Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File:                     4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier:          Y6KpthayWl/BaglugvcUHZmjW8n6tKtgwUcOlculbAQ=
Subject key identifier:   9B:95:5A:9D:2B:7C:49:75:98:8C:0F:E8:67:04:36:F7:98:27:CA:0A
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer:       /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial:       019EBF918F92D22FFAA93B9A92D9F2EEA40B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number:          062F
Signing time:             Sat 13 Jun 2026 06:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:48 +0000
Files and hashes:         1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: ZqAddQMYYEepvTj7TCUhsJrANLKAz9+IwFwRCVwGN30=)
                          2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:8f:92:d2:2f:fa:a9:3b:9a:92:d9:f2:ee:a4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
        Validity
            Not Before: Jun 13 06:00:48 2026 GMT
            Not After : Jun 14 06:00:48 2026 GMT
        Subject: CN=9b955a9d2b7c4975988c0fe8670436f79827ca0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:57:8a:8a:f4:28:0c:2c:06:e0:da:c3:81:
                    c9:17:ee:73:73:be:c5:bb:87:9e:40:cd:c0:99:f5:
                    c8:3f:eb:2a:b4:22:5e:3b:49:52:8a:cc:12:74:f9:
                    87:be:8d:14:f2:68:2b:06:e6:83:d5:95:ac:b4:e9:
                    25:81:90:a4:a4:a5:c3:4f:aa:c0:70:55:ba:6b:3f:
                    b4:97:a0:b3:14:1e:0d:74:4d:21:ba:76:d2:79:7e:
                    72:91:01:97:56:c8:9b:51:ff:c4:99:49:aa:0a:c7:
                    db:13:0a:9d:2f:67:4b:cf:0b:8c:99:cd:15:28:9a:
                    34:c3:82:b5:d9:86:6c:ae:6a:be:12:20:04:64:54:
                    62:87:8e:e9:5f:d6:d5:20:23:7b:c2:c2:7b:98:85:
                    26:31:80:9f:5b:d2:01:a3:ae:a6:d0:54:24:06:e6:
                    86:a1:f4:dc:24:7b:82:3d:60:08:ed:11:43:51:f3:
                    07:16:29:7d:3e:29:56:8b:8e:59:04:c2:ed:6d:62:
                    cb:a4:d3:df:51:83:8b:40:95:d8:95:46:be:c7:3b:
                    52:3c:fc:cb:68:e9:3f:0e:46:71:f5:9f:2f:b2:2e:
                    05:c3:33:77:e2:e1:c0:b7:55:ed:fd:b4:45:6e:f9:
                    ac:c0:bc:2a:b0:9c:f8:ae:65:6b:b9:e8:11:a9:9f:
                    c5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:95:5A:9D:2B:7C:49:75:98:8C:0F:E8:67:04:36:F7:98:27:CA:0A
            X509v3 Authority Key Identifier:
                keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:76:02:5e:55:38:0b:73:19:9b:97:ea:3b:cb:c8:48:96:a4:
         fb:12:b6:50:60:40:3a:08:3c:18:d1:f5:ad:4b:88:cd:58:32:
         80:97:30:78:98:60:9c:6a:aa:83:a1:3b:db:71:6a:03:69:22:
         20:b7:8d:c2:ad:23:39:94:b1:8f:80:70:72:c3:0d:4b:76:d0:
         d0:68:14:05:b1:cd:b4:f3:37:7d:1a:3c:08:e4:39:0c:98:73:
         22:70:30:80:9b:08:b5:81:23:97:01:41:48:5b:42:eb:2b:a1:
         05:fa:f4:17:e9:94:fd:bc:00:50:1d:0d:7c:52:ca:7a:2e:66:
         f0:49:11:f7:99:92:94:5f:37:50:38:07:47:72:1a:11:0e:c3:
         03:d3:5a:28:50:e2:a3:4e:7a:ce:cf:cc:8b:e9:8f:15:44:cf:
         20:1a:df:e4:19:12:e2:42:9a:03:b9:fb:23:a7:ee:69:7f:c6:
         d7:6a:88:84:46:ea:f2:eb:bd:38:ef:03:97:eb:87:76:50:12:
         b4:86:db:9f:51:f0:bd:a7:70:c2:30:2f:b0:d1:55:c9:74:8c:
         3e:b7:5c:79:1f:e1:5f:99:4c:3a:1d:c1:5a:d7:6d:8c:ab:c4:
         f7:8b:39:5a:db:3b:65:2d:e2:07:1b:be:00:ee:df:c4:7f:49:
         81:5e:b6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:26 2026 by rpki-client