Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
File:                     By4pytat0iohtWIVEYeEHI9T8uU.mft (raw, json)
Hash identifier:          Ta2qyhWS7TG18VV5386JM5AD3x16oKq6pbPKGCAP/fU=
Subject key identifier:   D8:19:78:AD:0A:D4:E4:57:02:C3:1F:77:AF:DA:7A:44:18:21:BD:AA
Authority key identifier: 07:2E:29:CA:D6:AD:D2:2A:21:B5:62:15:11:87:84:1C:8F:53:F2:E5
Certificate issuer:       /CN=072e29cad6add22a21b562151187841c8f53f2e5
Certificate serial:       019EBFC832BDA01000334FC0E06C20081856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
Manifest number:          1D
Signing time:             Sat 13 Jun 2026 07:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:28 +0000
Files and hashes:         1: By4pytat0iohtWIVEYeEHI9T8uU.crl (hash: 8l5Xb7WhSyq2PLEmwUi8r1qmExzjqyR2H1auZ16vsZA=)
                          2: eIGQ7OTIETh1SMQL7eT4pNdJuwE.roa (hash: yvgblrAjB/uRs9ll3Bf1SWWkEIyGeHQyhsfe5WIS+Fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:32:bd:a0:10:00:33:4f:c0:e0:6c:20:08:18:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072e29cad6add22a21b562151187841c8f53f2e5
        Validity
            Not Before: Jun 13 07:00:28 2026 GMT
            Not After : Jun 14 07:00:28 2026 GMT
        Subject: CN=d81978ad0ad4e45702c31f77afda7a441821bdaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:aa:95:ce:41:a0:1f:2d:fc:20:b1:54:e9:
                    34:56:9f:c9:b7:6f:e1:b5:e5:74:87:f9:2c:b5:d8:
                    f8:6f:36:ac:d2:19:f0:09:3b:24:ec:db:26:81:72:
                    31:84:ee:26:cb:b7:4f:33:f6:41:87:10:1e:c3:b3:
                    42:33:c6:25:f3:f8:dc:80:0c:19:88:99:5b:ca:0e:
                    78:cb:b2:18:3a:d6:9d:53:8a:b3:f4:56:33:41:19:
                    7c:02:fe:5c:a1:37:ce:fa:b2:f8:9b:1a:15:33:c3:
                    0a:de:5e:95:e5:d4:5a:2c:b2:3e:6a:93:25:63:97:
                    13:27:de:f4:0b:57:80:31:8d:95:87:b6:0e:91:ab:
                    f5:f2:43:3d:2f:92:df:3b:18:5c:40:16:c0:30:7a:
                    ef:95:6b:32:7a:72:f9:93:33:4e:f2:22:e3:79:51:
                    79:ad:8d:b5:a7:77:e5:50:b2:4b:e4:f0:f8:0d:92:
                    83:cb:16:84:29:b6:81:1f:e8:1a:62:f6:5c:2b:a2:
                    e8:33:bc:aa:72:cd:1f:12:9f:17:37:39:8e:cd:79:
                    c2:76:86:41:58:7c:f4:69:e6:47:42:be:a0:4d:5c:
                    2f:ce:7f:21:c6:51:73:27:ce:73:d0:ab:1f:1b:52:
                    ca:32:3d:a3:cb:21:c3:e6:68:5c:f9:49:d2:c5:49:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:19:78:AD:0A:D4:E4:57:02:C3:1F:77:AF:DA:7A:44:18:21:BD:AA
            X509v3 Authority Key Identifier:
                keyid:07:2E:29:CA:D6:AD:D2:2A:21:B5:62:15:11:87:84:1C:8F:53:F2:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:0d:04:4c:f1:f1:82:35:8e:52:c0:f9:b6:e6:15:bc:d9:65:
         9c:b6:30:cd:b7:11:59:17:e1:4a:2d:d1:b5:f0:71:4b:c9:2e:
         60:32:72:2d:dd:fe:72:d5:bf:25:e8:5c:63:8f:fa:8c:83:a5:
         7d:67:a1:cc:38:ed:90:61:c4:bb:a1:af:e5:2c:b5:78:c1:39:
         f4:4e:a0:82:88:ba:30:e8:48:fb:da:23:74:6d:d2:30:1b:d4:
         0b:a5:8c:3a:01:c7:e2:8d:d0:32:16:53:6a:17:67:01:41:70:
         26:db:b8:9f:e9:c3:ea:bf:b4:3c:e9:a5:76:fa:bf:c4:a3:5a:
         53:9d:c4:6d:59:70:c8:52:81:75:3f:51:d6:ce:9f:b9:96:f5:
         0c:76:89:1b:c5:79:80:fb:5c:8f:8f:0c:ed:38:03:71:0c:3e:
         37:d6:b0:93:5c:c1:19:65:e1:7b:a5:a6:d2:3a:bf:65:04:60:
         93:cd:20:60:6f:55:4b:6c:b6:c0:ad:dc:d5:7a:1f:7e:b7:cc:
         6b:bf:9b:46:1d:40:a3:ce:a0:b5:7c:ee:fb:04:c7:01:58:0a:
         39:33:36:57:58:7d:cb:f1:24:1c:04:01:c6:e7:04:e8:f9:69:
         f0:3d:4b:63:5a:f6:5b:5b:88:74:aa:6d:16:04:df:c3:df:bd:
         19:84:f9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:41:32 2026 by rpki-client