Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File:                     4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier:          0y4/xiBu4d9x3dc4qDHwR1vhX0H3YnJlJ2FTZKp/LFc=
Subject key identifier:   DC:B3:F7:1F:3A:8A:7B:08:23:3B:CE:69:8D:C6:E4:18:32:F1:0C:91
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer:       /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial:       019EBDDAB0998E0D497BA0DB4ACF0AC3F57F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number:          0674
Signing time:             Fri 12 Jun 2026 22:01:26 +0000
Manifest this update:     Fri 12 Jun 2026 22:01:26 +0000
Manifest next update:     Sat 13 Jun 2026 22:01:26 +0000
Files and hashes:         1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: 1GuO8cu5k8Npl/99Qv3HvSfsKoACL6IZpWy9dvuhMfk=)
                          2: mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa (hash: JasekT6eOU4dUWNEwUdVF7G0JwY0SRq9zwzctkh7yh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:b0:99:8e:0d:49:7b:a0:db:4a:cf:0a:c3:f5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
        Validity
            Not Before: Jun 12 22:01:26 2026 GMT
            Not After : Jun 13 22:01:26 2026 GMT
        Subject: CN=dcb3f71f3a8a7b08233bce698dc6e41832f10c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:89:a9:b6:e9:a7:bc:ef:bd:5b:48:bb:c3:d8:
                    fa:ed:cf:09:d4:f6:75:8c:7d:e8:13:d1:ff:a2:d9:
                    a5:66:4c:c7:fa:9b:c1:40:d9:fc:e6:25:a0:8d:d1:
                    5e:bb:10:bc:f6:19:0d:a8:48:7d:09:24:66:ba:23:
                    7b:d7:86:53:bc:b3:7a:16:ce:be:b6:af:36:2b:bf:
                    bb:c8:90:bb:79:59:c2:9f:ff:ab:7b:03:f0:30:db:
                    75:5e:28:d7:b3:78:7f:1c:8a:e0:c1:92:bc:d3:fc:
                    59:8f:8d:ef:ca:37:19:fb:ef:ef:85:c2:f8:b7:e1:
                    34:85:6b:63:0d:2d:49:e0:3e:0b:28:25:e7:3d:8a:
                    f5:da:52:4f:18:bf:4f:b6:1e:85:c1:3e:dd:18:50:
                    9e:54:cf:9d:4b:ca:9b:21:b8:5b:98:5b:c0:ec:04:
                    f0:be:34:7b:4c:1b:33:a3:92:a7:f2:7c:c2:6b:f3:
                    c4:e6:1d:ce:f4:66:eb:73:5d:7b:6c:ed:51:b1:c9:
                    a6:e0:d6:3c:46:f3:6f:23:91:9f:2b:a7:ff:ff:ad:
                    65:2b:87:53:44:7f:9b:cf:a0:54:71:f9:02:fb:fb:
                    e2:ad:c4:68:05:87:0a:e2:3f:cb:02:bf:7e:b0:0f:
                    ae:5a:89:68:f8:ad:10:d1:57:41:0c:90:81:0d:75:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B3:F7:1F:3A:8A:7B:08:23:3B:CE:69:8D:C6:E4:18:32:F1:0C:91
            X509v3 Authority Key Identifier:
                keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:58:50:4e:ab:e3:f6:dd:21:de:cd:b1:34:47:19:9c:82:db:
         30:83:34:d6:21:43:fb:4c:19:57:7f:38:e4:52:28:d6:d1:fa:
         6d:58:72:f1:d1:b7:3d:04:fe:0d:5e:8e:1c:c9:2e:b2:bb:29:
         ee:e2:e1:dc:35:4f:23:7e:48:fa:6a:95:91:98:7f:76:cd:4e:
         fc:a0:fa:69:69:9e:0d:9f:84:f4:ba:9a:ea:4e:f0:9d:4e:2a:
         21:f6:47:c5:0c:02:c0:3b:81:d9:f9:2a:0d:2e:be:47:5b:68:
         1b:6d:76:4e:10:dc:b9:8f:d1:e0:5d:d7:ea:ca:d2:b4:54:82:
         a5:bb:fb:eb:b2:00:e7:1e:e6:3a:cb:00:99:4b:40:25:cf:d1:
         10:26:1a:3f:b7:f1:fb:ad:74:35:e4:56:00:cc:46:38:a4:53:
         ab:99:86:f7:63:eb:95:7f:78:24:e3:dc:be:3f:1f:4b:ae:b0:
         fe:5a:bf:c6:04:86:f8:b4:e0:bc:c5:67:11:40:b1:3f:3b:50:
         65:d6:3a:8b:e3:85:86:58:61:dd:f9:e9:75:ea:95:a2:77:f9:
         04:96:aa:6e:07:aa:f5:fa:ce:da:c7:19:31:01:2f:4f:5d:11:
         bb:80:40:04:7e:5e:70:78:5a:58:2b:48:94:3b:12:e9:85:da:
         88:54:8e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:01 2026 by rpki-client