Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File:                     1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier:          /6SH9gILs1t9wplX7KbMCQfKE/t0FBgzECvEn7iwIP4=
Subject key identifier:   6D:74:97:3C:E1:26:6A:1C:29:F0:D7:A7:60:0E:F9:04:C8:7A:61:62
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer:       /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial:       019EBF5A93782043AF37A1EA2812A595CD7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number:          0D04
Signing time:             Sat 13 Jun 2026 05:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:44 +0000
Files and hashes:         1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: qT4doxQqfENjE8bYhfwXE8OKlcL5pDGv6SAwX3m+whg=)
                          2: Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa (hash: 0p7ZxsSara0zAMrBMjKosv4Q0grMmOgXjOvvhV5ruz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:93:78:20:43:af:37:a1:ea:28:12:a5:95:cd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
        Validity
            Not Before: Jun 13 05:00:44 2026 GMT
            Not After : Jun 14 05:00:44 2026 GMT
        Subject: CN=6d74973ce1266a1c29f0d7a7600ef904c87a6162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fa:43:e5:31:ec:62:f0:cf:fd:3f:d3:57:88:
                    f8:ea:1f:f9:18:cf:ed:19:65:11:50:75:11:4c:bc:
                    f3:b9:7a:04:3c:96:24:ff:80:a6:43:d9:93:f4:46:
                    a5:5e:d6:54:37:79:04:3a:b0:7b:b0:ac:cf:a1:34:
                    35:49:1c:e0:57:3e:dc:b6:a3:81:15:81:55:a2:79:
                    0a:7a:13:24:8a:08:a3:7f:7e:65:c4:40:84:78:fc:
                    b5:3b:83:2f:15:cb:29:b1:9c:93:76:6e:42:d5:9e:
                    71:b3:53:25:aa:94:b6:77:97:15:24:2e:a9:26:0b:
                    f6:97:9a:84:a7:fd:8b:f6:29:0b:43:c2:bf:28:c6:
                    43:58:8e:79:54:3c:5b:22:a7:36:99:29:d0:f7:0d:
                    26:15:c4:ff:8f:7c:2f:d8:ca:ae:f5:73:4a:bb:6b:
                    70:7b:83:7c:57:0a:a1:f5:0f:4b:ab:c4:3a:5c:e7:
                    61:3e:60:62:fb:14:05:d5:b8:52:67:b9:da:ea:24:
                    ca:10:b1:90:92:86:c1:cd:6e:5f:04:4d:c2:e3:79:
                    eb:63:6f:3d:b4:c5:e0:b1:80:0d:8c:6a:99:59:aa:
                    41:42:c0:13:94:a8:7c:34:08:e8:80:bf:1c:b0:6a:
                    05:6b:b3:5d:05:20:a8:f0:12:aa:06:9c:12:42:6b:
                    f1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:74:97:3C:E1:26:6A:1C:29:F0:D7:A7:60:0E:F9:04:C8:7A:61:62
            X509v3 Authority Key Identifier:
                keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9b:d2:80:18:29:c7:e6:0c:44:90:06:2e:28:e2:b1:96:97:
         a0:ac:03:61:71:65:a7:58:6b:ea:c7:50:ce:1e:98:fb:08:f7:
         77:13:3b:5d:25:97:02:80:1e:a6:0b:bf:6f:02:32:13:89:e3:
         65:6d:5e:d9:66:f5:d8:cf:8a:7f:6d:5e:fd:8e:25:8f:e7:f1:
         66:a3:70:79:37:da:7d:ee:5e:49:1e:71:fd:b0:fd:53:c9:90:
         a9:d5:c0:43:df:e7:81:f4:15:be:4c:f2:9d:03:3b:61:2d:f1:
         f1:a4:d6:b0:6b:eb:41:f0:73:5e:83:3c:53:60:5f:3f:83:89:
         c2:d4:f2:5a:84:8f:5b:fa:db:72:9b:2c:d7:76:7f:01:45:a3:
         a5:19:e9:94:a4:ff:f7:e2:99:f9:88:37:bd:f4:c0:92:04:93:
         2e:c9:c8:8a:7c:eb:ed:9f:23:a9:68:c9:2c:eb:36:8f:d5:65:
         9f:8e:93:d9:1f:f8:26:93:07:72:36:b3:f1:8c:a7:c1:25:c2:
         36:fd:58:b6:0a:3e:64:43:ab:7d:aa:be:7c:eb:7c:6d:7f:c9:
         a5:70:fc:90:d3:53:15:93:c7:98:1a:e3:14:11:ae:5d:91:c2:
         fa:20:2a:6f:fe:f9:95:2f:5d:59:98:fa:f7:a1:f8:94:da:ce:
         09:56:51:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:16 2026 by rpki-client