Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File:                     4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier:          mz7/XKMDBymROaaphZ5G27fwxl2SduvTRWtpH9vgkc0=
Subject key identifier:   6F:DA:72:4B:84:67:2C:C2:DB:89:7C:79:31:58:0A:3F:E0:4C:38:7C
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer:       /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial:       019EBF918FB274D47E669A6F09EE72DFBCC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number:          0CFF
Signing time:             Sat 13 Jun 2026 06:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:48 +0000
Files and hashes:         1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: WNBDwAbiETbxI2dprym2LfaZkZI9oRD7AK3JCn++1SM=)
                          2: UWX8SxCjwL_qmxdOe6nySrZQC84.roa (hash: D5R5Nyowo4jjOW+4uW1uT9NqCdmsnMIgdkwB6H1oOfI=)
                          3: vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa (hash: 8oO/bPo+96+JLDumliudhdJVxtG8gpJVeHN/Dwo+7JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:8f:b2:74:d4:7e:66:9a:6f:09:ee:72:df:bc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
        Validity
            Not Before: Jun 13 06:00:48 2026 GMT
            Not After : Jun 14 06:00:48 2026 GMT
        Subject: CN=6fda724b84672cc2db897c7931580a3fe04c387c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:20:7f:8f:b5:8b:0f:4c:06:17:e6:e9:4b:
                    4e:78:44:53:d7:dd:ce:3d:a1:a8:2f:7c:fd:ca:ab:
                    ef:22:27:45:d8:4c:54:16:8f:e2:4b:82:7c:ac:51:
                    69:15:1b:ac:2a:6e:54:68:26:25:b6:ee:e4:95:39:
                    92:40:c7:e0:97:ef:b1:4d:bc:95:fd:a1:c9:55:cb:
                    3a:98:12:33:1a:b8:d5:5d:9c:a6:48:39:c7:27:12:
                    80:25:10:e1:bb:e3:95:c7:87:b7:0a:83:65:42:75:
                    7c:c5:36:ce:d5:43:f9:b2:ac:cd:ad:75:08:80:ed:
                    95:9f:73:99:ae:81:b7:63:e4:15:91:5c:59:c3:2e:
                    30:54:38:38:0c:07:cb:6b:c9:b4:8f:7d:ac:95:73:
                    ca:d8:33:6f:37:86:0f:5f:95:5a:27:ed:63:56:3e:
                    25:89:6c:8a:e2:45:bc:30:e6:7a:48:70:be:7e:ed:
                    a1:f9:f5:9d:0e:cf:24:bf:ae:dc:80:48:3f:42:5c:
                    f0:2b:4f:e9:c7:27:5f:b3:90:5a:0d:92:79:e7:c2:
                    0b:7a:64:ed:3c:33:a0:67:82:6d:ee:d8:d8:e0:55:
                    76:a7:60:7e:84:fb:02:84:63:8a:25:d2:4e:fb:a7:
                    4f:af:b5:7e:c5:d0:76:f5:7d:83:20:81:a4:0c:a4:
                    40:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DA:72:4B:84:67:2C:C2:DB:89:7C:79:31:58:0A:3F:E0:4C:38:7C
            X509v3 Authority Key Identifier:
                keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:63:b7:d6:db:6a:5e:f5:f7:c4:12:7d:b5:bf:12:0d:ca:d5:
         8f:9e:90:13:eb:79:f0:f6:76:f8:67:7a:77:d8:03:e0:d5:31:
         20:c5:32:5b:ca:dc:fd:8f:e2:7a:15:65:13:67:52:81:75:77:
         e2:5b:52:64:90:91:8d:01:2d:d2:e7:5f:54:84:57:d4:b4:ea:
         29:2f:81:5d:a6:ad:66:8c:d8:a7:9e:02:5f:e8:56:84:6d:05:
         73:c5:33:4c:7b:6c:cc:08:5d:cd:58:83:ea:49:dd:76:1e:db:
         fe:6d:1b:33:72:56:27:83:02:17:2b:28:21:cd:d6:25:45:77:
         ef:d7:2a:5a:e6:29:ed:4c:f2:0c:cd:2d:4b:44:ea:8d:15:45:
         53:56:0e:2d:ac:f7:bf:74:93:b8:79:66:9f:d7:a2:67:55:cc:
         75:b6:84:50:37:ed:97:52:6a:1f:d6:c1:65:20:3a:6f:0c:60:
         14:c8:0e:eb:2c:3e:bf:b1:29:a6:8e:52:93:72:71:0a:0b:35:
         82:d4:a0:da:7b:79:89:7a:08:55:08:9b:ce:13:e0:a9:0b:96:
         08:4f:60:d9:b8:8e:cc:0f:92:ad:d0:f9:44:fe:e0:ea:1a:0e:
         14:30:75:43:45:e9:dd:37:19:d6:81:30:fa:58:31:55:7f:03:
         bb:d2:37:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:14:11 2026 by rpki-client