Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File:                     ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier:          //P8iY7Pjkwz6vZEhw/x28Ufu2R69ZIDLBQm6hLT2zo=
Subject key identifier:   39:ED:7B:2A:2A:76:0E:7B:64:A6:7A:08:1F:2D:E9:FC:28:94:9F:F9
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer:       /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial:       019EBEEC3524D8C19047FBB1F040E6DF9D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number:          094C
Signing time:             Sat 13 Jun 2026 03:00:11 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:11 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:11 +0000
Files and hashes:         1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: aOYtLMkOD6sQzfGUqXbDjHSmtg07t5NlWFojPRLLSb8=)
                          2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:35:24:d8:c1:90:47:fb:b1:f0:40:e6:df:9d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
        Validity
            Not Before: Jun 13 03:00:11 2026 GMT
            Not After : Jun 14 03:00:11 2026 GMT
        Subject: CN=39ed7b2a2a760e7b64a67a081f2de9fc28949ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:17:38:d0:13:55:a3:d4:47:db:f0:2e:1f:
                    59:29:46:ad:2b:5c:57:96:3c:2f:09:7b:8a:f7:1e:
                    5a:c5:7c:58:6a:ee:17:f5:e5:70:f1:99:d2:20:57:
                    f1:a1:9c:34:a2:65:59:8e:d0:00:fb:50:ef:e4:48:
                    ec:92:2b:2e:b9:48:03:7f:db:21:93:11:48:59:d7:
                    3d:e2:98:93:6c:af:eb:7f:e7:31:ca:6d:7a:97:c4:
                    31:b6:3c:65:8d:0f:1c:2f:d4:28:4a:e1:88:4a:bb:
                    67:2d:27:15:96:d6:e8:2a:04:c6:a2:57:78:6e:23:
                    5d:d3:db:02:cc:e7:b0:ef:59:be:7f:46:0f:2a:f3:
                    5b:37:e8:67:63:c0:1c:a4:74:7d:74:3e:cc:62:4f:
                    d0:68:f7:47:73:ee:be:23:80:00:1a:e1:db:7c:97:
                    b5:83:7a:62:d0:4b:d2:61:43:f4:e7:4c:6c:7c:5a:
                    51:13:e4:8a:36:f2:7d:28:a1:4e:ba:eb:4c:2a:b0:
                    98:24:1f:0e:db:f8:3c:80:16:59:95:df:84:e0:6a:
                    c3:69:bb:a9:f0:ce:5f:e9:5e:fc:7e:05:cf:e3:54:
                    71:75:a7:83:cd:44:23:d0:93:60:34:f0:70:d0:28:
                    6d:04:8e:f7:c9:65:86:a7:45:4c:cf:b7:fa:69:6d:
                    dc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:ED:7B:2A:2A:76:0E:7B:64:A6:7A:08:1F:2D:E9:FC:28:94:9F:F9
            X509v3 Authority Key Identifier:
                keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:97:45:49:99:2a:f9:8d:09:13:36:b2:78:74:ee:39:5b:a7:
         fb:2b:cb:fd:5d:89:37:6c:2f:4a:c0:17:0f:e1:cc:ef:69:63:
         82:e2:c9:b1:33:20:a5:f2:aa:87:cf:4b:7b:28:58:6b:be:2a:
         b7:8d:3b:da:5e:28:d5:09:23:99:25:28:36:eb:50:2b:4e:76:
         92:c7:51:0d:24:71:6f:f4:c6:e0:ef:9f:3c:14:dd:00:31:26:
         10:c3:3b:41:e1:55:ed:69:a8:1d:9d:6c:38:1c:1f:71:1f:1b:
         b2:6c:bd:a6:ed:67:73:a8:70:cc:ca:19:5e:18:16:e8:31:2c:
         92:52:e7:94:2d:2c:6a:5c:c2:89:2d:e3:28:f4:02:59:01:bc:
         44:03:4f:d5:74:64:b6:83:40:4b:7c:a4:a3:40:ea:3a:b2:7a:
         a2:fd:6b:b8:58:a0:b5:c0:8b:f0:a9:e5:5f:39:45:df:d0:25:
         c9:44:58:61:32:55:11:d2:40:e5:5c:aa:93:df:6a:f3:cd:bb:
         43:03:14:04:52:2a:26:d3:21:dc:4c:a5:c1:97:dd:64:c8:bd:
         2c:26:cd:97:91:4f:8a:a2:d2:d5:58:75:d4:8a:c5:c1:d4:95:
         b1:f9:f8:90:82:ed:2f:97:07:e8:18:20:6d:b2:c6:6c:a1:58:
         7a:2c:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:05:37 2026 by rpki-client