Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File:                     1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier:          hahd+iSje0W7YKAfo0xAbrIQzCjrRyE5gWig0qvCc+Y=
Subject key identifier:   87:44:27:40:DE:25:88:72:0B:89:BC:39:72:F8:9B:76:FB:0E:1D:CC
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer:       /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial:       019EBDDAC38E7D0C004BE53903871D31F9C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number:          163D
Signing time:             Fri 12 Jun 2026 22:01:31 +0000
Manifest this update:     Fri 12 Jun 2026 22:01:31 +0000
Manifest next update:     Sat 13 Jun 2026 22:01:31 +0000
Files and hashes:         1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: r4Y7qZQCwEOPJ3yEUNeB14YfiaT1FhblsUl0Oox1nGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:c3:8e:7d:0c:00:4b:e5:39:03:87:1d:31:f9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
        Validity
            Not Before: Jun 12 22:01:31 2026 GMT
            Not After : Jun 13 22:01:31 2026 GMT
        Subject: CN=87442740de2588720b89bc3972f89b76fb0e1dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e5:3f:f3:a4:60:97:2e:ee:ad:ad:0c:f9:8f:
                    03:05:03:3d:53:3b:1e:49:b0:0f:77:75:f5:3e:7f:
                    22:07:93:37:53:7f:3a:ea:2c:51:0a:23:d9:a9:fa:
                    60:4d:28:fe:82:6d:81:99:ab:ba:5d:c6:22:e8:8d:
                    bd:f0:92:44:da:31:32:c4:4d:1b:89:9d:31:32:3b:
                    c2:22:ac:9d:53:d5:c3:13:49:83:33:01:9a:92:16:
                    de:bb:d9:bc:ff:07:78:63:77:fc:a4:ea:ac:b3:df:
                    65:9a:a8:7e:a2:b6:ab:bb:cb:c2:3b:94:bb:0f:ee:
                    38:9b:32:e3:e6:3f:73:db:8c:89:b5:7c:ab:64:3b:
                    28:39:0c:5b:11:80:a6:ab:24:4d:57:2d:45:d2:50:
                    9f:18:1d:d4:7c:cf:8b:b1:0c:d3:cf:71:c3:57:c6:
                    b2:90:cc:2a:38:4f:b1:7c:38:af:22:29:b8:bf:95:
                    58:27:fe:da:dc:3b:bd:9d:a2:9b:a7:8a:7c:da:46:
                    ed:36:ef:5f:7f:bd:cd:9e:db:63:af:4b:97:01:82:
                    54:0b:ab:d1:a7:11:0f:dd:8c:5e:74:1d:15:41:0a:
                    30:33:4e:a7:df:d0:7f:f5:24:4a:33:6a:78:8d:31:
                    36:4a:ce:51:6f:07:3d:98:7c:98:57:74:25:ef:ac:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:44:27:40:DE:25:88:72:0B:89:BC:39:72:F8:9B:76:FB:0E:1D:CC
            X509v3 Authority Key Identifier:
                keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:99:c3:a9:ff:d1:3a:dc:5e:df:b0:1a:f3:9c:82:71:89:a3:
         28:0b:01:cb:9d:d0:be:c9:d1:cd:aa:2b:85:07:3a:23:ec:66:
         29:97:93:c7:4d:be:08:da:50:1b:9d:17:42:ba:cc:c2:72:15:
         36:ed:4c:fc:ca:22:e0:56:d8:46:18:98:7d:00:8a:0b:2d:79:
         23:8c:27:12:d4:aa:43:03:f7:a0:c5:10:ef:07:c2:a1:24:cd:
         ba:56:0c:db:60:5e:68:c6:d3:88:97:3f:57:c7:b7:bf:85:b5:
         3e:eb:b7:8f:32:d4:41:78:01:72:6e:ad:a2:45:53:ef:04:e0:
         4c:e8:94:e4:3b:09:9b:d2:b5:bf:d2:09:2a:f7:b4:4a:13:d8:
         f7:04:5d:b1:b3:de:d1:31:98:ec:eb:9a:e6:77:00:68:47:db:
         9f:ec:99:8c:87:ef:14:b7:7f:06:ce:40:92:cf:da:72:6c:9e:
         2e:25:f0:9a:18:63:6b:93:91:fd:f6:51:1f:a8:20:4a:14:40:
         af:31:93:a9:d0:7b:22:db:37:8c:92:22:7a:9a:2e:62:62:b2:
         de:76:20:31:be:36:b5:a3:24:1e:be:97:03:54:3f:ff:67:de:
         12:14:b5:c4:09:49:66:04:75:6c:23:34:7c:96:b9:2f:91:31:
         0e:e8:8d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:57 2026 by rpki-client