Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
File:                     E5cPuUba-bnv47YJ8onK4Bn8YYw.mft (raw, json)
Hash identifier:          GwaIvdzNuA0200Ji/rNbWKISnR9iGCgoMq1TEJ0fVe0=
Subject key identifier:   E9:19:CE:17:5B:FD:1E:76:B1:1E:07:CD:C5:08:74:F6:EE:E8:3A:39
Authority key identifier: 13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
Certificate issuer:       /CN=13970fb946daf9b9efe3b609f289cae019fc618c
Certificate serial:       019EC1B66931AC36C19E6BBA6F9A9863B7E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
Manifest number:          13B6
Signing time:             Sat 13 Jun 2026 16:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:17 +0000
Files and hashes:         1: E5cPuUba-bnv47YJ8onK4Bn8YYw.crl (hash: nctIPRoPvvdiN3aNRcss20q0I84V7kk0SP2PThgBqho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:69:31:ac:36:c1:9e:6b:ba:6f:9a:98:63:b7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13970fb946daf9b9efe3b609f289cae019fc618c
        Validity
            Not Before: Jun 13 16:00:17 2026 GMT
            Not After : Jun 14 16:00:17 2026 GMT
        Subject: CN=e919ce175bfd1e76b11e07cdc50874f6eee83a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:55:10:74:8b:d1:47:4c:ec:04:26:a1:80:
                    78:97:f7:f8:70:36:6b:da:a5:f2:13:fb:b9:51:a4:
                    65:ec:45:7a:67:e7:11:6e:84:98:5d:a9:c1:a3:6e:
                    db:2f:0b:e7:5d:da:fa:ba:54:dc:66:95:2d:a1:54:
                    1b:20:0b:e0:f3:c1:86:3a:00:c8:e1:92:ad:78:27:
                    d5:56:bb:89:00:42:5f:23:e0:ed:33:c6:0d:85:10:
                    30:d6:39:22:58:46:19:74:f8:a5:e4:e3:42:1a:c6:
                    e8:07:23:84:72:ac:b3:50:16:69:bf:c1:a6:c9:e8:
                    39:b8:ae:14:ac:eb:ef:8d:ed:45:d8:98:2f:83:d1:
                    c1:67:57:9a:0a:6b:6b:a7:87:18:88:07:88:22:bc:
                    52:be:32:94:f6:9a:6b:29:d0:7b:22:5d:73:18:8a:
                    ab:a5:0c:c8:01:ce:e5:77:23:b7:d3:e3:58:8d:f7:
                    63:d2:db:77:1f:72:06:06:e5:01:f1:01:ea:0b:5d:
                    9f:fa:e5:c4:10:d4:5a:98:66:b7:e6:46:3b:60:15:
                    07:c9:41:ea:8c:87:85:62:65:53:1f:1c:95:d3:30:
                    df:d1:d3:9b:f3:23:f6:8c:8a:1f:fc:8f:7c:d9:fb:
                    ce:bd:7b:7e:bf:52:b4:33:ed:37:ea:36:40:85:8b:
                    30:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:19:CE:17:5B:FD:1E:76:B1:1E:07:CD:C5:08:74:F6:EE:E8:3A:39
            X509v3 Authority Key Identifier:
                keyid:13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c1:88:83:ac:e4:0c:6d:99:7d:2a:15:ee:29:b9:da:8f:6c:
         cb:d3:75:a5:22:47:79:cc:90:c5:a3:fd:54:6e:02:29:04:f9:
         79:33:19:f0:85:c1:eb:b7:3f:05:57:09:d0:1c:05:88:63:a5:
         e8:d2:56:83:c3:d2:19:94:d5:42:e6:8d:19:ea:8b:b7:fa:86:
         26:aa:2e:46:33:63:f4:03:21:12:45:bc:8c:eb:b3:31:e5:03:
         db:7c:2e:d9:6c:04:c3:55:cf:9d:2a:74:62:81:35:4c:c5:ed:
         ac:3a:07:3a:b5:b1:bd:f5:d4:fd:c1:ff:22:86:7b:04:29:ff:
         7b:1f:c8:89:f0:c1:a2:ad:b0:48:24:69:3c:67:a6:06:1c:0a:
         5d:ac:20:fe:87:ba:eb:3c:c8:78:a8:3e:16:e5:ba:d8:f9:d9:
         4c:84:48:08:ae:04:59:0e:78:2d:83:05:ce:81:0b:0c:05:03:
         d9:33:be:57:e9:13:40:6a:db:d1:10:26:46:18:ec:14:16:c9:
         fc:f0:26:f0:77:62:c6:0c:28:e4:62:38:b1:d9:46:28:db:e3:
         c4:d2:98:26:a5:2e:c2:ed:8e:e2:b2:aa:3a:6f:ca:0d:3f:67:
         81:14:57:bc:1d:50:d8:9d:37:61:a9:66:72:4b:0e:4c:d8:d6:
         22:0e:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:38:46 2026 by rpki-client