Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File:                     4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier:          xtST9t2iTIiXWpdsqmDv1uRgpi365SxymwYZ2gNDJUw=
Subject key identifier:   06:BA:F7:18:40:A0:E1:FD:09:E8:ED:C1:35:D3:6A:3F:07:72:D4:B6
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer:       /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial:       019EBE10F1F2DB6258E7A8455CFB1A375421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number:          0DFE
Signing time:             Fri 12 Jun 2026 23:00:42 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:42 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:42 +0000
Files and hashes:         1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: zinQcZ3gjlQPxTC06CQ0hNfkYB+mgzOvv9t/pqpzfbo=)
                          2: kngS6K-zD_8sUA397D-FmyaEEHM.roa (hash: EsRQ0EgBwWquSNWV/LYzcwJWySX++9Ff9+FU6ey8IeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:f1:f2:db:62:58:e7:a8:45:5c:fb:1a:37:54:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
        Validity
            Not Before: Jun 12 23:00:42 2026 GMT
            Not After : Jun 13 23:00:42 2026 GMT
        Subject: CN=06baf71840a0e1fd09e8edc135d36a3f0772d4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:cd:23:1f:a6:e5:78:da:f0:8d:63:99:f3:
                    89:68:40:5e:09:92:3a:16:ef:b7:84:b2:1d:10:41:
                    9f:3c:e0:98:62:fe:25:0c:46:ee:15:2b:cf:24:54:
                    50:ff:ac:97:aa:62:3f:76:f2:a7:1b:ff:31:93:c8:
                    9a:39:81:47:c1:78:42:8b:8e:72:ed:fc:6b:2c:7a:
                    b7:ad:06:db:02:41:46:d3:7e:2a:d5:5d:16:fb:9d:
                    a0:64:af:ca:54:1f:d6:19:79:b0:56:00:88:71:98:
                    35:28:69:54:db:68:83:df:fc:e1:a0:02:34:a0:4b:
                    c4:94:9b:0b:2b:d4:62:6a:c6:a8:51:7e:af:4a:1f:
                    8a:aa:90:58:30:df:f9:89:ae:97:42:8c:dc:83:7d:
                    c8:22:47:4c:bc:ac:a3:d3:78:e4:9e:99:ba:3b:56:
                    e4:87:26:44:da:4f:1c:4a:dd:3e:dd:a5:a4:12:7e:
                    2b:4c:38:cf:df:cd:dd:64:4c:6b:89:4a:cc:7b:c9:
                    4d:fa:a3:e6:52:98:82:b0:0b:b2:46:06:92:f4:41:
                    77:83:09:b3:ef:6f:7e:3b:9f:2e:d7:0f:47:db:27:
                    17:12:fb:9d:e1:68:19:8e:fa:71:8c:7c:15:d9:1a:
                    f2:8d:72:ee:ae:6d:d4:99:26:19:88:69:21:ff:9d:
                    d5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BA:F7:18:40:A0:E1:FD:09:E8:ED:C1:35:D3:6A:3F:07:72:D4:B6
            X509v3 Authority Key Identifier:
                keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:49:09:60:cc:21:f8:a3:cc:12:ba:ee:53:9f:5a:3d:c9:64:
         6a:d8:e5:69:fe:f4:db:d4:51:34:1b:0e:7a:6a:48:b5:ef:99:
         02:2b:63:c6:8d:ae:21:37:27:6d:0b:12:ed:0f:e5:59:ad:ad:
         07:57:96:97:b7:3b:47:09:bd:45:62:12:6f:25:9b:e5:2a:26:
         18:9f:67:7f:e0:e7:21:d0:c6:05:fb:6c:c7:0b:8c:78:8c:6d:
         ba:44:33:62:1e:12:b5:96:af:54:5d:21:6b:73:8a:25:8c:b5:
         4d:46:c4:85:ce:15:47:fb:40:a4:bc:a7:9d:3d:c4:79:66:40:
         b3:f1:55:35:fc:5f:c8:25:21:cf:00:72:95:b8:6d:bb:a7:af:
         5b:9f:02:a9:17:bf:34:2a:ac:a7:83:7e:98:47:dc:e7:1b:0c:
         d8:29:d7:34:3b:33:30:d4:70:52:e0:2d:47:34:a5:17:58:53:
         86:49:52:d4:47:61:af:e4:b8:a3:ba:27:f0:d0:55:02:21:e4:
         af:d2:3f:17:e7:80:44:0f:63:8b:1b:e8:ee:90:1d:33:f4:ab:
         5b:11:76:87:37:6b:4b:f2:85:52:db:55:16:d8:ef:af:92:58:
         ff:26:43:50:c7:43:41:2a:09:a0:29:f4:71:bc:78:1f:5f:93:
         55:ce:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:02 2026 by rpki-client