Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File:                     4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier:          vwQd3AFf9qOTFgi8Za/0JqD6rFpTsIUzgwRM7nEX0Jo=
Subject key identifier:   18:62:6F:24:1E:EC:B8:BC:DA:F7:52:CE:75:38:3D:10:2D:5C:0A:B8
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer:       /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial:       019EBF5B413100B1849E4C1A57DE790DC433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number:          0931
Signing time:             Sat 13 Jun 2026 05:01:29 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:29 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:29 +0000
Files and hashes:         1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: 28wN5P2rTFz5F/IZ+/+8CsbhEiDdce6dkxfmsGxetPw=)
                          2: xsczLZy6vYyowOb8czcl6wqwt9w.roa (hash: Mvlo5cxvh4qQACxtbdlZhswtrG2sScu72g8Sl/rtq7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:41:31:00:b1:84:9e:4c:1a:57:de:79:0d:c4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
        Validity
            Not Before: Jun 13 05:01:29 2026 GMT
            Not After : Jun 14 05:01:29 2026 GMT
        Subject: CN=18626f241eecb8bcdaf752ce75383d102d5c0ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:e7:06:dc:90:8a:eb:c5:e8:0a:b6:83:34:
                    3d:0e:4d:ea:74:19:ee:96:06:86:cd:8d:cc:1b:5b:
                    cb:95:c1:f7:99:cd:4a:18:96:cb:b1:d5:a6:90:d8:
                    02:aa:3a:ab:c3:b2:c9:7c:48:3a:d4:e3:1f:e9:1d:
                    03:af:69:10:f9:ed:fa:32:9f:1c:bb:99:6a:1f:8c:
                    83:4c:b4:b6:55:38:e4:51:a5:ad:bf:6c:13:4c:14:
                    6d:2b:75:71:85:4c:74:90:15:99:37:de:fc:6c:bc:
                    4f:15:ff:e0:15:52:f9:0a:4d:0e:66:41:26:3a:5f:
                    19:ce:b8:d8:f7:bd:8c:51:0e:e7:db:12:d0:c3:df:
                    07:28:cf:4c:18:be:6d:bd:41:30:07:44:26:37:69:
                    4e:29:6a:cc:aa:d9:56:e4:11:ab:f8:42:1b:dd:08:
                    24:99:83:45:f1:e0:2a:67:e5:64:2d:c9:34:fe:40:
                    b4:50:0e:98:5e:81:d1:02:33:59:11:1a:d0:c9:9e:
                    c3:54:57:6a:a0:1d:60:13:a8:14:98:e5:73:c3:e1:
                    fb:2f:96:94:8e:13:49:c4:0e:66:d4:85:ee:b3:5e:
                    dd:38:0b:50:b4:26:29:66:29:bd:89:10:e4:79:c1:
                    b2:e9:00:84:c3:b1:d2:ad:7e:bf:cb:17:a9:e9:47:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:62:6F:24:1E:EC:B8:BC:DA:F7:52:CE:75:38:3D:10:2D:5C:0A:B8
            X509v3 Authority Key Identifier:
                keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:12:79:19:e0:07:8a:dc:3c:aa:21:94:2d:38:16:2d:26:b5:
         8c:84:3d:12:24:06:11:c7:4b:82:35:4d:85:33:e4:04:4e:91:
         87:56:58:cb:b6:cd:ea:06:66:d0:df:ca:ae:45:11:6d:70:f4:
         dc:4f:41:09:a5:b5:d1:16:b5:f9:95:57:9e:15:cc:db:20:42:
         c9:ee:42:b1:b5:a2:07:be:d2:84:79:a5:44:ab:e2:a2:59:55:
         73:04:c1:3d:89:2e:4e:fd:d4:06:ac:59:b0:47:40:4e:41:51:
         97:42:c8:67:cb:d3:2a:bf:33:f1:dd:f9:2d:7d:45:ae:86:2d:
         9b:c8:18:df:5a:b0:be:66:12:57:60:97:b3:f8:3f:b1:d1:c1:
         a4:88:8d:22:16:26:f1:24:1b:88:e2:49:51:1c:a1:bb:ea:b1:
         1a:83:a5:10:27:9a:f5:62:82:33:fe:03:f0:e9:44:4a:ac:19:
         7f:a7:58:38:ca:f6:36:a1:df:b7:92:39:c5:e5:12:a1:83:bb:
         bb:f9:f1:1a:66:a7:b4:23:d4:b8:68:f5:25:c2:41:cb:b7:ad:
         51:5a:30:98:a7:74:16:ad:88:2c:58:ee:ef:95:02:43:de:90:
         f4:97:f1:fd:8a:cc:da:91:df:7e:a5:59:12:19:39:2e:74:c7:
         fc:bd:8a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:17 2026 by rpki-client