Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File:                     7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier:          TE+Gnl2/C05KHMWLKJ1xMpSeV/WSw3MNv3Td2UaSTJU=
Subject key identifier:   4C:8B:88:BD:4D:0D:BE:1B:C1:7A:D7:BD:89:1E:11:87:46:EF:52:BE
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer:       /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial:       019EC2922ADB4BAEDC1E17616910297FCBE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number:          05EE
Signing time:             Sat 13 Jun 2026 20:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:19 +0000
Files and hashes:         1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: xITukq7Su7CFH6oOIKuLlGwT0pxVeBW4XWDPqL8+96E=)
                          2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:2a:db:4b:ae:dc:1e:17:61:69:10:29:7f:cb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
        Validity
            Not Before: Jun 13 20:00:19 2026 GMT
            Not After : Jun 14 20:00:19 2026 GMT
        Subject: CN=4c8b88bd4d0dbe1bc17ad7bd891e118746ef52be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:f4:66:eb:5d:c1:59:be:21:9c:df:e9:18:
                    a3:5b:0f:33:e2:ac:50:ea:ee:7a:ef:25:db:56:cd:
                    71:03:f5:d0:35:73:fa:8e:e5:3e:7b:43:75:25:d0:
                    cb:4f:3b:bd:6d:dc:29:c7:0b:94:d4:fd:58:2a:27:
                    04:3b:7b:23:17:5c:8e:e0:71:5c:5b:17:85:44:cf:
                    f0:9d:2e:59:70:e6:1d:4f:48:a0:08:f5:19:7d:3b:
                    96:71:a8:d8:dd:8b:53:fc:fd:3e:7b:7f:54:d4:1d:
                    6c:56:41:0f:2b:50:1a:4c:63:01:09:20:2f:19:87:
                    9c:ad:4d:4d:ec:1b:2d:9c:e6:27:47:ec:7c:1e:db:
                    1f:f4:7d:6d:5d:65:50:88:4d:c3:9c:3e:5d:7d:e5:
                    53:53:a3:44:16:c0:1e:10:5e:55:8a:a0:35:66:60:
                    b8:fe:29:da:54:56:03:32:63:50:d2:0d:70:76:e6:
                    36:a1:a4:d7:ae:ff:1b:6b:e0:66:b2:ab:47:46:93:
                    7d:c9:25:6f:da:aa:87:08:1f:91:28:50:3d:e5:6c:
                    06:a7:9e:98:6f:de:e7:2c:0f:6c:eb:9b:52:14:be:
                    3c:bf:7e:40:c5:0b:dc:2b:35:08:da:05:d4:95:a4:
                    2f:4c:af:07:c4:5a:90:7f:94:37:43:94:37:d1:22:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8B:88:BD:4D:0D:BE:1B:C1:7A:D7:BD:89:1E:11:87:46:EF:52:BE
            X509v3 Authority Key Identifier:
                keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:59:77:50:c4:76:e9:0e:e1:56:99:f0:4f:35:5b:35:2c:60:
         76:93:de:24:9e:d0:82:ea:f3:7e:2b:ed:d1:8a:33:19:92:e6:
         48:65:4f:63:db:2d:10:9d:17:d8:b0:6f:bb:4b:97:a2:67:ab:
         98:43:f6:1b:d9:c8:1a:f2:29:c5:8e:9c:d1:c1:6c:d6:1c:21:
         51:b8:10:b9:f0:b8:f9:d4:66:26:9c:60:b2:37:21:16:d1:29:
         66:ae:1e:11:e3:86:c0:87:73:68:1c:80:89:45:c3:62:fd:ff:
         86:24:8b:39:4b:39:50:28:4d:3e:b0:41:c0:d3:28:da:5a:30:
         ac:6a:e6:3a:63:cf:40:f9:f7:63:b3:82:0d:78:3b:fa:3a:c6:
         0a:2e:29:c3:0c:f0:e8:0c:10:17:5a:b2:54:be:1b:c9:82:68:
         0f:58:46:97:2a:c3:a4:bc:a3:f9:32:c1:70:49:cb:b4:bc:57:
         80:20:4d:e7:63:29:80:c3:2b:69:ec:ec:76:31:c2:01:19:29:
         d1:79:56:06:f5:de:dd:f8:cf:2f:56:6e:99:44:14:85:08:4a:
         d6:bb:10:d2:78:04:5b:de:47:e4:aa:c8:9b:d9:29:1c:b2:39:
         b7:2f:71:b5:3a:35:7b:bd:7f:9b:d8:5c:c9:15:ec:4a:5e:f6:
         b6:86:fb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:56:14 2026 by rpki-client