Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File:                     4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier:          RdNIWInZBu1oiSa98FKmwpwndp5DdBmwqPwFT2eX5y0=
Subject key identifier:   9E:3E:E7:6F:2C:FA:47:FA:6A:9B:80:B8:60:C4:B1:60:94:B3:D1:93
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer:       /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial:       019EC224EFF731E633F125DA213BF63FEF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number:          168B
Signing time:             Sat 13 Jun 2026 18:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:01 +0000
Files and hashes:         1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: ZXdgp66iMNJJBHFrBhsO0VGmCU0uCP0ImQdTpFJNSV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:ef:f7:31:e6:33:f1:25:da:21:3b:f6:3f:ef:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
        Validity
            Not Before: Jun 13 18:01:01 2026 GMT
            Not After : Jun 14 18:01:01 2026 GMT
        Subject: CN=9e3ee76f2cfa47fa6a9b80b860c4b16094b3d193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:5f:16:3c:05:68:d7:b9:2d:77:50:ea:8e:
                    63:20:3b:b6:ab:d6:c0:cb:fd:16:14:44:62:36:c5:
                    7d:13:4d:14:72:20:63:42:a4:52:87:d7:39:58:12:
                    cf:e9:55:af:70:30:f0:e4:a4:6a:76:1d:bb:21:00:
                    60:2d:93:62:71:71:90:b2:f0:af:9e:9d:1c:7e:2c:
                    2c:dd:de:cd:00:8a:14:2c:6e:2b:db:38:7b:39:91:
                    35:71:77:33:7b:b2:a7:08:22:93:9a:82:f5:b6:b1:
                    a6:66:a5:2a:68:b9:3f:2b:94:b5:83:e2:85:c9:c1:
                    df:60:70:b9:57:c6:30:9f:d7:7c:6c:88:1c:41:c5:
                    39:b1:32:49:c1:e1:bf:00:29:e3:9a:3f:67:ee:28:
                    87:b6:67:df:5f:b0:3a:ad:4a:e2:3e:49:fc:c4:9d:
                    a9:77:15:66:ef:d3:e8:0f:98:c5:a0:a4:4c:53:3a:
                    8f:f1:eb:32:fd:26:a6:79:4c:63:e5:04:3b:68:90:
                    5f:dc:af:1b:64:de:1e:d5:89:dc:cc:95:cf:5d:eb:
                    33:b4:78:91:7c:ab:97:45:8d:cd:0b:25:f7:d1:fc:
                    30:1e:4f:b7:b8:c2:8c:97:6d:f6:08:02:1d:4f:bb:
                    1d:4b:01:0e:48:da:34:1c:f0:b6:16:93:eb:bc:ce:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3E:E7:6F:2C:FA:47:FA:6A:9B:80:B8:60:C4:B1:60:94:B3:D1:93
            X509v3 Authority Key Identifier:
                keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a3:1a:9c:dd:c9:0d:4f:d1:0e:16:65:11:56:f2:51:29:6c:
         ec:9e:8b:d3:02:75:1d:41:c1:19:ce:c6:6d:1a:41:77:f4:fb:
         07:c5:ab:c7:b0:eb:d2:67:bc:06:6f:77:99:5d:36:dd:d3:66:
         bb:1a:23:fc:cd:0f:15:93:09:73:9f:ea:64:ff:e2:3b:f4:45:
         29:9a:bb:2a:df:72:a5:69:ad:91:c7:ee:a1:91:36:d3:33:85:
         6f:b0:3b:4f:0d:0a:11:92:3b:ff:a7:d5:45:fe:4c:41:46:ff:
         77:a9:ed:6c:33:0e:ae:80:98:43:9e:fb:c5:c1:31:42:e1:fa:
         a5:cb:e9:ac:4a:e8:9d:e1:07:45:88:c7:16:47:d7:90:cc:ee:
         17:66:8e:c5:d2:4d:b0:d5:bb:6f:3d:27:2b:93:8f:e6:75:79:
         5d:a2:94:b7:24:87:a7:01:f7:b2:09:db:bb:67:f1:17:3a:6b:
         f4:6e:6f:84:cb:7b:90:6b:4a:f8:b2:26:26:72:6c:fc:1d:50:
         9b:55:f1:1d:ac:df:7e:8d:c8:d2:03:cb:37:a9:49:0e:8e:b0:
         a1:92:87:d7:9d:d3:0b:bf:fa:b7:89:fe:bf:ed:4a:66:17:ca:
         a8:18:1a:90:3a:b1:6b:f7:54:cc:18:2d:da:db:a6:ec:ce:be:
         6b:8c:89:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:07:57 2026 by rpki-client