Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File:                     4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier:          HqyZxfnhyp0l3mQCCAfpf/ZaIshhwUdiVxSJBwhKFaQ=
Subject key identifier:   20:5C:CF:CC:A2:1E:19:E7:B0:A0:16:A0:5B:9B:40:89:71:F2:C2:C6
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer:       /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial:       019EC25B9D68CD332330FB549C0EB551DC8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number:          182D
Signing time:             Sat 13 Jun 2026 19:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:44 +0000
Files and hashes:         1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: MDMJUYKDFl8KsD+y/hRAo/6TqlVQ4oUJYUwyaCGFTFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:9d:68:cd:33:23:30:fb:54:9c:0e:b5:51:dc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
        Validity
            Not Before: Jun 13 19:00:44 2026 GMT
            Not After : Jun 14 19:00:44 2026 GMT
        Subject: CN=205ccfcca21e19e7b0a016a05b9b408971f2c2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:6b:4c:01:a4:28:9b:f3:7b:d0:3c:33:b6:
                    97:1b:61:69:96:d2:df:17:d7:35:2b:fb:ab:e4:90:
                    71:92:aa:69:5a:10:f0:73:ad:c0:af:e2:a2:0b:2f:
                    66:28:55:db:dd:46:6d:43:a4:ad:e1:bf:6e:5d:43:
                    46:69:2f:6b:73:42:64:9a:44:80:69:68:c1:ce:c8:
                    fa:12:3a:81:f5:38:52:bf:27:9d:80:17:96:9f:14:
                    f6:96:b8:a1:92:a2:c7:f0:49:1d:d0:a7:73:f4:52:
                    12:69:d0:06:df:ec:cb:1c:77:4a:d4:ac:ac:d4:b9:
                    92:a4:33:ca:8e:79:3b:35:1f:32:8a:a3:f3:39:c1:
                    5c:68:87:d0:b1:dd:fe:2c:a1:2d:ae:6e:6f:52:45:
                    4c:76:db:21:44:95:8c:c8:10:20:01:eb:61:70:31:
                    1a:17:09:8a:a6:b9:73:12:4f:09:ef:3f:41:53:cd:
                    be:1b:56:77:a2:21:b8:77:4a:23:35:e5:1e:40:80:
                    f6:e6:17:b7:fa:44:66:32:47:ff:06:d4:79:01:d6:
                    46:40:50:e5:51:a6:9e:9f:e0:f9:28:3a:d5:42:87:
                    d2:43:89:b2:6d:53:9e:11:10:6c:53:35:d7:bf:fb:
                    f6:2e:0a:6d:49:82:f1:8e:e0:b7:fb:ba:5b:a5:66:
                    64:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5C:CF:CC:A2:1E:19:E7:B0:A0:16:A0:5B:9B:40:89:71:F2:C2:C6
            X509v3 Authority Key Identifier:
                keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d7:0f:9a:86:91:87:c5:25:0d:d7:ad:0e:94:db:65:9b:10:
         41:ab:ea:36:b9:f0:99:20:3d:62:8d:dd:7f:42:8b:89:e6:f0:
         26:1b:f7:cf:2e:ba:85:6e:5d:ca:85:ad:a8:93:cf:e4:33:35:
         b8:4c:93:cd:c6:30:57:14:dd:02:bc:92:76:29:90:de:21:63:
         67:af:94:b4:e2:24:47:9e:d3:49:e7:58:c9:d1:67:f6:79:29:
         a1:42:20:85:c6:7f:fc:c8:94:d3:46:c5:72:10:19:9d:5c:e5:
         56:84:67:9a:8b:8e:14:f3:94:96:7d:4d:64:38:37:3d:af:1e:
         80:ca:58:42:25:c3:0c:c6:d4:c4:d5:5f:6e:93:a1:be:da:a5:
         da:64:7e:bb:db:c7:43:8d:f4:12:53:1a:3e:5b:c8:66:ab:85:
         bf:2a:e0:b9:f3:b4:c0:06:47:90:11:24:28:17:5e:c3:e3:99:
         30:90:33:fc:0d:27:9d:02:e1:a8:0d:a0:01:12:48:7f:91:d1:
         f2:c3:b1:8a:02:f2:46:6a:b8:d5:7c:78:45:33:6e:75:e8:1b:
         68:d5:a4:ec:91:52:8f:30:26:75:67:90:c3:86:46:ee:9c:99:
         75:75:2e:8f:27:6d:bf:f9:e4:f6:ce:21:db:51:86:14:27:c2:
         be:bf:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:32:43 2026 by rpki-client