Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File:                     4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier:          HL9V87GVxpCWEbKC+S7i8ZyKg7BT6C3fefaLig8BMdY=
Subject key identifier:   8C:17:C9:6E:20:38:F6:AD:99:A5:74:BF:4F:DD:AB:31:63:6C:E4:3E
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer:       /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial:       019EBE7EE87907E16767C71B82D3A43AE8C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number:          1955
Signing time:             Sat 13 Jun 2026 01:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:48 +0000
Files and hashes:         1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: rjIHrtzyB+V0rKBFzbSQRzUKaJUA9UJLV0pFH9+QG+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:e8:79:07:e1:67:67:c7:1b:82:d3:a4:3a:e8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
        Validity
            Not Before: Jun 13 01:00:48 2026 GMT
            Not After : Jun 14 01:00:48 2026 GMT
        Subject: CN=8c17c96e2038f6ad99a574bf4fddab31636ce43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:71:67:dd:e9:be:1b:43:d0:fc:a4:1f:7d:
                    75:49:07:7c:e7:e1:51:54:34:02:6c:df:e8:f3:8d:
                    fa:cf:3d:fa:02:4d:16:23:eb:cf:cb:9b:6f:7c:34:
                    f7:95:98:91:4c:fd:b2:6b:a4:c1:85:47:df:93:e8:
                    ce:d4:3d:90:aa:03:dd:59:a2:67:e3:10:e5:04:ff:
                    29:71:08:dc:30:cf:55:a0:5b:d5:ee:c5:7e:d6:8a:
                    fb:88:c3:0f:05:4b:16:ba:5f:04:89:71:4e:a9:fb:
                    78:74:c1:79:dc:3c:3c:c1:0a:5e:1d:94:ff:64:c1:
                    53:bb:27:db:4d:0c:b1:cf:75:d3:7e:68:95:2a:60:
                    ad:af:b7:c7:f6:d3:c4:bc:fd:50:c9:eb:b5:79:2a:
                    66:32:c7:3a:d1:0f:aa:be:bc:3b:0a:27:ba:c3:33:
                    dd:e7:c1:cf:a9:7e:fb:8d:68:11:b9:7f:56:bb:7d:
                    21:be:3a:dc:c3:85:fe:55:66:1c:68:0d:24:7c:b8:
                    7b:e1:da:d3:3e:65:16:8a:7f:80:1e:6a:5b:9b:09:
                    fe:82:93:ae:fe:3e:3b:be:31:08:1d:9f:1e:71:a4:
                    89:20:62:8a:b5:e9:94:6e:68:2a:2b:d1:48:60:b5:
                    fc:65:96:2e:87:eb:db:52:29:d2:8f:98:73:33:16:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:17:C9:6E:20:38:F6:AD:99:A5:74:BF:4F:DD:AB:31:63:6C:E4:3E
            X509v3 Authority Key Identifier:
                keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ae:70:d4:a2:ee:6f:fc:50:9a:44:d7:ce:49:e2:14:9f:f6:
         23:bc:b0:af:28:65:da:b0:2c:68:c2:ba:98:20:0d:29:fb:04:
         f2:44:ad:26:1b:bb:1e:ef:83:d1:4a:36:73:8b:28:38:53:29:
         54:fd:50:aa:de:04:ae:cb:fe:58:41:11:65:a6:f4:b9:57:0a:
         b3:8f:23:dc:83:e5:d1:e1:7b:ee:3d:80:59:11:07:f5:8f:e3:
         1e:b9:77:3f:77:1d:6d:e5:73:f3:f5:76:a5:d0:92:2e:4d:b6:
         44:ae:80:e3:c3:15:9b:58:a1:27:81:9f:22:b8:a9:61:78:a6:
         e6:a1:ff:d9:31:90:8d:37:e0:4e:51:73:ae:27:2b:de:cf:aa:
         da:f7:d7:a8:46:64:32:a9:c6:3b:f5:c0:2d:7f:57:e0:93:b0:
         d7:c3:7b:7d:db:a5:ca:36:75:a2:e6:e5:7f:f4:b4:ec:7a:14:
         dd:8d:07:4b:09:90:c5:ae:88:85:83:c5:f4:0f:66:5b:4e:7b:
         ff:0e:83:09:21:b0:64:03:53:3c:76:24:03:b3:59:ee:42:5a:
         57:7a:93:90:13:5b:2c:36:dc:1e:30:b8:f9:6b:8f:43:96:1b:
         5a:56:61:8c:c6:77:f5:e8:a7:ae:0c:13:75:b6:d5:5c:c4:68:
         1a:e5:82:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:53 2026 by rpki-client