMr7zXE26B81onSujow.mft (raw, json)
Hash identifier:          N5I8jPo7LbsFXmYBgWGeHPdV/vqoMNVAuXwdYcIpQG4=
Subject key identifier:   40:4A:3C:EB:53:B1:80:B7:31:21:B9:67:3B:8E:28:3C:53:DD:68:1B
Authority key identifier: E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C
Certificate issuer:       /CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
Certificate serial:       019EC06D450AA962659DACF04A496D52511C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
Manifest number:          029E
Signing time:             Sat 13 Jun 2026 10:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:46 +0000
Files and hashes:         1: 5r62dxRfZMr7zXE26B81onSujow.crl (hash: SvM5xgHsfh1gZxjYvbcDmsz7MFM/a24mWAubMnRAcSw=)
                          2: UEVvSHR4RXiw4RWetmh_ZCqzc9E.roa (hash: bFzxJ++JMPEdKwW88mp2Ckxb5L1ulPilrj2DRxpxsNw=)
                          3: tjprewfipgbi2VkjPO3arRc-3cs.asa (hash: 6WFMJ/QA4RHzwHp7zyMKTAL+OYliyrWyqQs9rXBT3nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:45:0a:a9:62:65:9d:ac:f0:4a:49:6d:52:51:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
        Validity
            Not Before: Jun 13 10:00:46 2026 GMT
            Not After : Jun 14 10:00:46 2026 GMT
        Subject: CN=404a3ceb53b180b73121b9673b8e283c53dd681b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:4d:9a:7e:c5:fb:3b:79:25:4b:c5:7f:55:
                    a3:29:a9:94:ff:c3:3b:7e:0f:de:4c:4e:ed:b6:18:
                    7a:aa:c5:f8:9e:40:a6:99:3c:be:8f:5f:f7:e3:f9:
                    97:21:a2:32:97:67:d3:f9:d5:52:cb:5b:94:1c:39:
                    8d:f8:00:41:70:1e:b4:39:b5:49:e8:61:24:d3:17:
                    68:f7:16:a6:cc:57:b9:12:94:9a:41:07:0f:00:0c:
                    5d:21:e9:d8:a2:e0:c9:12:26:7b:72:ca:21:8a:d3:
                    77:c8:2d:2d:2f:5e:59:97:cc:a0:3e:3b:e1:63:8c:
                    95:ce:01:59:d0:76:77:77:78:ac:fc:8d:68:1b:9f:
                    04:8e:ed:9a:c7:73:4e:20:7d:77:19:87:3f:b1:0f:
                    6b:65:b8:d8:e7:bb:0a:33:4f:72:bf:56:f5:cb:3c:
                    0e:db:32:af:89:5d:c0:b5:31:82:7d:a6:62:c3:a6:
                    1c:b9:77:fa:6b:f3:57:05:aa:ae:49:e3:51:01:52:
                    ab:e7:83:0d:e9:3b:ff:a1:be:6a:d4:bf:c8:a3:7e:
                    77:fa:67:ec:e4:1c:23:09:4f:47:bd:f8:b1:42:49:
                    0c:f9:79:ea:6e:07:4e:64:ca:5d:d6:bb:06:75:2e:
                    af:7e:34:48:5a:ae:5a:e0:e1:92:3e:e5:8a:14:89:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4A:3C:EB:53:B1:80:B7:31:21:B9:67:3B:8E:28:3C:53:DD:68:1B
            X509v3 Authority Key Identifier:
                keyid:E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9b:65:0c:c5:8c:34:32:e1:90:ff:91:05:82:51:86:84:96:
         e1:be:59:ba:f4:2a:c0:96:d9:a6:98:f5:34:c7:4b:19:9f:f9:
         a3:37:15:3e:19:b6:54:e1:2a:27:3f:4d:8a:b4:05:5a:56:6f:
         c5:79:62:9e:d6:8a:ce:a2:94:74:f8:56:5c:38:f3:24:5b:26:
         b7:32:60:f6:f3:f2:23:fa:10:d2:80:8b:80:5a:24:85:d1:4e:
         fa:82:ae:39:ea:64:12:b2:a2:74:6b:14:6e:ef:cf:55:4e:2d:
         63:8c:98:a2:a1:cf:01:fe:86:f4:b8:a8:31:4d:2f:86:e5:9d:
         15:1e:bc:63:6b:1c:7f:79:be:d6:01:f4:42:46:ae:e4:c0:1b:
         d4:9c:32:bd:3f:66:24:3f:62:25:4a:5f:a4:be:03:49:14:20:
         4d:0c:83:8b:88:21:a0:ee:45:f7:46:a0:82:21:23:88:47:2b:
         e6:50:09:74:c3:79:5e:33:c6:11:86:9f:00:a4:f7:65:5d:a5:
         c9:f8:02:12:d2:a4:48:8f:a0:59:8c:37:27:d8:b8:de:ee:0b:
         97:14:ee:a0:58:a7:ee:b6:38:4a:c8:08:97:a8:83:1c:3d:90:
         40:ae:49:7a:21:58:7f:e1:ca:ee:a7:bf:e8:0a:b8:da:b5:08:
         7b:fb:ed:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:45:23 2026 by rpki-client