Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File:                     4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier:          szwLjZ5rlsDQH06vBTxf5fDdpRLkeDgIfSG1LMr2MeI=
Subject key identifier:   31:29:0C:60:0F:D8:2B:2F:6B:66:01:47:4E:2B:13:2D:30:F7:9D:23
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer:       /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial:       019EBF240677527EA08FBBF1CFEE1DB23959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number:          1854
Signing time:             Sat 13 Jun 2026 04:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:09 +0000
Files and hashes:         1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: 0IqF6xbUUI07wg5PFF59YZ7IdNv4/VDJ6hF/QK5gzEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:24:06:77:52:7e:a0:8f:bb:f1:cf:ee:1d:b2:39:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
        Validity
            Not Before: Jun 13 04:01:09 2026 GMT
            Not After : Jun 14 04:01:09 2026 GMT
        Subject: CN=31290c600fd82b2f6b6601474e2b132d30f79d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:0d:f6:a5:02:f4:b6:15:7f:94:2a:c3:64:
                    1d:41:05:6f:00:ab:d8:80:0b:2e:51:aa:93:41:bd:
                    27:d8:d6:96:9d:e6:df:df:ee:1b:23:df:9e:8d:e0:
                    9d:ea:d6:5c:d5:93:12:59:55:40:c9:f7:cd:d1:8b:
                    75:ab:52:38:48:d9:30:e5:d8:5f:0a:5f:28:05:98:
                    35:af:80:fc:3e:65:28:b2:4b:78:21:24:38:05:55:
                    15:57:4c:64:84:ee:32:af:8b:c7:fe:96:1a:0b:b5:
                    31:26:a6:ac:34:7d:9b:2f:00:8b:f5:b7:95:f5:7d:
                    48:ff:eb:71:54:43:a4:e7:5f:8d:cb:fe:7c:bb:8c:
                    97:35:cb:03:c8:c4:6c:64:5b:eb:55:79:fb:10:d0:
                    6a:6c:9e:a5:d3:ee:14:4b:c6:5e:fb:8b:b6:93:3b:
                    ab:d4:b8:e7:46:9e:3f:d7:1a:17:30:06:55:4b:b7:
                    f5:e0:a8:9c:60:b0:c1:9a:31:e6:66:c4:59:56:c0:
                    a0:2d:2b:fb:4a:68:a4:fd:16:c6:7c:49:34:ca:7e:
                    53:60:ea:91:a2:0a:66:45:f3:4a:f2:20:6e:33:9d:
                    dd:b9:2b:d0:5a:d8:17:94:53:3c:34:13:13:b8:ad:
                    80:0f:e3:05:d4:9b:07:04:76:17:4f:49:07:77:ed:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:29:0C:60:0F:D8:2B:2F:6B:66:01:47:4E:2B:13:2D:30:F7:9D:23
            X509v3 Authority Key Identifier:
                keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:06:48:b0:6f:59:04:d8:74:d4:fe:db:ea:95:4d:23:66:78:
         00:bb:61:aa:25:18:21:22:c6:85:6a:13:51:3b:48:e2:09:20:
         80:ea:82:3c:56:b6:35:90:f5:6a:24:bd:8f:e2:6d:20:48:b1:
         9d:8e:e3:eb:25:e9:e6:d3:19:63:df:d0:7b:6f:9f:cb:2e:f9:
         79:79:64:86:fd:19:70:33:26:98:3d:f5:c3:86:3c:30:88:9c:
         71:2e:b7:15:de:c6:15:bf:3e:cd:49:73:bd:a1:b3:26:58:5c:
         ad:27:75:1d:c6:1a:88:77:79:de:09:cc:4c:b8:41:bc:2f:06:
         f1:a0:ae:50:19:0f:d2:4f:a5:8b:bb:c7:36:af:c8:2e:68:0f:
         f1:4e:7e:fa:86:94:61:b0:60:b0:b3:aa:0f:fe:70:94:cc:5b:
         cf:bc:04:37:62:31:ca:64:c8:ac:d3:19:10:c2:bd:7b:f9:bd:
         6a:47:67:cb:30:a5:9e:18:14:73:21:71:1e:5f:38:98:ad:b6:
         1f:54:47:41:38:55:2b:9b:77:5d:8e:d0:a1:f0:4e:1b:19:10:
         e9:37:f7:90:4e:5e:4e:b1:15:d2:30:54:ea:13:04:0a:97:de:
         6a:f5:0f:72:8e:61:cf:b3:24:58:2f:61:3b:1d:27:9b:ce:5b:
         ec:fe:c7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:45 2026 by rpki-client