Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File:                     7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier:          BLvm/Z2pomhxOmz0JEJxLrC9jP9w23o+GhHiw6q7pHg=
Subject key identifier:   93:7B:C6:02:E0:02:84:86:38:90:1B:02:30:E2:84:2C:AA:89:E4:4C
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer:       /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial:       019EC0DBA331BF52DD832313FE19D046A0AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number:          0460
Signing time:             Sat 13 Jun 2026 12:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:20 +0000
Files and hashes:         1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: jxKiSMx5iDX/zqtDsAcGS0Bo9YWUkX/4GaedwiE7n98=)
                          2: P92JZHPtYY3-_599bc_yBXOAyLA.roa (hash: zEkTEvnJRapseTP0KdSkFQigSFFq86JRm4Kqw9lBy+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:a3:31:bf:52:dd:83:23:13:fe:19:d0:46:a0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
        Validity
            Not Before: Jun 13 12:01:20 2026 GMT
            Not After : Jun 14 12:01:20 2026 GMT
        Subject: CN=937bc602e002848638901b0230e2842caa89e44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:d6:2f:07:47:b4:56:53:60:bd:63:10:30:
                    1d:a2:6a:c3:fe:a4:60:57:fc:55:cf:94:f1:d9:63:
                    dc:2d:b8:75:0d:b2:fd:fe:5e:22:9f:32:13:d1:cb:
                    9c:f2:fc:d1:85:4d:0a:8c:61:24:6b:f0:88:aa:cf:
                    99:2d:ce:f3:20:57:4b:6d:01:a7:28:c6:58:9b:81:
                    d6:3c:bf:0b:ad:de:7f:ca:2c:c4:88:41:9e:3b:f7:
                    e9:77:92:16:e9:ff:9d:68:b2:58:44:ff:8f:d3:37:
                    43:7a:2e:60:9f:f1:09:b0:5a:34:05:81:40:10:91:
                    d0:0f:61:a7:46:e1:8c:5a:9a:e0:a0:f6:54:5c:51:
                    35:d1:44:99:96:05:10:84:c9:28:5c:11:27:5b:05:
                    70:d5:fb:cf:17:83:ca:81:3e:fe:82:42:5b:1d:1e:
                    f6:3f:e0:54:34:00:62:92:c5:eb:8b:a4:50:26:93:
                    73:cd:a5:d6:ea:1b:20:03:80:b2:b4:4a:d5:97:17:
                    28:56:ac:d8:81:34:1f:87:10:bc:ba:bf:e2:90:33:
                    82:83:4e:e2:ec:8d:eb:e5:a5:92:1d:1a:5d:8d:98:
                    b0:ff:69:dc:0b:b6:ea:df:37:29:b3:7c:11:31:d5:
                    14:d3:f7:bc:5d:b1:58:8c:f8:91:32:22:7b:d7:e1:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7B:C6:02:E0:02:84:86:38:90:1B:02:30:E2:84:2C:AA:89:E4:4C
            X509v3 Authority Key Identifier:
                keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:53:b8:c6:bb:68:2d:3d:58:90:db:c8:e2:52:7c:88:b5:9f:
         c9:bb:65:5a:53:93:3f:75:46:ba:69:26:7e:d0:5f:f8:ba:b9:
         21:57:8d:3e:7a:0d:47:74:c8:19:d6:34:b4:85:db:e2:44:64:
         a9:db:75:77:1c:76:2f:1a:ae:3b:8c:c7:51:c6:1e:22:4a:5b:
         0c:37:99:47:d2:8e:c4:67:09:ad:18:80:37:8b:6b:b5:be:ca:
         b9:f4:db:0f:62:6b:14:4f:5d:77:e1:38:74:89:8a:db:0a:ec:
         96:32:30:a2:4d:4f:5a:59:64:2d:14:1c:91:c6:c5:e2:24:9b:
         a4:b4:6a:a6:a6:56:ed:58:6c:f5:e0:88:99:a0:7f:ba:c7:7c:
         b4:09:b1:e4:a2:1b:f0:cd:19:2d:ea:de:96:47:29:82:55:70:
         e5:99:74:bd:a4:e2:57:fe:ca:e5:5b:ab:f9:7f:25:f7:c4:44:
         c9:ce:b2:17:5f:9f:de:3b:f9:63:7d:2d:b7:a1:43:20:aa:7a:
         ef:fe:e7:45:d5:da:c8:8b:b7:c3:ee:6b:f0:74:02:14:1c:17:
         d9:e9:31:d2:16:07:eb:42:1e:5c:0c:a3:11:72:09:af:f8:b0:
         86:78:56:eb:8a:2d:03:d0:f7:1e:cd:19:7a:1e:ef:36:68:47:
         c7:b5:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:18:13 2026 by rpki-client