Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
File:                     pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json)
Hash identifier:          eUHwLVEp/057O6S83skx3lt4eLSUsTRJcAoyLkAV9x4=
Subject key identifier:   E6:D2:F4:C3:4E:C7:44:4E:56:A3:EF:DA:82:B9:A3:7B:C5:80:95:8D
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Certificate issuer:       /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial:       019EC17FDE37EAFFE3A3AA600748A5D27C1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
Manifest number:          0341
Signing time:             Sat 13 Jun 2026 15:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:43 +0000
Files and hashes:         1: lha0ZmedDVL5ojeX6XufkbgdzDc.roa (hash: aql9eZoUUBsK6RGXxorryRAzls71w3x+Yu3C3M/JeMA=)
                          2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: UDMllw7ma9cynOuv58lx8WUPtuEiihO7DkozxnKb2lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:de:37:ea:ff:e3:a3:aa:60:07:48:a5:d2:7c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
        Validity
            Not Before: Jun 13 15:00:43 2026 GMT
            Not After : Jun 14 15:00:43 2026 GMT
        Subject: CN=e6d2f4c34ec7444e56a3efda82b9a37bc580958d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:5d:42:e3:0d:46:7e:60:e4:45:03:19:d1:
                    0b:79:00:47:44:a8:09:d3:62:34:87:4a:1b:be:bf:
                    da:98:72:6b:3b:17:a7:42:53:59:f8:e3:4d:8e:f9:
                    af:69:28:e2:eb:1f:11:57:7f:ec:35:63:a6:f3:1e:
                    60:a6:f4:26:fa:88:59:f5:3b:58:2b:e1:4c:41:0d:
                    9a:d3:2f:ea:51:33:27:34:68:09:a3:cb:be:78:23:
                    38:0c:61:22:bb:3f:23:c3:da:db:d1:ce:25:39:21:
                    de:2b:df:d6:21:1d:d9:20:34:9b:3d:5d:ae:5b:55:
                    67:ae:fc:88:2c:c3:28:59:4e:67:ac:16:56:f9:ae:
                    1a:41:be:46:06:8b:c5:b1:ed:54:dd:a7:04:3c:f8:
                    7b:5f:9a:7e:3e:9f:71:e6:1f:dd:aa:69:a7:a7:71:
                    2d:fe:8d:52:90:70:7c:83:ff:46:06:f7:7b:85:be:
                    be:d8:14:85:c3:50:c4:ae:09:b7:be:26:ea:16:a6:
                    9f:9a:6b:59:f9:2e:1c:df:f0:e9:26:fb:f8:0a:37:
                    6d:ab:0c:22:36:df:af:09:fb:6c:d2:ce:61:ff:a9:
                    8e:32:35:8b:66:ca:a3:55:cf:4c:4f:42:83:aa:54:
                    4d:ee:4e:38:2a:a3:ce:6f:88:c3:21:ec:5c:f8:a2:
                    a1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D2:F4:C3:4E:C7:44:4E:56:A3:EF:DA:82:B9:A3:7B:C5:80:95:8D
            X509v3 Authority Key Identifier:
                keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:31:5b:37:37:26:95:e8:e8:50:8a:dc:8c:d1:d7:a3:9c:ab:
         08:a0:3a:f9:20:da:b0:36:4d:28:25:5a:e1:c8:b4:3b:08:bb:
         a5:2c:6d:50:0b:c6:a8:cb:77:21:82:60:c5:cb:79:1b:bf:66:
         d7:de:08:d5:2f:93:0b:fa:f3:15:76:e7:29:18:93:26:bb:fb:
         67:a9:23:72:29:6c:d4:06:9f:af:64:92:d2:4d:02:ec:7b:ac:
         be:1a:07:3e:73:19:e2:24:cf:2d:cd:4b:fd:98:2b:94:8f:89:
         8a:d1:7b:9f:94:c6:e6:d6:38:09:ee:c9:9e:f8:4c:b2:d9:37:
         5c:8f:6a:8a:70:59:e2:13:98:b8:6d:a5:c8:eb:38:2e:b2:cf:
         a3:7b:ff:fe:a1:f6:20:cd:2b:bb:fc:23:4a:2e:71:28:68:1c:
         dd:49:77:df:20:28:d9:24:e1:a5:67:31:c5:84:4c:6e:85:cc:
         f3:ff:d5:0b:06:35:16:e4:c8:70:f5:57:f9:94:a6:f3:58:79:
         03:bd:0a:7c:11:02:0c:a2:c7:49:aa:75:a5:49:e1:c0:17:fa:
         a9:8e:d0:a9:3b:7f:0d:fe:a3:17:de:5c:6a:39:30:06:de:0d:
         6c:3a:40:3c:d7:16:8d:24:b1:7c:1f:bf:64:a6:5d:00:a7:b3:
         08:1e:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:54:27 2026 by rpki-client