Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
File:                     SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft (raw, json)
Hash identifier:          wYPtWrqULuzKsVOR37H93mQyvqA0vHiwUBEqIWjg6i8=
Subject key identifier:   05:2D:41:C8:4D:35:75:A6:C7:57:B5:D7:EC:B8:79:D3:E3:F9:9A:0E
Authority key identifier: 49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B
Certificate issuer:       /CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
Certificate serial:       019EBFC9457078D8B7FC94208B2163A881F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
Manifest number:          33
Signing time:             Sat 13 Jun 2026 07:01:39 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:39 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:39 +0000
Files and hashes:         1: SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl (hash: WNCubyNyPtamft59QivHDB6W9L9oKl2Vh8Zo40fYQ7E=)
                          2: nAuNT8fFeVBjZtYgykFbuWst1x8.asa (hash: mdAsPuC47rBd10CkK+9D8gN5/QKzTG6Rm9fyadbl32k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:45:70:78:d8:b7:fc:94:20:8b:21:63:a8:81:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
        Validity
            Not Before: Jun 13 07:01:39 2026 GMT
            Not After : Jun 14 07:01:39 2026 GMT
        Subject: CN=052d41c84d3575a6c757b5d7ecb879d3e3f99a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:19:0c:e1:1d:82:c4:8a:08:59:01:3f:75:
                    74:2e:bf:21:20:56:9a:c0:ef:cf:5c:11:ea:96:bb:
                    8f:fb:6a:8e:f8:b6:ca:63:43:57:a4:c2:95:be:e9:
                    74:61:bc:1d:ef:77:38:b0:01:9d:77:d3:82:3d:8f:
                    7e:03:a7:d4:9d:52:6e:0b:12:60:8b:42:65:87:44:
                    f4:98:12:5e:25:69:fd:dd:f5:82:ec:69:49:5f:cc:
                    bf:ba:70:48:db:8d:e5:50:51:c9:e4:ec:f0:fb:64:
                    c3:d9:72:53:ae:88:b0:e8:0a:e7:e4:60:db:8e:17:
                    ed:8c:8a:17:a9:39:61:25:b8:68:aa:e1:34:36:70:
                    a3:40:34:a5:3b:1b:3c:4f:0d:fe:d8:6e:ab:c8:6e:
                    3e:54:78:1b:15:c8:6f:eb:23:bc:27:17:8e:5c:b0:
                    83:d1:86:89:53:7a:7d:a1:71:34:1f:84:21:a1:17:
                    dc:f2:22:96:c9:b3:ac:2b:d0:36:1c:5a:72:cd:3e:
                    b6:ae:92:ce:6a:8c:96:82:f2:fb:e5:bd:2d:8c:fa:
                    e1:ec:3b:14:b8:f8:8c:bf:60:ba:45:31:ff:19:a7:
                    39:d2:d6:b9:b9:60:e0:fa:fd:24:55:7e:2e:c3:14:
                    e9:d2:ee:97:e4:41:87:8f:74:e2:aa:25:46:09:f2:
                    79:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2D:41:C8:4D:35:75:A6:C7:57:B5:D7:EC:B8:79:D3:E3:F9:9A:0E
            X509v3 Authority Key Identifier:
                keyid:49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:26:cc:d7:e4:33:f7:b5:0a:90:ac:a0:c6:a0:58:f4:75:94:
         95:9e:fa:d4:67:56:12:f4:f3:76:5a:1c:c6:50:57:e7:4b:48:
         4a:76:9f:d9:78:6e:85:77:31:6c:d8:95:19:72:9e:9b:ca:3b:
         54:b9:5a:8e:5e:27:04:0a:56:56:8d:12:a1:02:04:b0:22:2c:
         ab:f1:84:d6:50:e2:46:c8:50:43:6f:89:96:96:9b:11:aa:02:
         49:b6:57:9b:f2:62:76:fe:1e:32:51:34:5a:79:42:b1:9f:37:
         ab:b0:9c:94:2c:19:e1:21:30:59:b9:fe:71:56:c9:8b:40:e7:
         62:17:3a:30:d5:74:50:1d:81:45:4a:a7:dc:09:32:b3:8c:bf:
         7d:86:f3:a8:d4:22:9b:5f:44:9d:8c:bf:8d:88:3c:60:9b:f7:
         9b:29:4e:21:d3:c7:15:14:31:dd:d4:9f:eb:2d:37:f0:02:e5:
         3a:b0:19:9f:04:0d:af:22:18:63:9c:ab:22:92:c5:50:11:37:
         c6:f2:4b:8a:be:25:f3:f6:f3:70:6d:84:2a:79:7a:4b:bf:c3:
         cb:b6:34:50:1e:9d:db:cf:37:f0:61:57:36:df:4f:72:96:62:
         b6:b5:a4:31:ae:fb:df:8e:89:6f:e7:c3:81:7a:99:8e:ea:11:
         39:8b:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:28 2026 by rpki-client