Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
File:                     59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft (raw, json)
Hash identifier:          4mqQEwYnZpLAngZnAttHtcmn99fOJ/EYdnd30LSzTjQ=
Subject key identifier:   2F:69:E8:A0:18:BF:66:C7:DC:3D:A3:A1:24:4D:00:7E:22:78:5E:D6
Authority key identifier: E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37
Certificate issuer:       /CN=e7d19a8fd98541ed89170a90401977a4be0bec37
Certificate serial:       019EC112469196D6FBB6732E9296B2C4D1D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
Manifest number:          FF
Signing time:             Sat 13 Jun 2026 13:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:00 +0000
Files and hashes:         1: 59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl (hash: DUGAgc9+3pK59UabsKU0LLCJjIcGO9sG1L9Hg/dt8LU=)
                          2: Pzk4TDA-h9RVuxch0U3icXkl6Rw.roa (hash: oUr86fQqVuN8AdhLCsQUi45dZ5KEwK640rHZ20VyoXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:46:91:96:d6:fb:b6:73:2e:92:96:b2:c4:d1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d19a8fd98541ed89170a90401977a4be0bec37
        Validity
            Not Before: Jun 13 13:01:00 2026 GMT
            Not After : Jun 14 13:01:00 2026 GMT
        Subject: CN=2f69e8a018bf66c7dc3da3a1244d007e22785ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:59:79:4b:24:a3:de:46:f5:8f:68:d0:45:
                    50:6e:82:bf:51:40:cc:a7:86:f6:70:49:ba:0c:5b:
                    0e:42:af:ad:49:1e:05:a0:f9:9b:87:52:d6:3f:90:
                    f1:c9:74:79:8f:21:41:9e:50:cb:97:22:a2:ab:12:
                    e8:2a:78:93:2b:78:70:e7:8d:27:37:bb:42:51:78:
                    81:b4:b7:97:53:e8:cf:ca:e3:1c:27:f3:5b:6c:d6:
                    41:36:af:47:f6:29:66:c8:ca:72:d2:90:a8:61:5c:
                    99:f8:95:81:1e:28:49:23:05:80:dc:df:b9:aa:f8:
                    72:78:f6:19:92:dc:63:31:15:aa:1c:bc:d6:31:09:
                    bc:e0:af:b1:fb:22:3e:98:04:d9:7c:bc:c0:2d:c6:
                    85:d7:0f:d9:a8:5a:72:08:bd:8c:09:2c:86:0b:63:
                    71:cb:a6:4c:a0:b0:9a:58:00:5e:22:e8:bd:9a:0f:
                    c3:95:b2:ae:f6:69:a6:20:93:c6:91:4e:46:49:be:
                    3e:10:0c:cd:e7:6a:b2:df:01:c3:16:9a:ad:cd:77:
                    81:90:23:b6:2d:0c:fa:0f:5b:6a:9e:fb:24:b9:5a:
                    bf:68:d3:0f:e2:8d:2d:9a:06:c3:da:12:91:60:f5:
                    f9:5d:85:0c:94:7e:e2:fa:d4:14:10:c2:38:a3:b4:
                    ea:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:69:E8:A0:18:BF:66:C7:DC:3D:A3:A1:24:4D:00:7E:22:78:5E:D6
            X509v3 Authority Key Identifier:
                keyid:E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9b:87:b8:47:d4:08:0c:91:61:c4:da:8d:a9:a4:88:b9:b5:
         13:a8:fd:d2:fc:9d:79:8d:ed:40:bf:90:37:50:14:53:c0:7b:
         e3:f2:f9:b4:c8:8f:5a:54:33:5c:9d:f2:6c:3f:a4:42:1f:4b:
         2b:aa:39:a7:86:5c:80:51:13:f7:f2:39:8c:77:88:aa:ba:22:
         92:80:c8:eb:a1:7c:f6:a5:6f:54:8e:86:8d:aa:da:13:34:0d:
         95:32:3c:23:fc:5f:7f:97:a7:62:1c:3a:bf:92:1a:58:43:ea:
         0b:34:6e:3a:79:81:0e:73:a5:0d:23:cd:87:a6:f2:fe:45:91:
         49:c3:f0:33:b7:47:4f:96:d8:64:68:64:ea:a3:58:b4:f6:c9:
         f9:2a:77:b4:fc:e0:a7:51:dd:41:90:b5:ae:df:86:cb:93:a6:
         ba:f4:21:d1:6a:1d:6f:f1:bf:20:ce:20:02:b1:ff:48:b5:fa:
         89:57:9c:0b:77:cc:80:cc:1a:bb:65:3e:d7:d7:b3:af:c8:c3:
         6e:ce:4b:66:59:20:a2:16:db:c9:89:e5:fb:2c:3e:df:aa:f5:
         7b:54:c1:a7:a1:94:cc:1a:58:27:00:59:19:cc:ac:15:43:dd:
         6e:72:4d:e1:f5:3c:27:e3:b6:e7:e7:03:6c:e6:0a:7e:f2:19:
         dd:46:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:41:37 2026 by rpki-client