Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File:                     4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier:          sQr+C8Gm+Z/w/08pb3MZZnlc2Cu56POaGBZ8k/ddLxk=
Subject key identifier:   88:40:68:93:C3:1C:FE:07:ED:C8:AC:83:49:A5:D6:6D:32:6C:E5:FE
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer:       /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial:       019EC0DA9FE1E17E519514507E3057603CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number:          18E9
Signing time:             Sat 13 Jun 2026 12:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:13 +0000
Files and hashes:         1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: 2EUvb+brxCei7adXdWaGYZVcqLLmG/TEXZX6WgTtkPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:9f:e1:e1:7e:51:95:14:50:7e:30:57:60:3c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
        Validity
            Not Before: Jun 13 12:00:13 2026 GMT
            Not After : Jun 14 12:00:13 2026 GMT
        Subject: CN=88406893c31cfe07edc8ac8349a5d66d326ce5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:30:6e:d9:4e:f0:79:70:c9:5b:89:91:ab:
                    3f:1d:9a:b3:d8:5e:ea:c7:1f:6c:6d:d1:96:9c:83:
                    c6:05:f0:be:a6:b3:42:1e:73:93:a9:6a:a7:46:1b:
                    04:0e:26:85:5e:75:39:61:88:bf:12:da:1c:51:62:
                    14:7b:97:2c:6a:ec:ef:90:07:6d:6a:59:a9:f7:39:
                    ab:8a:6a:de:d6:92:df:87:6e:1e:e8:f3:5f:50:32:
                    e4:85:91:1a:f7:6b:fd:2b:4b:26:7d:1c:72:c2:c6:
                    68:44:90:01:a2:c3:b5:66:40:82:fa:ce:9a:fd:21:
                    e9:d4:c0:4a:d4:5d:7f:21:b7:0b:87:0d:ab:4a:89:
                    6e:19:ed:e5:5f:66:5c:0f:f1:68:56:92:de:45:f0:
                    fc:bc:9a:60:2c:6b:09:5b:ee:3f:3b:f5:30:ca:1b:
                    29:d0:51:bc:db:1c:04:71:e0:6a:94:a6:78:7f:0b:
                    fc:a8:d0:70:d7:ff:69:ae:75:d1:79:0b:b7:09:3d:
                    97:ff:4d:f6:5c:b4:df:eb:98:a0:33:2d:34:eb:f3:
                    b9:07:93:77:c7:7c:e3:1c:60:d1:96:6a:39:ab:01:
                    ab:25:40:11:6b:75:a5:3a:81:a9:ef:7d:08:c2:11:
                    6e:09:b8:a5:a3:ce:a2:09:e4:ea:0f:e9:98:fa:e4:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:40:68:93:C3:1C:FE:07:ED:C8:AC:83:49:A5:D6:6D:32:6C:E5:FE
            X509v3 Authority Key Identifier:
                keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4a:de:99:06:12:a3:c4:a5:9f:54:ff:cb:5e:95:52:58:03:
         8c:91:4d:fd:b7:16:66:27:73:e7:93:6c:09:08:67:be:c3:02:
         8f:1e:00:72:93:52:d3:1b:40:f5:d0:e9:03:0f:23:91:32:b2:
         37:dd:00:80:af:9e:d0:f8:90:67:0c:23:f8:09:cf:90:24:25:
         54:43:48:a4:95:a6:b7:b2:ac:99:1f:79:87:9e:38:44:9c:47:
         3b:47:8d:72:a5:0c:a0:46:4f:de:5e:3f:b7:82:a1:45:e0:1c:
         fe:32:3b:0b:e9:d5:f5:99:9f:2e:fb:87:c9:a4:8e:55:f3:76:
         32:69:5b:a0:b6:79:33:cf:0e:5e:8a:dc:6d:59:df:3a:91:b1:
         c3:88:ad:5b:45:b5:1b:f3:c3:94:76:06:9e:aa:05:49:c2:0c:
         45:07:08:69:8a:2c:6c:27:e7:8c:d7:3f:8b:9d:44:96:b0:18:
         6f:ea:30:ef:a6:43:6c:97:2e:60:8e:32:82:a3:a5:12:73:92:
         41:0b:a3:e8:4b:f4:ac:29:ed:74:b7:3a:bd:d0:61:5e:fb:31:
         be:9c:52:2f:dd:fb:66:6d:84:a3:1e:ce:27:61:67:64:3a:1b:
         4e:dc:d3:dd:2f:63:16:29:35:9c:f9:94:fa:09:75:33:7a:ab:
         21:20:6a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:20:33 2026 by rpki-client