Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File:                     4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier:          HKKTwMG6VO/6l68hfdhCUdgI9svl5Gylrx6rXOiLXv8=
Subject key identifier:   0B:7B:9E:EB:8A:DD:A4:CA:9A:89:5B:8B:0E:C7:BA:9A:23:80:5E:74
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer:       /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial:       019EBDD9E20F2D4FB6D6A1E59BFB676927F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number:          0D86
Signing time:             Fri 12 Jun 2026 22:00:33 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:33 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:33 +0000
Files and hashes:         1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: 3vgpXSAIy7CPsZZNSIqPpoN2uyEhT5OZ9S+LSlH8/XQ=)
                          2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:e2:0f:2d:4f:b6:d6:a1:e5:9b:fb:67:69:27:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
        Validity
            Not Before: Jun 12 22:00:33 2026 GMT
            Not After : Jun 13 22:00:33 2026 GMT
        Subject: CN=0b7b9eeb8adda4ca9a895b8b0ec7ba9a23805e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:ed:c8:1f:0c:6e:3d:a1:76:d7:6b:9b:62:
                    f0:f9:cf:25:1b:93:6b:d2:97:c2:2d:37:56:a0:37:
                    f3:34:13:af:f4:df:16:8a:20:14:6e:74:10:25:4b:
                    f7:a6:fc:f8:a5:d5:1c:f7:f4:10:cd:4d:ef:b7:84:
                    71:48:ba:64:ed:46:3e:42:28:cb:6f:4b:d8:5d:1b:
                    b1:40:b7:11:09:29:ef:8a:e8:2a:77:95:61:d1:28:
                    dc:c1:90:b4:85:b1:20:37:72:05:91:18:61:ec:9c:
                    c7:18:8a:2a:a5:bb:c9:b6:6f:e5:4b:e6:d3:9d:6f:
                    eb:8c:94:f9:32:6b:75:b0:d4:5c:51:6c:c5:d4:e7:
                    d9:6c:67:46:08:c7:6c:28:b4:5c:d4:74:94:7e:0d:
                    e8:09:6a:1f:9b:df:b7:c9:71:f2:37:26:db:b5:b1:
                    03:dd:8a:b7:7e:06:c2:f2:45:a7:39:ed:34:47:20:
                    e4:86:36:5c:68:33:70:c0:e9:e1:a4:e4:4c:83:81:
                    dd:2a:fb:fc:4b:2c:06:a3:be:2b:3a:fe:07:dd:9f:
                    80:35:a1:b9:a1:92:56:91:bb:a3:f1:98:c2:7f:b6:
                    e7:fd:d3:3a:8e:fa:0d:a7:34:bc:21:d2:33:ca:88:
                    48:80:59:31:fc:fb:20:e8:09:30:5f:01:41:28:51:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7B:9E:EB:8A:DD:A4:CA:9A:89:5B:8B:0E:C7:BA:9A:23:80:5E:74
            X509v3 Authority Key Identifier:
                keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7d:45:da:83:1b:d5:85:09:ae:32:7c:d1:ac:83:19:12:79:
         98:cc:08:67:9b:ef:02:8c:3b:c3:7a:0c:a1:98:f1:db:fd:50:
         94:79:6b:25:00:34:8d:44:36:7d:63:60:53:30:05:95:a5:39:
         f4:a2:3a:2b:55:8f:c7:95:75:13:73:e7:80:f5:ff:e3:69:2c:
         1b:e8:18:a7:b6:df:6c:92:c7:09:cf:49:a8:ab:84:0b:5c:05:
         68:4f:b1:0f:cc:e7:55:79:2c:32:4d:a9:81:b0:bf:54:45:23:
         61:28:7d:f7:9d:f1:76:9c:5c:9b:27:97:bd:96:92:a4:7d:24:
         24:8d:31:e0:f2:a1:47:64:21:b8:6b:ec:d4:12:4b:5b:34:d4:
         3d:bd:8b:58:88:32:e5:6e:5b:46:0d:ee:4c:99:14:e7:05:f1:
         05:81:25:62:54:84:9b:c5:40:31:6d:bf:58:5b:9c:e1:4a:d6:
         4e:ba:13:d5:88:14:a3:5f:c2:0e:17:cc:44:5c:9a:5b:96:e7:
         f2:90:0d:74:53:ca:c9:23:57:a3:13:bc:7b:32:4e:df:b6:d2:
         d1:12:8b:6b:d2:5a:0f:5a:db:eb:f3:78:8e:7f:e3:1e:19:7d:
         6c:38:12:65:a2:fd:0f:bc:08:90:ec:cc:79:33:53:00:0b:59:
         e0:19:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:54 2026 by rpki-client