Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File:                     1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier:          qZDSqebq4BpRlFvh5TlTEsaUH2Gjf1k7gcbOzpzRuo0=
Subject key identifier:   E2:F3:03:B1:96:C8:CF:33:A0:6E:DE:BC:91:62:9E:90:98:A0:84:26
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer:       /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial:       019EBE7FBCBD1CD3430F86594FB8E81A8B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number:          1956
Signing time:             Sat 13 Jun 2026 01:01:42 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:42 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:42 +0000
Files and hashes:         1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: iBKjf/f9pznGA5YCZKk7J7NY4+Nf2YVHhKa+Rjq/CCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:bc:bd:1c:d3:43:0f:86:59:4f:b8:e8:1a:8b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
        Validity
            Not Before: Jun 13 01:01:42 2026 GMT
            Not After : Jun 14 01:01:42 2026 GMT
        Subject: CN=e2f303b196c8cf33a06edebc91629e9098a08426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f4:cc:0e:9d:b7:d8:b5:74:41:af:de:dd:58:
                    46:af:92:7b:d1:fa:a8:df:9d:d2:38:f7:68:23:45:
                    1f:2c:22:e7:d2:1e:fe:04:2a:61:96:8f:3a:5f:76:
                    55:83:ac:28:cd:67:54:5c:e1:bc:ac:9e:99:5a:ef:
                    27:ff:15:51:75:ef:8d:a4:95:9a:15:6f:90:d7:98:
                    26:29:a4:76:f0:66:a6:bc:fd:3a:c7:1d:46:5d:29:
                    82:da:04:ab:41:8b:53:55:f9:da:69:c6:e2:4b:4a:
                    8e:ad:54:4c:16:51:8b:8e:f3:e5:86:fe:1f:84:05:
                    c8:b2:e0:76:eb:46:52:97:6a:67:4f:6e:d0:07:15:
                    5e:4b:2c:1e:03:5a:05:ee:62:c4:a2:43:49:47:97:
                    d7:4a:b9:aa:cf:aa:8b:d8:0e:67:f4:bd:b9:e2:47:
                    47:95:55:ee:01:b1:f4:b3:85:c7:51:37:78:8e:3e:
                    01:22:7f:88:2d:4f:d7:27:a4:2a:12:87:01:54:48:
                    b6:13:74:75:ba:5f:bf:4f:c9:c3:18:6f:a2:9b:e3:
                    92:da:ed:ce:09:56:c1:4e:e3:72:f5:d1:28:df:b0:
                    52:71:09:84:61:74:9c:c7:24:65:0b:9f:5e:ca:98:
                    89:c8:19:29:23:aa:17:ab:39:a6:d4:6b:63:8d:36:
                    43:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F3:03:B1:96:C8:CF:33:A0:6E:DE:BC:91:62:9E:90:98:A0:84:26
            X509v3 Authority Key Identifier:
                keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:1b:26:95:41:49:be:b1:0a:ef:cf:30:c8:7b:b1:39:f9:80:
         61:e3:0e:62:56:e9:31:8b:0c:9c:bd:34:65:2a:19:14:28:7c:
         db:61:94:cd:29:7e:bf:a6:a2:0f:24:c4:6e:86:8a:3a:10:18:
         2e:a1:a7:e8:80:fe:7b:bc:c1:7b:80:ec:06:86:33:13:7f:0c:
         f6:ba:f4:34:3b:49:01:ed:fb:b4:35:14:62:17:2f:19:76:87:
         df:db:ed:0a:a8:7c:fe:ec:65:03:11:08:8b:a0:e4:06:95:da:
         17:fc:0d:4c:ce:8d:53:15:62:c0:0e:3d:c8:af:39:00:35:7c:
         76:8d:c2:e5:a0:a1:30:fd:ea:ce:8f:f6:77:65:fa:bd:c1:ff:
         2a:3c:c7:3b:4f:8c:87:c6:cd:5a:df:0d:00:21:fd:48:29:9e:
         25:8d:e6:ce:2f:be:07:0b:ca:1b:14:8d:9d:01:79:22:f2:65:
         aa:0a:ef:04:96:38:c4:fb:e3:ae:44:29:bc:57:21:19:61:a1:
         9c:bb:a0:67:b8:21:9b:32:b1:6e:d0:18:39:ca:9a:62:e2:c5:
         b1:d6:60:11:fd:31:9d:04:88:4f:54:4f:b4:96:71:ca:78:a3:
         3f:58:60:62:c0:94:73:2f:b8:b1:a1:f3:15:8e:cb:51:9d:f0:
         bd:fd:eb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:29 2026 by rpki-client