Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
File:                     AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json)
Hash identifier:          wv4zS7Bmc7ZLw7OcFPSd2FYIY88m4yC7AOJ1nieLwLI=
Subject key identifier:   E1:D9:91:60:93:EE:CE:E9:30:F4:04:A6:B4:EE:8C:FD:25:8A:5E:70
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Certificate issuer:       /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial:       019EBDDA48E06A1A9B6442FC65A10D353592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
Manifest number:          18EA
Signing time:             Fri 12 Jun 2026 22:00:59 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:59 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:59 +0000
Files and hashes:         1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: CXv/Ukte5s2ypQ+X8hlsxue5lwG4u1p1IXfa0G+66CM=)
                          2: PO0oGhcAcu4rnMxqB7i3EgHcfmk.roa (hash: TAhgr8iisePtAicuDOb6xnSpMggHAcTbal551KlXsKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:48:e0:6a:1a:9b:64:42:fc:65:a1:0d:35:35:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
        Validity
            Not Before: Jun 12 22:00:59 2026 GMT
            Not After : Jun 13 22:00:59 2026 GMT
        Subject: CN=e1d9916093eecee930f404a6b4ee8cfd258a5e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:4a:ea:ae:69:06:ad:bf:25:c8:d0:da:ab:
                    a6:f4:d0:1c:04:a4:a5:04:33:3d:ac:6f:d5:3b:be:
                    cc:3e:3c:21:5a:d9:72:29:eb:9c:84:d5:12:3e:ef:
                    9e:62:11:29:dc:54:b2:20:f8:82:58:b7:10:c7:2e:
                    7e:c2:28:6e:17:5b:c1:ff:ba:c5:d1:0b:13:6c:2b:
                    65:e6:e7:87:d2:2a:36:d5:89:25:72:f2:b8:3e:d7:
                    ec:5c:9e:18:98:25:db:e6:57:33:82:a5:fa:f3:55:
                    89:c0:6a:04:7d:77:98:42:b9:e8:92:5c:bd:33:4f:
                    66:b1:c7:c7:32:6f:76:77:9f:d3:fb:1c:25:6e:9b:
                    05:b7:c4:6c:0b:dc:36:61:af:32:95:99:04:3e:7a:
                    8b:f9:f7:21:65:f9:51:89:e7:32:02:b9:be:bd:fc:
                    dc:cd:09:93:09:95:11:3e:ed:a7:d0:3f:2b:a2:63:
                    95:f3:fb:76:2b:53:ad:49:0b:bb:a9:f3:32:f1:65:
                    e1:ca:37:77:c3:0a:06:99:b5:c6:e5:9b:f4:0e:43:
                    cf:41:8b:5c:e6:5a:7e:dd:53:b6:e4:ef:88:dc:aa:
                    98:fb:09:9d:59:b8:30:c5:58:dd:2a:bb:96:19:e3:
                    d7:ad:9c:12:1f:b7:fc:16:a5:5e:6f:db:7b:0c:4b:
                    de:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D9:91:60:93:EE:CE:E9:30:F4:04:A6:B4:EE:8C:FD:25:8A:5E:70
            X509v3 Authority Key Identifier:
                keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9d:e1:fa:8e:23:96:c7:ec:bc:20:6a:b2:66:77:ec:df:7e:
         ab:bc:3e:14:21:36:17:52:e7:c5:5a:7b:c4:b9:f4:8d:46:89:
         ed:2c:f6:5e:ee:59:ac:fb:e7:a4:f3:63:ec:fc:5a:a0:dd:18:
         20:da:01:0f:d4:71:28:10:f1:55:b1:76:fb:3e:62:48:80:bd:
         38:e4:e6:54:d5:28:5d:43:b9:35:18:2f:7b:fc:fd:f3:68:b7:
         e3:0f:04:83:89:f1:47:61:81:c6:ab:da:05:d1:f7:8f:62:63:
         88:cf:1f:40:6d:93:ec:06:0a:91:7d:6f:5c:2d:3e:cf:62:5d:
         43:e6:ca:dc:79:09:04:94:27:2a:b5:8e:d8:9f:ac:6c:4d:b0:
         1a:56:26:84:8c:8b:4a:fb:bb:c5:91:bb:98:c7:38:c4:36:50:
         4c:8c:4c:85:e3:d1:b0:a2:f1:e3:2d:f3:3e:57:e0:b9:04:4f:
         8b:f4:ad:10:e7:1d:e2:c6:71:ad:aa:f0:30:12:67:83:85:ce:
         74:69:4a:b9:12:d8:53:41:d6:99:e1:eb:a5:aa:11:ea:d6:35:
         1c:58:85:89:11:70:48:bb:5f:37:92:df:12:11:20:14:cf:27:
         34:43:b9:07:5a:ec:3a:56:c0:3b:f5:df:4b:c2:96:d2:7e:79:
         24:0e:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:08:25 2026 by rpki-client