Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
File:                     4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json)
Hash identifier:          OpJ2s7+4aXQogAsv+vC8ph8RDTTF1oq0/dktIFHq2Ns=
Subject key identifier:   FC:89:3B:50:B0:A1:0D:55:10:09:8B:94:9E:F2:0D:86:A0:36:35:64
Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
Certificate issuer:       /CN=e2c756c691073752260eda0b29df3140cec48c18
Certificate serial:       019EBEB5A68A88150C0AC0735D1EE5E4667D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
Manifest number:          1245
Signing time:             Sat 13 Jun 2026 02:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:36 +0000
Files and hashes:         1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: 4z1FopGuKTJT3ilCgfJD+wONVGtfXZsKb8qiEVAxbj8=)
                          2: T3y-vjZIxVWN7JxZPOetrQJcWz0.roa (hash: XkyUMDJqJv6+3HQxI00RxtfuBMdhPrCaA/EHDWTyM5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:a6:8a:88:15:0c:0a:c0:73:5d:1e:e5:e4:66:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18
        Validity
            Not Before: Jun 13 02:00:36 2026 GMT
            Not After : Jun 14 02:00:36 2026 GMT
        Subject: CN=fc893b50b0a10d5510098b949ef20d86a0363564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:60:17:2e:67:9b:29:7f:43:92:eb:7a:b3:
                    87:0b:85:9b:5a:0d:59:9c:b2:ce:f6:a5:38:28:db:
                    49:00:21:a8:65:c4:19:98:c3:99:77:a1:8e:45:9b:
                    70:29:fb:3a:95:95:1b:b7:08:dd:98:2f:1d:05:e7:
                    95:c0:5e:55:8c:a4:57:f9:69:6f:d8:ee:8a:c1:da:
                    0a:9a:66:e7:0f:9d:df:24:f5:7e:ea:a5:7c:90:08:
                    7b:84:3a:a4:20:48:d9:89:e0:95:6c:bc:24:64:48:
                    a2:11:0a:00:b1:00:14:ae:d9:64:b5:82:4e:3f:b6:
                    b0:7e:15:bd:bb:0a:79:50:a4:43:13:a5:42:52:84:
                    6d:a5:fa:26:a3:3b:c3:6b:3a:13:78:41:4f:01:58:
                    d2:d9:07:82:b4:12:b0:f1:cf:73:45:e6:d3:a6:a9:
                    21:92:62:02:40:b8:29:37:4b:b6:53:1f:85:af:4d:
                    f5:77:86:67:60:30:2a:34:28:8a:93:08:1b:eb:06:
                    29:ac:a1:97:91:5c:f0:bb:e4:77:42:d7:3d:66:f6:
                    32:fa:08:ac:ab:01:b1:61:c8:5a:30:ac:4b:dd:61:
                    a2:6f:4b:7c:16:80:19:9c:4a:f6:2a:97:e8:bd:5c:
                    25:d6:01:25:9b:bd:5c:f7:01:9a:fb:dc:93:7c:1f:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:89:3B:50:B0:A1:0D:55:10:09:8B:94:9E:F2:0D:86:A0:36:35:64
            X509v3 Authority Key Identifier:
                keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:99:31:36:2d:fb:37:54:f0:92:18:12:46:48:14:95:26:
         de:2a:58:94:4e:e3:e2:c0:e8:9f:98:5a:b3:7c:98:ca:7b:dc:
         75:85:4e:4e:81:1f:df:2f:7c:7a:51:48:92:6f:25:41:59:42:
         db:98:3b:8d:cd:52:26:2d:90:8d:d0:d8:f1:3d:c7:10:ea:8f:
         3f:69:ce:d7:e1:81:92:b2:8a:e6:79:bd:22:88:3c:7f:13:26:
         75:56:f8:e6:56:9f:6d:be:5a:0e:73:99:ee:52:a1:f2:84:22:
         aa:25:65:7e:e3:7d:35:e3:63:f1:f0:e6:0f:0e:93:cd:2d:63:
         29:29:36:45:20:31:61:18:73:8a:5f:e5:c6:4b:b6:d0:8c:a4:
         f4:c7:3c:88:4f:30:49:ce:15:b8:3e:95:96:b4:4f:2f:01:b4:
         70:96:15:df:73:7c:9b:5f:81:f5:02:67:27:95:94:cd:ed:59:
         b9:47:28:30:81:74:89:bc:b9:4b:43:3a:4c:2b:a5:3a:8b:6f:
         5c:17:b4:42:cc:1d:f6:9c:10:27:1e:ca:12:a5:d4:de:e4:17:
         c8:be:57:92:e1:82:37:8d:ca:0b:04:1b:06:27:4f:04:c8:88:
         ae:f1:de:bf:11:6b:44:95:2d:34:ea:94:a0:a9:59:4c:89:8b:
         00:4c:a1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:11:37 2026 by rpki-client