Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
File:                     4chbPfGRu7SHTyElY_U2-CPqQzI.mft (raw, json)
Hash identifier:          b9Hnd0eJ04aVqNYgCJAury8U8icf/GZ2RJASSkyX7AQ=
Subject key identifier:   C1:07:05:36:33:BE:06:EC:AB:CF:AF:AA:94:8E:21:AA:18:58:B4:FB
Authority key identifier: E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32
Certificate issuer:       /CN=e1c85b3df191bbb4874f212563f536f823ea4332
Certificate serial:       019EBE7F9803908E05CAE77BCD39A6EAE146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
Manifest number:          C7
Signing time:             Sat 13 Jun 2026 01:01:33 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:33 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:33 +0000
Files and hashes:         1: 4chbPfGRu7SHTyElY_U2-CPqQzI.crl (hash: 0eCqa1PPHsP0Yu0lZ+al4w/kf8oV5UYFAdRgszoGPQU=)
                          2: HGJATmPx_lb-up56PA9sws4LXzM.roa (hash: rP4ippAFPKo3N/gSznr5pBHOOcDkPGB3VJz0DMBiGGk=)
                          3: ZKlPGz4kI_uOgsyApeExYa33cEk.asa (hash: gHtpE0/vy2kYs9vRGqmcozAsLFQTnGOPyUQhZ0q23wc=)
                          4: vR8-TTbXfVDHZdgSnOr8TDlwnBk.roa (hash: jMzlWmBuharjGRH2L1aGRJN/4ce3UkOwdCSnIziX6x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:98:03:90:8e:05:ca:e7:7b:cd:39:a6:ea:e1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c85b3df191bbb4874f212563f536f823ea4332
        Validity
            Not Before: Jun 13 01:01:33 2026 GMT
            Not After : Jun 14 01:01:33 2026 GMT
        Subject: CN=c107053633be06ecabcfafaa948e21aa1858b4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:db:e8:c7:86:eb:61:46:0f:a4:6b:4b:56:7b:
                    3c:d8:11:27:ea:e3:d8:06:0f:33:e2:6b:48:a1:85:
                    8e:a5:e9:16:bf:5c:30:d1:7a:11:ab:20:05:bd:3a:
                    46:16:7b:31:da:64:ae:5c:83:51:b4:6e:c6:25:57:
                    6a:17:e6:3b:ec:42:70:e1:11:89:99:b0:5d:ec:02:
                    66:d7:e7:f6:1b:86:01:29:65:e0:31:de:4c:62:d6:
                    7d:89:df:00:c6:34:04:f0:e1:97:c0:c5:b3:e7:9f:
                    ae:88:56:af:1e:5c:79:2f:90:de:6a:e2:8f:2e:9b:
                    bd:27:dc:96:c7:c3:bf:f1:ba:ed:17:c6:73:a4:4a:
                    11:a7:3b:b2:73:fa:1f:10:ff:6f:78:ce:18:ae:61:
                    e9:d7:a6:15:6a:07:64:1f:91:8d:6b:1c:29:7a:8e:
                    d1:76:d0:90:05:6b:75:10:d9:ce:f1:b1:04:44:90:
                    b0:fe:e3:52:33:6b:d0:58:a7:84:10:fa:f5:ec:cd:
                    5f:e1:43:ac:d6:48:53:27:c6:fd:8a:19:32:b7:4f:
                    9d:97:69:99:db:ef:a2:70:9c:66:de:3d:2a:f8:cb:
                    c8:6c:3d:d3:af:f5:5e:32:12:bf:5f:89:f2:87:b4:
                    26:68:79:42:bf:34:9f:c6:84:cd:54:90:fc:f2:5b:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:07:05:36:33:BE:06:EC:AB:CF:AF:AA:94:8E:21:AA:18:58:B4:FB
            X509v3 Authority Key Identifier:
                keyid:E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:71:88:db:c6:3f:f6:6c:a3:58:a3:5a:f5:59:92:b2:e8:a4:
         cf:eb:2e:9e:7e:ff:c5:95:6a:6f:63:71:0a:cd:92:19:04:81:
         7c:26:35:63:7a:9f:1d:70:eb:b1:80:60:31:52:2c:c0:b7:7a:
         e1:36:1f:0a:e4:cb:b7:85:3d:53:4a:b3:85:a8:68:33:5d:17:
         da:2f:43:ab:1f:42:12:1f:79:2e:44:84:60:f8:6c:8e:7d:a4:
         a9:78:f7:fe:78:e3:6a:1d:bd:eb:e3:9b:bc:ba:e3:4d:12:39:
         2c:fe:eb:d8:21:68:6a:dc:f4:df:2e:07:91:5c:aa:02:62:a1:
         4e:6e:66:9b:c1:be:49:cf:03:ba:0e:a1:a0:c6:5c:be:50:f6:
         1c:0a:80:c6:db:24:db:f2:95:30:30:7c:8c:5b:3f:ee:ca:5f:
         e2:b6:a0:b1:ba:9c:fe:d9:3d:d7:25:61:3c:1e:4a:3a:bb:95:
         af:e5:e1:e1:65:95:57:a3:f9:9e:5d:00:7d:2e:ed:0c:ea:9b:
         3e:ab:0f:80:ab:2a:9e:0c:1d:04:5c:8f:a6:85:91:fe:86:fc:
         b1:a1:34:d9:d8:c1:6a:26:9e:de:0b:02:28:ed:ff:03:67:11:
         93:83:40:4f:42:f1:7e:cd:71:ec:ad:61:e2:4b:52:5d:65:18:
         c1:57:5b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:47 2026 by rpki-client