Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File:                     Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier:          1k+w/ra/FqCW9X13uTSxUc5Sv8kJtvspxdreXoUYhyM=
Subject key identifier:   1C:B7:D8:AD:41:84:C1:06:42:55:BC:AF:62:71:08:BA:A2:C7:AB:1C
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer:       /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial:       019EBF915F69350D878F897DA053F76FE506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number:          0768
Signing time:             Sat 13 Jun 2026 06:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:35 +0000
Files and hashes:         1: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: 4bFyVacfVkcr8b9xYe8kDkAhPQzXuOS9Fp/taffE+s4=)
                          2: TkBggeEIG38cTqgeQZJyjYdfERw.roa (hash: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY=)
                          3: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (hash: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig=)
                          4: nGgWCHlP5Rfk7nEXR5r0SwPGVhg.roa (hash: ub89EExosLdu9SpuUWFdEh7qASm/VbEptc/K/f13V3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:5f:69:35:0d:87:8f:89:7d:a0:53:f7:6f:e5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
        Validity
            Not Before: Jun 13 06:00:35 2026 GMT
            Not After : Jun 14 06:00:35 2026 GMT
        Subject: CN=1cb7d8ad4184c1064255bcaf627108baa2c7ab1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1f:f4:07:71:d2:4b:4e:80:3e:88:26:ce:4c:
                    7d:6e:6d:8d:34:df:a8:2a:37:31:50:76:56:80:1b:
                    f0:60:1c:1a:12:97:9c:d3:45:a6:f3:0d:73:58:37:
                    5f:4f:e7:80:7f:ea:0a:07:bc:ad:18:09:6b:40:28:
                    52:79:03:69:5f:65:7c:85:d8:2d:84:15:49:95:51:
                    f9:6e:41:22:bf:fd:2b:7a:3d:0b:35:0f:43:be:8c:
                    87:bc:7f:16:d9:53:2c:56:05:cb:c8:f8:9e:a5:15:
                    e5:cc:8d:46:74:15:28:4b:12:ff:18:4e:c8:c7:5f:
                    fc:cf:d1:99:12:36:1d:9d:89:b1:dd:24:89:84:4b:
                    77:bc:d0:19:1c:df:94:56:b8:71:d9:a3:f5:69:8f:
                    1b:93:59:ce:78:cd:83:48:aa:33:e0:e1:60:45:9f:
                    c1:d2:f4:03:9f:9d:0e:dd:89:a9:9f:72:90:e2:a5:
                    01:57:85:c1:f0:53:15:04:c0:1e:48:06:a3:12:91:
                    39:4d:03:6c:9c:6e:38:54:b0:37:08:5c:40:97:78:
                    a0:8a:03:11:74:f4:c3:6f:cd:0f:8b:3b:0c:30:87:
                    9a:0e:73:cb:65:40:62:d5:32:d5:ab:c1:00:5f:78:
                    64:f4:17:ee:13:45:d8:34:11:a4:0b:3f:26:ba:f6:
                    09:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B7:D8:AD:41:84:C1:06:42:55:BC:AF:62:71:08:BA:A2:C7:AB:1C
            X509v3 Authority Key Identifier:
                keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:79:fb:3f:0c:39:74:79:8f:1e:ab:fb:e0:3d:3c:e8:91:3a:
         e8:e7:83:5f:38:76:c1:db:5e:63:2d:68:7a:3d:2b:fc:dd:d5:
         37:2a:38:3e:15:a5:03:a3:e0:38:db:09:19:42:01:5a:9f:45:
         e4:31:05:92:56:58:0a:a6:64:ee:ff:db:21:16:8e:5c:8a:75:
         07:41:44:e6:0e:97:f8:35:c8:75:ee:52:1b:e8:c5:1f:8b:f3:
         de:33:70:a2:54:2a:b9:b8:9b:a6:ad:b1:94:c4:da:88:aa:b7:
         b1:22:f6:e4:dd:fc:b1:9e:9e:eb:ad:1a:df:79:a4:c2:a4:5d:
         01:7c:9e:47:ec:66:05:91:48:a0:a9:b1:29:03:b9:03:ac:d3:
         48:19:f6:a6:f2:a5:ea:e0:3b:73:e9:13:f1:b0:3a:ae:b7:36:
         3a:e5:7a:96:6c:8b:c9:d6:f7:08:d4:88:21:36:87:5d:6f:c2:
         41:21:c1:e4:4d:de:95:30:d9:0d:a8:49:c3:b3:d5:b4:6b:62:
         d3:c5:9c:f4:c0:21:f7:4b:d9:db:b4:3f:b2:9c:91:54:f8:a2:
         68:fa:df:45:ae:91:b6:4d:6f:4c:2b:8f:56:d6:82:9a:cd:db:
         88:e9:40:47:fa:73:7f:5a:4d:73:b5:1b:58:99:a7:aa:44:91:
         dd:b0:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:03:40 2026 by rpki-client