Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File:                     e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier:          Ig5SY1+rgWQ4/74+YKspLuBU5/VjRy0smVgZxIJ2Qsc=
Subject key identifier:   D3:D9:D0:BF:3D:26:FA:30:EA:03:5B:AD:90:D1:BC:BC:87:B6:F2:91
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer:       /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial:       019EC111EF4B8158623B282FFA2A8E744C48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number:          1093
Signing time:             Sat 13 Jun 2026 13:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:38 +0000
Files and hashes:         1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
                          2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
                          3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: aIo3rVDSEgGMqDTorA40lLC/hu/FVXwEaWUilKkQHGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:ef:4b:81:58:62:3b:28:2f:fa:2a:8e:74:4c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
        Validity
            Not Before: Jun 13 13:00:38 2026 GMT
            Not After : Jun 14 13:00:38 2026 GMT
        Subject: CN=d3d9d0bf3d26fa30ea035bad90d1bcbc87b6f291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:a1:aa:f3:78:79:1e:b8:85:23:9e:cd:e8:
                    9c:0c:9c:70:c7:8d:08:4e:fc:a6:96:1d:44:79:93:
                    73:56:d2:78:4a:9d:da:fa:ac:eb:66:d8:20:f3:cb:
                    75:40:ce:f4:bf:cb:79:cc:e5:df:0c:e4:4b:b5:4d:
                    31:50:ff:e9:73:f1:83:2e:19:8a:cc:3b:fa:c7:bf:
                    6a:3b:55:1b:61:70:90:f6:24:e5:86:6d:90:18:a3:
                    ad:42:83:8a:d3:1b:f7:b4:ef:8a:7d:03:6e:20:35:
                    80:77:86:83:b9:69:95:3f:80:c8:9f:ff:41:c9:dc:
                    4e:da:0b:35:bf:f8:29:be:f5:13:95:5b:42:54:d6:
                    c8:5e:dc:94:36:40:0e:53:6c:5d:7b:07:c5:e0:52:
                    44:bb:5b:5b:f5:1f:a1:62:26:77:a7:6c:26:44:67:
                    cb:6c:62:34:5f:8c:99:dc:4d:67:31:d8:03:3c:7f:
                    5d:ab:35:7c:53:a1:64:80:79:90:89:15:b7:a1:f8:
                    cd:e2:96:0e:d0:f3:f1:47:68:b8:d0:99:69:85:44:
                    6b:fa:15:b4:68:d9:7e:db:9c:f1:3b:2a:0e:a7:96:
                    56:d3:1c:62:f6:c7:65:83:01:4f:39:f1:b6:95:11:
                    5e:90:36:db:38:1e:92:89:7b:69:d8:8b:99:78:aa:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D9:D0:BF:3D:26:FA:30:EA:03:5B:AD:90:D1:BC:BC:87:B6:F2:91
            X509v3 Authority Key Identifier:
                keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:bf:1a:92:59:0b:c0:e7:9c:a0:e9:40:2c:66:da:39:54:40:
         55:ef:b1:0f:97:f3:ee:ec:08:6f:94:18:ae:2d:30:ce:bc:a4:
         1e:ee:6c:80:15:c5:ab:2b:9c:41:c1:c5:68:29:1c:ca:27:4e:
         a0:df:74:b7:7c:1a:5f:7e:ff:95:24:44:2e:12:f0:36:58:9f:
         1e:59:e8:15:a3:74:eb:19:84:6a:8d:15:c0:d7:f0:49:2e:ed:
         36:b3:e8:77:c2:98:55:38:d0:fe:33:01:8b:12:d5:44:49:28:
         6c:db:c5:a3:9c:cc:c9:6e:59:0f:22:5b:bd:96:13:f1:59:75:
         12:89:7a:89:53:f7:18:bf:64:e9:5e:9e:24:eb:e9:9a:52:ee:
         57:fa:5e:61:69:b3:a5:38:ef:50:ce:f6:2e:6e:81:2e:f3:8f:
         92:73:5c:9f:34:ca:a7:a7:fd:67:5b:38:dd:85:27:36:34:92:
         30:5a:b3:75:d3:4a:71:03:43:f7:b2:cd:00:70:53:32:ba:ac:
         0b:0e:eb:b0:18:e4:8b:28:e2:df:00:f9:e7:27:4f:13:35:23:
         a2:f4:62:6f:aa:67:ba:c8:e2:72:a0:e4:62:f0:bc:25:35:3c:
         53:a3:d6:56:2b:4b:7f:8e:21:58:07:4b:03:b7:d5:fb:f8:f5:
         1d:9a:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:27:08 2026 by rpki-client