Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
File:                     tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft (raw, json)
Hash identifier:          onDJ7ZdmWmb1nsuslaQkznuESr0hLIhelt8TWeSKExI=
Subject key identifier:   EE:9F:DE:4A:9D:22:BB:00:CC:F9:C7:7B:A5:A5:0D:B4:DE:7F:51:FE
Authority key identifier: B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0
Certificate issuer:       /CN=b6bde8794b0a0d88f92967f5084e4c38199613a0
Certificate serial:       019EC2C975A2A9BFDE3C1E41DC622169F479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
Manifest number:          01E4
Signing time:             Sat 13 Jun 2026 21:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:43 +0000
Files and hashes:         1: tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl (hash: TTNG7YdjjPn47fNbyEPWAefxvakI6zaai32K2qWXujE=)
                          2: ukIbrLUvPtIxZ5wtDHPd0BjbBfs.roa (hash: 4R245tMXj5hWTZh+CwuGNWMTCAhfqI5ky1f9sYscEcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:75:a2:a9:bf:de:3c:1e:41:dc:62:21:69:f4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6bde8794b0a0d88f92967f5084e4c38199613a0
        Validity
            Not Before: Jun 13 21:00:43 2026 GMT
            Not After : Jun 14 21:00:43 2026 GMT
        Subject: CN=ee9fde4a9d22bb00ccf9c77ba5a50db4de7f51fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:3a:a9:04:99:ae:bd:2d:47:78:b0:70:f3:
                    09:1e:75:c5:e7:d5:df:70:b7:e4:c4:00:f0:90:d0:
                    c9:e9:d1:b2:89:08:e6:fe:37:02:cc:4c:97:c8:76:
                    50:aa:63:fc:eb:f4:cc:4b:de:d1:b2:fe:d1:ce:a7:
                    ee:30:be:e9:b5:d7:5c:da:60:b1:4a:a8:53:0e:db:
                    bb:5a:ee:ca:b5:5b:18:93:53:50:14:22:91:57:19:
                    01:dc:da:29:c7:87:40:16:a6:ec:7e:b9:bc:a5:91:
                    7f:0d:af:80:44:95:fe:2d:d9:be:24:70:81:ef:f2:
                    de:a9:e0:23:f1:6e:6b:31:23:98:79:77:42:49:64:
                    75:d3:b8:97:c0:d8:3f:09:58:4f:fc:19:1a:82:71:
                    d6:37:7f:9c:4d:7b:b9:ba:02:41:cc:52:c7:43:b4:
                    a7:bf:68:3b:f2:0f:eb:a9:eb:b7:0f:8b:ae:9e:84:
                    fa:96:02:16:0c:1b:b7:8c:f2:43:1f:c4:ce:a2:07:
                    6a:a6:dc:ec:14:16:c7:bd:8c:71:ee:50:3a:e1:15:
                    6c:52:0c:d8:e9:4d:92:ca:01:15:0c:b3:db:cb:58:
                    6f:d5:d2:20:71:a6:f2:83:93:55:dc:27:8f:56:be:
                    fb:a4:f1:ff:0c:04:5e:76:ba:05:d6:83:fc:db:d6:
                    56:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9F:DE:4A:9D:22:BB:00:CC:F9:C7:7B:A5:A5:0D:B4:DE:7F:51:FE
            X509v3 Authority Key Identifier:
                keyid:B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:eb:8b:de:9b:3e:1b:cf:9f:89:8b:04:05:90:65:77:70:68:
         ff:10:aa:eb:b5:82:52:9f:dc:fd:43:4d:26:48:89:08:94:bc:
         77:52:c6:9c:c7:da:34:eb:36:6d:fe:99:7d:04:fe:ca:85:71:
         12:2f:a4:9e:6c:b5:90:39:b0:e9:1b:a2:30:47:aa:ac:65:43:
         7d:0a:a9:78:fa:f6:6e:0e:1e:75:97:c1:97:62:fc:84:3d:78:
         e9:4a:f7:7c:f5:30:25:b9:ac:58:ba:bb:ba:64:6c:fd:9f:50:
         15:85:8b:fd:28:d3:0c:4f:ca:16:49:f3:ed:fe:48:67:7d:82:
         35:ba:6c:66:1c:d4:12:fc:8b:34:49:94:ba:c2:43:1c:4a:92:
         3c:6e:05:97:99:d1:90:1b:79:61:b2:2d:f7:18:75:a5:62:6e:
         e2:a0:8b:13:94:ef:12:d4:91:b8:0a:ad:aa:e0:c5:28:59:b4:
         ba:87:54:ee:3e:94:f6:db:64:c3:93:cc:ec:e1:a0:27:a9:87:
         d9:d0:4b:7e:3f:96:cd:65:44:02:11:5f:30:8a:bc:bc:67:2b:
         f6:01:77:1d:3f:d6:9c:21:b4:fb:b3:24:10:b2:29:ab:ee:dc:
         d5:84:55:a2:0b:b4:dc:e3:50:be:38:4d:1a:90:e3:ed:30:29:
         c9:3e:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:53:17 2026 by rpki-client