Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
File:                     tRidnqgtX7tm1sEfGHYzR2A04N4.mft (raw, json)
Hash identifier:          hHCf3+fUQppWj/THADttpHn9Iun+V+BpZIkLBKF+ev8=
Subject key identifier:   E3:16:08:6F:A8:08:4E:AC:04:5F:EB:EE:5D:2A:CD:85:D7:05:21:0C
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Certificate issuer:       /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial:       019EC06D1A5CB69586C1B8E9A8D213AA4B06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
Manifest number:          013C
Signing time:             Sat 13 Jun 2026 10:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:36 +0000
Files and hashes:         1: 7GwQxSlC6XgRoIpTEwZKgVnWS-4.roa (hash: xTOxR17JVwPWxSBMYNixvTz0OcXATfB8jZao2sdgwZ8=)
                          2: PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa (hash: LsqKFis/T/54SQiHP5UPnUKT29GNEt5RyIpD8UjP9yM=)
                          3: TeVnupeK_YGYnRPsXm4BzJfTjS8.roa (hash: +to8DEmlcRGaEadfSEWc6hlZ2GarI7KNFF5xKs1DZR0=)
                          4: a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa (hash: WvDo87B2C+QVONEixLsbWJGXRyfPQL9c6V0kT+6W0SI=)
                          5: cwmNk6bauKUzUIBHxMYj4Ucw8iM.roa (hash: h5yQVWC+XIfRSSbHYLwBKmXd6G/qYJCUqPZaJnYQNT8=)
                          6: gCEAfeGtC7sCDWjwRgdE41W_tBw.roa (hash: shPX6M61gEwMPP1QY1pi1KXBEKTnDFJ7aoQzTSjSFHw=)
                          7: p3wpRRs-f7GQUm8KtIUlma6wjSs.roa (hash: 90E81RrURGxHLOrJQ2EQ5/Y8TtYWMesX5r41cRtv1NA=)
                          8: tRidnqgtX7tm1sEfGHYzR2A04N4.crl (hash: Xku58/gLSmHazY+vrLxANgghl2zwwSEPZl0YRY2V4xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:1a:5c:b6:95:86:c1:b8:e9:a8:d2:13:aa:4b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
        Validity
            Not Before: Jun 13 10:00:36 2026 GMT
            Not After : Jun 14 10:00:36 2026 GMT
        Subject: CN=e316086fa8084eac045febee5d2acd85d705210c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:1c:6b:fd:ee:97:5f:9b:76:f1:46:b0:dc:
                    fd:e1:3d:14:78:06:3c:8a:3e:e4:f4:92:1a:0e:dc:
                    76:78:c7:3b:64:53:f1:a3:a5:57:1d:f9:cc:77:87:
                    7e:a3:b0:ea:60:17:90:a6:bf:33:ec:2b:ef:4b:b3:
                    1e:85:42:f8:10:4c:e6:ab:31:4f:02:d4:3d:e5:6a:
                    86:b1:1c:a2:e2:30:5e:95:4b:31:c2:31:2a:7b:e6:
                    29:fa:b2:95:f0:44:62:5d:9a:89:12:62:d3:a2:9e:
                    35:b6:92:6d:e5:05:91:59:43:b8:63:45:54:a8:ff:
                    60:56:46:11:90:ce:69:7f:81:41:8e:1c:68:f8:3a:
                    f1:60:48:59:c1:f6:aa:b8:55:b7:26:9f:cb:51:b0:
                    4b:eb:fd:c7:e6:6a:f0:ef:5c:84:5e:d4:84:ac:82:
                    d0:86:09:3d:0f:7a:85:55:ac:76:8c:35:66:57:10:
                    66:27:6a:72:65:21:55:57:96:6d:91:58:72:81:ca:
                    cc:05:56:58:f5:dd:e1:ac:85:09:82:af:d4:93:83:
                    d4:3b:6f:6c:11:be:ee:a0:17:e9:8d:2b:f9:e2:52:
                    ff:6a:6a:61:c4:30:fb:85:db:53:5a:2b:68:62:66:
                    ca:f7:3c:f5:32:8a:d4:1e:e4:60:1b:79:97:4e:1c:
                    90:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:16:08:6F:A8:08:4E:AC:04:5F:EB:EE:5D:2A:CD:85:D7:05:21:0C
            X509v3 Authority Key Identifier:
                keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a4:a5:7d:c9:3c:77:88:41:76:f4:0e:82:15:ab:a2:a5:59:
         83:e7:f9:7d:a3:c5:56:75:73:03:28:90:48:c8:5f:e7:06:2e:
         f7:98:9d:1d:ce:1d:2e:80:b1:d6:2c:43:48:b9:90:d2:6e:97:
         cf:c4:8e:d8:f6:dc:27:f4:c6:10:99:6b:91:76:36:98:71:bb:
         a6:f5:8f:73:a3:9b:be:40:00:15:ae:fe:60:0a:a6:34:57:d0:
         3b:77:be:42:1f:74:dc:d2:20:08:dc:83:36:7e:d8:d0:4e:cb:
         7f:5f:85:05:59:2c:31:02:b2:ce:53:70:ce:1e:2d:65:95:99:
         4f:d9:83:64:2c:e4:6c:4c:de:43:80:81:ca:0f:8f:42:9a:49:
         ad:69:fd:61:b4:37:c0:83:5e:35:09:1b:02:71:0a:51:77:fc:
         d4:ee:40:11:9d:fb:21:21:eb:d7:1f:0e:ec:0f:9f:34:99:0a:
         d4:17:f1:5d:71:f1:a7:13:42:61:f1:e2:2c:bb:2d:fd:76:25:
         e6:54:52:85:88:8c:6c:eb:7f:76:06:b9:ab:99:b7:06:ee:d6:
         40:69:cb:71:46:95:e7:92:9d:c5:f4:40:12:d2:07:1c:4b:83:
         8c:d0:25:52:d9:ce:e4:83:29:3f:28:be:7f:a2:56:f0:e6:98:
         f8:fe:1c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:51:43 2026 by rpki-client