Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.mft
File:                     rEurYHxtG3yr2rprD6lzh7jGaEI.mft (raw, json)
Hash identifier:          8geju8c7oanmqztkz9n9FgO9w+6yIZs+veZJWysOWsM=
Subject key identifier:   39:71:24:50:94:3D:46:E2:93:9B:B0:40:00:07:8F:11:0D:E6:57:FB
Authority key identifier: AC:4B:AB:60:7C:6D:1B:7C:AB:DA:BA:6B:0F:A9:73:87:B8:C6:68:42
Certificate issuer:       /CN=ac4bab607c6d1b7cabdaba6b0fa97387b8c66842
Certificate serial:       019EC337FABBC2A7F51EEFB99779F0E0DF83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rEurYHxtG3yr2rprD6lzh7jGaEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.mft
Manifest number:          40
Signing time:             Sat 13 Jun 2026 23:01:26 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:26 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:26 +0000
Files and hashes:         1: Hvi_Yxf-YWE7MGBiG7_5rr2OC3U.asa (hash: +8EVDa81XBRjWuEtrxmjkaqdO5dbuw4tlXAIIdPEpPQ=)
                          2: rEurYHxtG3yr2rprD6lzh7jGaEI.crl (hash: GKGThzOZ1EUByztae0+HcYUgdcx3zV0rPOh/Nz7M1Ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rEurYHxtG3yr2rprD6lzh7jGaEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:fa:bb:c2:a7:f5:1e:ef:b9:97:79:f0:e0:df:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4bab607c6d1b7cabdaba6b0fa97387b8c66842
        Validity
            Not Before: Jun 13 23:01:26 2026 GMT
            Not After : Jun 14 23:01:26 2026 GMT
        Subject: CN=39712450943d46e2939bb04000078f110de657fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2c:77:cd:c8:aa:2c:09:fc:36:d8:d5:e1:f9:
                    ec:ef:5b:98:43:3e:f1:de:bf:bd:1f:03:ff:69:48:
                    1c:9c:5d:45:a0:b1:db:21:50:ff:d8:a5:94:c2:27:
                    47:3b:31:d4:e2:fc:88:fa:96:63:83:82:37:aa:4c:
                    0d:2c:0b:e1:ac:fc:c7:a3:7c:4d:b9:12:05:ae:5a:
                    cd:f1:cd:23:25:38:74:59:ca:33:14:fc:60:f1:12:
                    3a:05:1e:54:50:dd:b2:77:b1:92:06:92:6c:98:d4:
                    9d:61:db:01:f0:c5:13:dc:86:d9:14:7c:18:c1:db:
                    a7:ab:de:09:3e:74:04:55:fa:40:13:5f:ba:ad:50:
                    8a:24:b0:93:19:ab:e5:fb:b8:71:3e:52:7e:3c:86:
                    95:70:42:a9:03:5a:9c:02:6d:fa:69:4e:36:e9:38:
                    b6:9c:c2:36:ec:01:3d:e0:b4:e1:8e:2b:f1:da:ba:
                    45:ec:73:54:22:c3:f4:a8:5a:a8:d1:d6:b0:7a:11:
                    a6:dd:53:cd:fe:53:dd:62:7b:db:a4:f6:19:93:9c:
                    32:43:6f:72:fe:1f:df:c9:80:9e:b7:b4:1d:be:a1:
                    1d:05:a7:bf:f2:83:31:bd:20:e4:4f:70:b4:de:e8:
                    32:97:41:37:2d:f9:e5:d3:95:6b:a6:6a:c2:6b:8b:
                    4e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:71:24:50:94:3D:46:E2:93:9B:B0:40:00:07:8F:11:0D:E6:57:FB
            X509v3 Authority Key Identifier:
                keyid:AC:4B:AB:60:7C:6D:1B:7C:AB:DA:BA:6B:0F:A9:73:87:B8:C6:68:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEurYHxtG3yr2rprD6lzh7jGaEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:db:dc:07:49:7d:a4:17:95:76:86:fa:b7:58:3f:bc:c2:f8:
         43:af:fb:50:60:30:26:5c:67:cc:a0:28:e7:0b:3f:5b:25:b0:
         12:c5:55:11:09:f2:7b:0f:fd:09:0b:25:37:e2:69:c4:76:0b:
         38:dc:31:98:92:9c:9f:20:27:78:ea:83:d3:1c:2c:85:ba:a2:
         91:17:3b:f9:32:42:dd:69:5d:d4:7f:78:83:f4:50:ae:5a:a2:
         ee:88:b8:04:dd:38:b5:12:82:2b:2a:f8:6e:e8:17:4c:bf:40:
         68:74:99:13:69:d9:9e:60:7b:dd:00:26:da:e9:89:34:00:08:
         86:64:ed:8a:ad:94:e5:c4:1b:87:76:90:e4:c5:b4:4c:f1:ed:
         dd:53:01:11:cd:aa:5a:ee:28:83:49:f4:e7:8f:58:84:33:00:
         2a:84:9a:b2:e2:bb:46:da:f3:7c:cd:68:ec:a8:b5:99:3f:1a:
         e8:fb:5d:ee:c6:26:f1:bf:77:00:89:29:72:da:44:b4:d4:52:
         9d:88:6e:31:bf:0a:d1:bc:45:ae:83:10:31:ed:4c:b9:b6:64:
         40:c5:58:9b:10:1d:63:b8:e9:4e:ee:73:ff:0d:ff:5f:fd:fb:
         eb:2a:8a:62:a2:a0:54:53:84:bd:c7:58:b2:68:13:7a:87:08:
         b5:8a:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:10:31 2026 by rpki-client