Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
File:                     Lj7hjQl0j0bcU62UtynzERCsrDQ.mft (raw, json)
Hash identifier:          iG+m8ScFUMi+HMUeUMX3Rw4gKwlKyLae3b2ANzxrLgk=
Subject key identifier:   A6:2A:23:83:4E:18:9D:21:83:EE:A6:03:5F:CF:62:CD:49:53:1E:6E
Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34
Certificate issuer:       /CN=2e3ee18d09748f46dc53ad94b729f31110acac34
Certificate serial:       019EC1498E1574CA16437D8BA773EE56D236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
Manifest number:          01E4
Signing time:             Sat 13 Jun 2026 14:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:23 +0000
Files and hashes:         1: Lj7hjQl0j0bcU62UtynzERCsrDQ.crl (hash: 0py+uryW3Nu4RVTk13QsHaBKCbsuXu20THqjyj1bEP8=)
                          2: awws4Zg8dGTfI3KzZwB4bIm-Nto.asa (hash: DmofOOMoiDHXeSleMk3EA3S9L45l9Z1SDUpGjlromqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:8e:15:74:ca:16:43:7d:8b:a7:73:ee:56:d2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34
        Validity
            Not Before: Jun 13 14:01:23 2026 GMT
            Not After : Jun 14 14:01:23 2026 GMT
        Subject: CN=a62a23834e189d2183eea6035fcf62cd49531e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:73:14:a2:1a:0a:b6:3a:b2:3a:31:ea:eb:
                    5a:11:f1:ef:9b:4d:47:a2:71:bb:75:04:96:c6:65:
                    77:1d:ea:95:a0:75:29:a6:d3:be:04:1a:8b:51:cf:
                    c7:ed:9c:a0:a3:76:41:53:d3:f6:1f:3e:7c:33:a0:
                    5c:f0:d2:57:0b:c9:63:e3:a4:ea:21:4f:50:5d:88:
                    da:6c:28:ea:8c:97:62:4d:3e:76:5d:0e:ee:ba:45:
                    92:5a:17:91:fd:9f:7e:d9:8f:10:dd:fe:98:e9:a3:
                    0f:b6:ed:5c:4c:7a:4e:23:20:e1:d0:3d:da:82:db:
                    26:e0:54:38:39:4c:1e:e2:72:8d:34:57:58:20:f8:
                    76:2a:d7:32:0e:98:c3:68:f9:f6:b6:2d:19:36:0f:
                    21:24:0d:43:9f:f8:5d:8b:9d:bc:3a:03:5f:94:62:
                    d1:df:42:d4:ec:8e:5a:c9:e7:fe:0f:27:2b:a4:57:
                    ef:e2:51:6f:e0:14:61:4a:2d:68:ee:7d:dd:43:92:
                    0c:ea:aa:61:d3:b7:4f:f0:60:99:da:f2:94:34:3c:
                    b6:9a:83:49:d8:f7:d0:38:df:0e:76:76:a0:4a:12:
                    05:4b:74:57:2f:f9:19:c2:5b:d5:6b:54:09:6a:71:
                    f4:5e:44:de:6d:0b:8d:ff:aa:77:cf:75:8b:16:3f:
                    5c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2A:23:83:4E:18:9D:21:83:EE:A6:03:5F:CF:62:CD:49:53:1E:6E
            X509v3 Authority Key Identifier:
                keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:37:b2:0d:f7:0f:5b:62:f5:d2:69:8b:3e:37:e7:56:e9:9f:
         da:3c:59:70:0c:07:1f:dd:47:15:fb:c8:51:80:91:b1:57:4c:
         43:39:ac:c1:6a:d5:92:1e:c8:dd:ca:fe:8f:07:98:8b:c9:4d:
         77:93:e3:7a:08:66:62:6d:f3:8b:be:6c:11:23:39:3c:28:c6:
         45:d0:f7:22:d7:d3:d2:cc:15:a6:36:b4:20:64:ee:d5:55:84:
         b0:c4:6d:37:d0:3d:9d:41:fe:3f:6d:ae:28:03:3d:af:d2:7d:
         31:e9:b3:b4:2a:8e:f8:56:3a:57:d9:16:10:1b:2a:73:4e:77:
         ac:f0:2c:0a:73:4c:44:93:38:50:54:bc:c0:08:90:b9:72:7c:
         dd:f8:cc:b5:0f:6b:19:13:36:59:41:e1:da:48:09:f7:7b:4a:
         df:d5:41:60:ba:62:f7:90:5b:1c:2f:67:2d:75:36:52:f0:83:
         1f:2e:68:6c:d2:5f:62:07:61:85:c3:19:f8:2b:f0:14:e0:ed:
         32:dc:24:09:6e:07:bb:36:8d:68:64:c7:58:15:38:e9:01:52:
         91:df:a5:e2:49:ce:db:fb:59:1b:f7:04:fa:70:a8:c7:6e:f2:
         91:cb:1b:18:03:15:4b:19:20:88:c1:ae:53:3e:78:77:a8:f6:
         75:76:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:05 2026 by rpki-client