Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File:                     4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier:          4Pas9p2e3CdIBXa+N1bc3X/miKhtK8rtIBHVqGEe3Q8=
Subject key identifier:   35:C9:E8:08:0A:90:80:2D:33:02:85:06:8A:7C:AC:13:39:12:E9:C1
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer:       /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial:       019EBDA2EA3DF8A53F3D3D39B4312A362DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number:          0F57
Signing time:             Fri 12 Jun 2026 21:00:30 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:30 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:30 +0000
Files and hashes:         1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: FpCManApNiLkDEYO+0FdMpEk2szo5bEV+8Te1kZlaVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:ea:3d:f8:a5:3f:3d:3d:39:b4:31:2a:36:2d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
        Validity
            Not Before: Jun 12 21:00:30 2026 GMT
            Not After : Jun 13 21:00:30 2026 GMT
        Subject: CN=35c9e8080a90802d330285068a7cac133912e9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:da:56:18:15:5d:24:81:6e:08:06:ba:5f:
                    a5:8b:ce:76:01:ac:4f:c0:a8:e0:dc:c1:6f:1d:95:
                    f1:43:05:6f:3c:96:7a:18:61:d6:31:cd:e2:d7:aa:
                    bd:f2:28:6f:7e:3a:d8:24:1c:9b:2f:16:29:c8:69:
                    7e:c7:5c:28:58:1d:c9:41:9b:fe:da:e1:96:db:46:
                    c9:0a:a1:0e:fe:4e:01:a7:fc:63:92:f7:be:8f:f3:
                    e4:15:90:12:c1:8c:a9:f0:22:3f:81:2a:32:98:38:
                    d5:eb:32:19:9d:20:97:6c:b1:e2:06:a3:a0:24:12:
                    48:84:21:21:d2:3d:55:03:f2:cb:ff:f2:34:c7:60:
                    98:7d:39:cd:5b:12:6d:28:68:fd:1c:74:6c:d3:52:
                    28:13:9c:d1:17:fc:fe:5b:63:9f:92:35:18:f6:4e:
                    b3:39:32:8d:de:ed:7d:60:ea:04:a9:6d:94:13:a4:
                    c2:47:3e:9e:2a:0f:8d:36:33:6e:57:30:61:ed:a9:
                    c3:4b:6c:97:a0:68:ea:8e:43:55:f4:94:01:7a:b2:
                    b9:23:d1:14:2f:ad:68:13:8c:65:50:bc:88:89:9e:
                    56:3e:54:31:dc:6c:f1:21:db:69:6d:bc:50:92:3f:
                    c0:ac:4d:16:31:8e:c6:15:75:ab:c4:7b:be:f3:14:
                    b0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C9:E8:08:0A:90:80:2D:33:02:85:06:8A:7C:AC:13:39:12:E9:C1
            X509v3 Authority Key Identifier:
                keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:48:16:b6:43:36:b1:fc:dc:70:40:7d:fe:6d:90:a8:96:a1:
         ba:f9:28:fb:bc:1a:eb:36:73:d8:91:51:ab:fe:cd:1b:68:d2:
         98:00:a3:df:7e:b1:6d:c6:f4:b0:a8:84:fa:85:1f:70:28:de:
         4d:0e:95:4a:48:a4:47:84:80:32:7e:f3:eb:fa:82:1a:91:28:
         ec:69:f7:3c:a6:d3:d1:42:5f:49:94:44:ca:57:ca:aa:e5:d7:
         40:00:4c:20:35:ce:ba:ea:b7:6c:ff:17:ce:8a:21:f2:c7:28:
         04:e3:c9:82:e1:b5:1f:fa:ed:19:77:5e:2a:ee:15:0b:e9:3c:
         62:05:83:33:01:72:f6:55:92:b1:fb:c1:de:f4:58:6c:24:49:
         98:2d:98:a4:98:27:e9:aa:30:42:dc:d0:a5:71:5a:d9:48:af:
         e9:dc:f6:57:6b:d7:4b:bd:bf:63:40:60:8b:d2:9c:e8:54:bc:
         81:33:8d:cb:b9:67:c2:22:b9:19:d2:a6:89:c3:8e:c1:ef:41:
         e3:9d:d9:a6:8e:cc:13:05:c5:f1:22:26:99:c0:ee:98:67:47:
         83:56:87:34:83:8c:d5:c2:b7:25:d9:2c:6d:52:dc:dc:ef:c1:
         6a:c1:cf:32:fd:47:9e:47:af:c9:e0:71:27:2c:36:5c:20:75:
         4d:57:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:18 2026 by rpki-client