Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File:                     4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier:          3D+aIMYLXYK0CYKRc0WclTMnP6rzxIjEpP6w7I3wdcU=
Subject key identifier:   F6:58:57:CD:9B:D5:EC:8F:18:C0:EE:DD:8F:64:32:75:DF:96:65:62
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer:       /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial:       019ED3BCFDB6EC88EAF5C2E1B25269D8C5D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number:          1966
Signing time:             Wed 17 Jun 2026 04:00:38 +0000
Manifest this update:     Wed 17 Jun 2026 04:00:38 +0000
Manifest next update:     Thu 18 Jun 2026 04:00:38 +0000
Files and hashes:         1: 1_CArV4y8iJiwF-qVbyr6lB9z1M.roa (hash: sgMm20YcGzVkjGjRqisERD3t8QppN0pvoO75EGB83sY=)
                          2: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: R5zQXdKwFDzI/+3MqDNJzIDFB0/6pCu1cT6s3EW44Dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:bc:fd:b6:ec:88:ea:f5:c2:e1:b2:52:69:d8:c5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
        Validity
            Not Before: Jun 17 04:00:38 2026 GMT
            Not After : Jun 18 04:00:38 2026 GMT
        Subject: CN=f65857cd9bd5ec8f18c0eedd8f643275df966562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dd:44:42:14:f5:c7:60:01:95:50:c4:ef:be:
                    92:8d:6d:12:86:97:79:54:53:55:da:59:f3:2d:33:
                    05:2e:ba:ed:6d:1b:dc:d3:7d:12:81:6a:70:27:89:
                    c8:1c:f6:e4:aa:76:ff:0d:36:0e:b4:67:b7:b8:bb:
                    b7:ca:7b:20:61:c6:ef:30:48:72:f8:29:5f:93:43:
                    4f:ad:1b:0b:fc:70:c6:90:f5:ff:cb:00:a6:67:28:
                    10:2a:5f:47:06:ed:ee:5b:cc:7f:57:a1:6b:c0:4d:
                    2d:93:25:2a:c8:1c:f9:d2:a3:4a:f8:a6:57:d7:12:
                    db:ec:bf:9d:e6:aa:a4:0f:0d:9f:c0:d0:c1:35:9a:
                    cb:ed:4a:e8:6e:32:71:d3:e1:cc:91:ba:62:fd:09:
                    d5:81:ee:7d:e2:48:a6:92:41:2b:fc:70:6a:87:c5:
                    37:bc:26:53:6b:50:37:2f:7c:b3:2e:cb:af:ff:96:
                    91:f9:81:bb:92:e2:d2:54:3a:f3:c5:7d:be:8b:39:
                    fc:8e:11:f6:c2:4d:46:b5:99:aa:63:81:75:49:01:
                    ce:05:db:c5:c2:4e:de:2a:79:19:7a:f4:07:88:4b:
                    cf:f2:fa:b7:b7:97:bc:5e:ef:83:84:4d:a4:0d:f9:
                    06:ce:af:8e:60:7c:12:9c:df:c4:b0:05:ad:1b:78:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:58:57:CD:9B:D5:EC:8F:18:C0:EE:DD:8F:64:32:75:DF:96:65:62
            X509v3 Authority Key Identifier:
                keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f8:fa:b2:b8:bb:d6:e8:77:e4:6e:4c:f9:a7:a6:ee:e0:65:
         31:46:1a:15:45:28:75:a7:4c:ce:65:d7:f2:1c:0d:da:17:d4:
         7a:a9:6a:84:aa:dd:3a:65:b2:ee:2f:ba:56:09:b0:3b:a8:b8:
         bd:e7:45:d5:94:0b:ce:3d:c9:bd:a7:5b:8e:c5:2e:72:71:fb:
         8f:1d:8f:35:d2:19:a1:74:9e:c6:86:f2:99:74:d1:ea:45:33:
         d4:a8:08:01:1d:c7:89:3c:1b:29:48:56:2e:8e:be:9e:01:c8:
         63:67:44:81:60:e9:89:50:95:82:32:9e:2e:1c:9a:4f:80:17:
         c7:6d:36:34:a0:39:35:4d:bd:b5:88:10:b4:93:38:da:83:a2:
         cd:4c:5c:a7:ce:0b:3f:63:72:f0:5f:7a:b2:7b:91:d6:61:62:
         44:10:07:a8:1a:bf:37:a8:73:1a:35:82:9d:9a:d0:38:5e:4b:
         d3:d1:ac:78:66:ec:bd:82:82:e9:31:5c:0c:c6:0a:76:1b:8f:
         17:16:6f:65:cb:be:51:78:0e:5b:5a:f3:9f:ff:04:7f:d9:a2:
         9a:db:2a:9e:d9:d8:3b:ea:f3:d3:b3:04:39:04:bd:c6:b6:bc:
         d0:90:df:ee:cd:34:ab:8e:ec:5f:0b:a7:2b:17:28:48:4b:1a:
         b1:b8:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:25:20 2026 by rpki-client