Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File:                     94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier:          SyPkKT+i4TEQgJdfYmPUNKbNjbsGKcZqScVMyjX9d28=
Subject key identifier:   C8:8E:61:23:2C:B0:95:7D:11:B7:7D:7A:C3:01:3D:27:56:4E:05:90
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer:       /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial:       019EC0DAB87B5A0695EBDCE4AA7B646EBA57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 12:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:19 +0000
Files and hashes:         1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: WDka+2bDyoKB4CORgHOtHK9k4iU2c7hzPfXL8OaRuJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:b8:7b:5a:06:95:eb:dc:e4:aa:7b:64:6e:ba:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
        Validity
            Not Before: Jun 13 12:00:19 2026 GMT
            Not After : Jun 14 12:00:19 2026 GMT
        Subject: CN=c88e61232cb0957d11b77d7ac3013d27564e0590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:70:37:1e:27:5f:02:e5:69:3a:22:43:3e:8b:
                    28:4f:27:32:98:f4:8d:4f:99:51:49:87:77:21:10:
                    1d:67:3f:40:5c:29:d0:25:a0:98:23:4a:57:4d:f4:
                    18:d1:3c:09:b7:97:ad:61:94:83:7a:e5:7f:43:85:
                    c3:8f:2b:52:ec:00:25:72:a6:49:bd:4d:f5:5d:08:
                    62:bf:3b:23:94:54:a4:07:e0:f2:88:8d:35:84:87:
                    42:b4:9e:16:f7:7a:59:82:80:fb:99:48:dd:20:29:
                    cd:ca:89:1c:96:f4:96:19:d0:09:8b:e7:5e:fc:4b:
                    72:e3:35:ee:7d:b5:66:ed:2d:a8:21:dc:c3:99:1a:
                    06:d8:9d:48:ef:de:79:01:69:58:46:8b:58:ea:fe:
                    0a:36:12:c0:f6:09:a8:3d:08:80:a7:a1:bf:c2:03:
                    e1:54:7f:13:fc:4c:c0:63:b1:6b:33:41:a5:f6:68:
                    e9:4f:b3:60:5f:04:12:b4:79:f9:7c:5d:fc:60:11:
                    df:76:4e:c6:34:0a:3c:e2:92:30:fe:3a:f8:56:0f:
                    a7:40:8b:52:0e:42:3c:85:e7:2e:c1:ab:e2:9a:c3:
                    0a:ce:a1:9a:bd:81:1c:c6:f1:68:cb:f1:d3:35:e9:
                    2c:98:a8:fa:ff:d6:12:78:47:18:9e:c5:c6:6c:ec:
                    8b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8E:61:23:2C:B0:95:7D:11:B7:7D:7A:C3:01:3D:27:56:4E:05:90
            X509v3 Authority Key Identifier:
                keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0a:fc:b3:11:12:83:3b:28:ce:3d:61:66:52:a2:ea:ab:20:
         49:4b:be:fb:fb:f3:3f:30:bc:57:bc:b8:b8:92:a0:f3:db:d4:
         d2:c4:f5:47:5d:d4:c1:98:4c:46:b7:cb:96:0a:2b:86:59:d6:
         7c:dc:e0:5c:65:38:6f:ae:78:f9:29:b8:c5:01:65:9b:e3:15:
         3f:84:eb:90:53:13:b2:f8:21:53:86:99:db:24:44:0f:d9:95:
         f1:12:ea:eb:6a:cd:36:96:87:07:a0:54:4b:98:95:b7:91:1a:
         4e:ef:f5:54:c7:71:60:9e:eb:65:aa:cc:f9:46:67:eb:2b:e8:
         74:07:14:b6:12:53:58:ae:0a:f0:b3:62:c7:72:0a:09:f1:d8:
         76:19:ba:37:da:e3:b8:81:8a:74:2c:aa:89:9d:49:dc:a9:52:
         75:59:89:03:95:9a:dc:aa:7a:a2:7e:80:c0:e1:cf:e3:93:ad:
         e7:2f:a8:d0:5a:bc:9d:9a:70:ae:37:eb:98:72:da:26:94:b7:
         68:b7:55:5b:c1:7a:e0:76:58:20:3f:43:0e:32:c6:10:ae:0b:
         da:fe:e3:21:c7:ff:4e:06:dc:6e:f4:48:91:e0:fb:72:f6:2c:
         7f:69:bb:e5:54:cf:3a:fc:cf:3e:38:76:0c:de:14:d0:78:a8:
         f6:e3:c2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:31:20 2026 by rpki-client