Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File:                     4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier:          sHnGOl5t7/6nyJg3bU6MxfRbZf5Um961b4xosYoclLs=
Subject key identifier:   0C:39:2E:61:92:09:F0:18:49:9E:8A:F4:1C:95:DD:67:DB:11:63:69
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer:       /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial:       019EBFFF2FFEA116B5C5797113EA562E9A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number:          1668
Signing time:             Sat 13 Jun 2026 08:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:32 +0000
Files and hashes:         1: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: gMbmTkzZ2OYrobUs7pKo3aXWNszK0yO1XwszIbtWzPc=)
                          2: BdqGs3R6xCnjEwShLrflyZwaVp0.roa (hash: RR88JIqbu0K/mTZcvwGkA42FVlGztgnaWCqdDikFkjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:2f:fe:a1:16:b5:c5:79:71:13:ea:56:2e:9a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
        Validity
            Not Before: Jun 13 08:00:32 2026 GMT
            Not After : Jun 14 08:00:32 2026 GMT
        Subject: CN=0c392e619209f018499e8af41c95dd67db116369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:13:2a:4e:81:08:89:46:15:0e:5b:34:6e:
                    18:5d:d3:30:99:86:5e:57:1b:c9:ab:4f:ed:17:7a:
                    ac:ab:ac:33:9b:e2:81:6e:52:60:85:82:eb:f1:95:
                    37:19:07:d6:0a:f3:43:52:9d:41:97:11:0a:66:a2:
                    e1:b7:2d:e0:cc:ad:7f:4e:eb:36:e7:55:8e:43:07:
                    7d:9e:7c:d7:47:73:c8:29:a6:23:40:e2:c2:cb:89:
                    d0:14:6e:94:1f:c1:b4:9f:46:b1:b1:4c:88:f9:14:
                    9b:fc:2c:73:8f:7a:83:75:46:fe:04:8c:01:35:d7:
                    97:8d:2a:27:48:30:29:47:31:04:c2:bf:6c:fa:c5:
                    d0:a1:32:be:3e:cc:b4:ad:26:b5:b3:22:b7:fb:ab:
                    73:23:99:d8:bf:30:e1:c4:41:28:41:fb:7b:16:0b:
                    23:a1:1f:36:e6:24:f2:5f:47:7b:59:8c:be:35:f0:
                    e8:c2:c9:e6:b1:c6:51:5e:03:56:07:a5:60:9c:ed:
                    51:b3:d2:bd:b0:8e:76:00:2e:71:50:08:b4:01:ca:
                    21:15:21:8c:06:21:05:9c:63:62:cf:0e:0b:1f:c0:
                    fa:ef:79:aa:62:d3:30:fc:26:03:88:67:a5:a6:11:
                    3f:c6:64:3d:50:ae:8e:15:7f:4c:6a:03:46:82:b3:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:39:2E:61:92:09:F0:18:49:9E:8A:F4:1C:95:DD:67:DB:11:63:69
            X509v3 Authority Key Identifier:
                keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:52:80:5a:07:a6:7e:da:19:de:79:06:a0:2f:62:79:81:bc:
         28:3f:c3:04:b2:9f:0b:75:5f:ba:7c:a5:ed:99:d5:1a:0f:71:
         65:88:3e:8d:8a:7b:76:0e:48:f7:d5:f8:6d:0d:7c:50:a0:7b:
         99:e3:75:6d:3f:34:1a:2f:d8:ed:c2:10:e9:09:fa:ee:f8:63:
         7d:b4:cc:34:75:0d:c4:f6:32:26:6f:37:d6:95:29:e4:1b:68:
         38:7a:58:fd:97:78:23:d3:ba:63:26:b5:8d:e2:b2:02:ff:2e:
         73:37:af:8e:9f:fb:a3:48:df:0b:2a:a5:38:a1:af:f4:b4:5d:
         14:06:3b:5d:ae:4e:d5:99:ab:0c:49:83:87:58:b8:16:57:ac:
         e3:24:37:f3:b1:c9:1b:9a:16:bf:a9:8e:f9:72:93:ff:e4:bd:
         3c:ef:37:4f:2d:0d:a9:b4:c7:9a:99:4a:d9:90:dd:69:8f:78:
         cf:91:0c:5e:f1:10:bc:e6:85:33:ed:ec:c2:de:96:49:c2:c5:
         3f:d6:8a:3f:be:eb:ac:27:bd:94:43:7a:68:18:75:15:87:93:
         76:35:6b:25:ae:5a:3a:41:7c:ea:aa:95:4d:c1:21:95:85:64:
         a7:68:31:47:67:af:36:89:13:66:30:e4:56:88:71:3b:30:c1:
         7c:38:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:16:33 2026 by rpki-client