Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File:                     C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier:          srPxWHX84DUx+c3l+mecDSknLUyzbvkqAPJv3dt61XY=
Subject key identifier:   5F:64:15:50:2D:5C:70:1B:81:48:D1:9E:FC:F1:3D:2D:0E:80:C2:B2
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer:       /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial:       019EBF5B041A642C8B21A8C8B74FE9237752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number:          1227
Signing time:             Sat 13 Jun 2026 05:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:13 +0000
Files and hashes:         1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: HTY0x3sJOnZJLtEZ3yWJ6+mDgJBeUA1cVj8cu4ITwa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:04:1a:64:2c:8b:21:a8:c8:b7:4f:e9:23:77:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
        Validity
            Not Before: Jun 13 05:01:13 2026 GMT
            Not After : Jun 14 05:01:13 2026 GMT
        Subject: CN=5f6415502d5c701b8148d19efcf13d2d0e80c2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:8c:b3:9e:52:bd:d9:a6:0c:b6:e1:d6:08:
                    f2:99:04:30:80:f0:86:2a:5b:d9:95:0b:ea:64:8f:
                    79:1f:20:23:dc:d0:ab:05:14:af:e9:90:1e:ce:9a:
                    1c:13:04:8c:f2:22:c7:d0:fe:8f:68:4a:ab:c8:2f:
                    cb:bc:2a:b0:3c:56:50:49:5b:16:79:12:78:fe:47:
                    e0:51:df:47:cd:62:ca:85:82:9e:fe:2e:17:e2:9a:
                    88:01:a3:6a:33:da:8a:12:1f:c3:be:21:9b:32:55:
                    fe:b6:a9:f4:1c:b8:aa:f0:70:35:1f:36:07:9d:c0:
                    2a:6c:d8:50:13:46:fc:96:18:39:b3:a7:81:91:d2:
                    23:de:42:32:5f:58:1f:a9:14:a1:0a:e0:28:96:6d:
                    47:80:08:57:0b:99:99:61:80:26:03:63:c1:c3:a3:
                    98:ce:89:9c:e7:d5:66:fb:d2:7b:07:2d:13:66:e6:
                    cf:6d:f9:d3:8b:06:64:e2:b0:6b:d5:38:45:d8:1c:
                    78:c7:08:82:af:21:19:a4:d7:b6:5f:6e:73:be:26:
                    d3:54:2a:40:d1:6f:1b:97:1e:97:fe:d2:2e:39:e1:
                    46:da:d2:6e:d9:55:35:b0:5f:93:97:c2:1a:83:0a:
                    f1:91:69:83:f9:b4:39:06:0e:81:0a:bc:c6:d0:ea:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:64:15:50:2D:5C:70:1B:81:48:D1:9E:FC:F1:3D:2D:0E:80:C2:B2
            X509v3 Authority Key Identifier:
                keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:63:0e:2f:2a:24:b3:d8:04:21:f0:98:81:bd:e7:30:ca:35:
         03:f5:9d:87:8f:68:db:51:32:16:c3:32:cd:2e:f9:fd:3b:24:
         dc:32:72:6b:55:a6:22:af:d9:da:b0:60:a4:e6:00:ee:3e:6e:
         b6:00:e6:1a:60:1f:41:92:2e:65:6a:6b:4e:1f:93:b1:07:cc:
         5e:e4:48:12:c8:79:ce:2f:84:8e:0b:d2:a9:db:69:ac:9c:5b:
         82:a8:fd:a1:bc:90:ce:43:6c:60:68:4d:eb:0d:db:d2:7d:88:
         0a:f9:75:e7:a2:ba:ce:9c:4f:85:0b:22:d4:83:53:b1:fb:df:
         86:b2:1d:1b:b3:1d:78:4c:01:6d:3f:e6:37:83:f8:bc:37:11:
         8b:6d:33:a8:17:30:0d:7f:08:0a:25:a4:b8:9e:b7:36:98:0a:
         da:a2:d3:08:a3:cd:de:01:f9:79:05:48:d4:bd:e7:ef:a3:5f:
         47:9f:c5:2a:e2:bc:5c:bf:94:d6:01:da:c5:01:43:43:ce:4f:
         00:00:90:48:bf:59:87:0f:ed:e2:20:59:5a:86:b8:72:6e:b1:
         4b:bb:26:b2:5b:3d:b1:b0:0a:56:e4:f3:b2:ae:bc:7d:6d:89:
         85:19:3e:55:01:ba:19:22:9f:b4:88:03:41:f3:ce:dc:e5:e8:
         19:09:fa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----