Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File:                     C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier:          +IRvsYOjWN+kmPsndFJripqlgc3Ndem7l2MeuTwq6og=
Subject key identifier:   A5:8E:5E:ED:72:57:6B:A4:84:93:BC:6F:72:AB:D7:4B:3C:A1:AC:F5
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer:       /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial:       019EC06E3A44424A6ACCB25F2E599EF97A9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 10:01:49 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:49 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:49 +0000
Files and hashes:         1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: SsAOO6CIgPira9FsCzQka9X9Ystikt5v1SkuJdySh8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:3a:44:42:4a:6a:cc:b2:5f:2e:59:9e:f9:7a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
        Validity
            Not Before: Jun 13 10:01:49 2026 GMT
            Not After : Jun 14 10:01:49 2026 GMT
        Subject: CN=a58e5eed72576ba48493bc6f72abd74b3ca1acf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:fb:83:96:3b:68:68:88:75:6f:b8:c3:f9:
                    b8:be:16:80:45:76:4a:b7:a1:99:a3:37:9e:2c:e5:
                    aa:76:1b:e5:4d:28:88:f4:51:24:54:ec:0f:40:c3:
                    53:d8:74:c3:32:c9:af:20:01:52:81:a7:33:6d:2c:
                    58:89:b5:0a:be:6a:cf:97:b2:37:42:4f:ad:93:df:
                    07:95:0c:1d:24:c7:ee:98:d0:0d:cd:56:cc:56:00:
                    b6:86:c8:8b:ef:a7:39:7e:b2:d0:a2:ce:f8:c9:a7:
                    1b:c5:02:3a:8b:c6:9d:61:af:24:d5:b5:c0:ab:3e:
                    64:ae:04:05:4d:2b:9c:fb:73:8b:62:fe:3f:08:1b:
                    9f:a6:e3:06:d1:b2:b6:80:9f:2f:08:da:9e:86:04:
                    93:5b:dc:d1:0a:85:27:00:74:84:f0:dc:50:5d:b8:
                    5d:c0:3a:2e:ed:03:de:dc:ee:0f:39:ff:38:65:1c:
                    5e:5a:7e:63:65:01:6e:94:ce:c8:c1:fc:d7:93:47:
                    18:b9:b0:32:77:ad:e3:1d:d4:a1:1f:f1:23:b6:4d:
                    3e:ff:bd:12:4c:83:0b:ab:e4:12:f7:7b:35:f5:02:
                    13:47:0a:21:ae:f0:1b:52:ab:c5:1f:9e:d5:81:49:
                    eb:9e:86:e8:78:88:a8:50:f5:11:98:1c:5e:81:78:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8E:5E:ED:72:57:6B:A4:84:93:BC:6F:72:AB:D7:4B:3C:A1:AC:F5
            X509v3 Authority Key Identifier:
                keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6a:c6:8d:1e:37:57:6c:3f:09:05:43:98:26:e5:4d:e5:95:
         0d:29:32:6d:87:02:2d:5a:7e:ea:d7:af:84:d8:dc:81:02:60:
         84:be:37:0b:a1:59:07:fa:69:f6:a8:50:40:72:77:3f:26:be:
         c5:a5:1c:53:3f:dd:2e:2b:f4:5e:43:2c:1b:10:26:de:31:a1:
         4b:c1:d6:1e:54:fc:f4:f2:7c:94:c1:1e:8c:73:a7:87:47:06:
         be:f8:03:0c:5f:93:cc:84:1c:8c:cf:2c:df:24:88:9c:50:f2:
         2b:46:2f:15:9d:2b:bb:a3:49:0e:c8:53:91:82:56:ca:4b:9e:
         04:37:1a:68:1c:1b:e4:1b:15:ba:ee:97:9d:a5:32:f8:d0:ca:
         a6:6d:2a:e5:ba:6f:16:ad:20:98:fe:89:45:43:f9:35:36:ec:
         e5:00:d0:db:bf:ca:fd:df:ee:f5:49:1d:df:32:f5:69:ca:db:
         00:5d:7d:5c:4d:f4:48:7c:a6:7e:d7:b2:a8:77:b0:07:28:8a:
         4e:d4:39:f6:cb:bd:92:68:d4:69:a2:71:de:2a:58:0e:0f:c6:
         7c:1e:c7:f5:7e:59:25:bb:53:b9:1e:10:de:48:76:4c:dd:c0:
         ca:7c:58:f1:24:fe:09:14:a7:80:6f:85:84:10:7b:9a:8a:06:
         7a:b5:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:50:59 2026 by rpki-client