Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          q7tJutYiE6wpmnvYxhHXKSQuHRM7KL6fgKPhqdVAaE4=
Subject key identifier:   E4:CE:05:9F:0E:8F:12:45:42:21:E9:3B:A0:A1:F7:B3:46:0F:2B:BE
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       019EBB0FBFB652577748519FAA1EA0E6D779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          0DA5
Signing time:             Fri 12 Jun 2026 09:00:31 +0000
Manifest this update:     Fri 12 Jun 2026 09:00:31 +0000
Manifest next update:     Sat 13 Jun 2026 09:00:31 +0000
Files and hashes:         1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: JexF9yP1p/WCVdFapOv1lAirWwKJDc6hzHaRgJspPSc=)
                          2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:0f:bf:b6:52:57:77:48:51:9f:aa:1e:a0:e6:d7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: Jun 12 09:00:31 2026 GMT
            Not After : Jun 13 09:00:31 2026 GMT
        Subject: CN=e4ce059f0e8f12454221e93ba0a1f7b3460f2bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:17:7f:68:9f:46:58:4f:37:4c:ad:36:28:
                    56:c8:d9:7f:22:9b:81:f2:d3:cd:5f:5a:65:39:d3:
                    eb:6e:dd:5e:ce:fd:a3:1f:56:f5:26:59:2c:c5:ad:
                    46:05:ef:91:03:93:cf:9c:cd:1a:47:21:06:7e:f9:
                    8c:78:d7:96:00:bb:83:c4:57:aa:92:c4:0e:ae:6e:
                    01:40:e2:c7:a8:3c:cc:8f:b3:88:26:51:84:65:8a:
                    7d:fd:86:17:c9:44:c3:df:1b:35:85:90:a6:b1:d9:
                    eb:9f:a5:c6:73:63:fb:a6:de:f9:e9:7f:63:ef:0b:
                    54:46:3b:ea:57:8c:fb:1f:78:14:b7:71:89:66:4c:
                    4b:09:2f:61:96:68:88:3b:a2:77:02:07:94:7b:6b:
                    85:50:60:d7:2b:de:f5:52:1f:cf:0c:93:4d:78:9f:
                    27:ba:57:b8:5a:c5:7f:40:1d:45:36:41:5d:82:1f:
                    e5:90:a6:49:35:37:0b:62:83:99:1e:8a:66:44:ec:
                    74:9f:4e:cd:2a:88:6e:f7:8d:b2:4b:b4:91:3f:58:
                    3a:14:e9:ce:7b:cf:17:be:8b:c3:f4:72:2b:ee:fd:
                    b7:4a:ad:b9:28:51:64:e9:76:6c:71:2c:b8:b2:ba:
                    16:92:44:40:bb:3a:ba:6b:2c:c2:6d:82:77:53:38:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CE:05:9F:0E:8F:12:45:42:21:E9:3B:A0:A1:F7:B3:46:0F:2B:BE
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1a:22:5b:54:6a:a1:93:05:9e:97:98:2b:84:a1:7f:0f:c1:
         cc:b1:4d:32:7c:3b:76:00:05:3c:3d:8b:a2:a1:88:9f:9c:16:
         28:b7:ee:05:5b:5f:bb:f5:11:45:a4:25:3f:9e:f6:02:45:e3:
         a4:ec:2e:1e:2e:1d:29:5d:89:25:7c:6f:ce:f0:e3:c7:ed:90:
         54:43:59:ba:8f:bd:04:df:a3:fb:bc:be:48:26:f7:98:65:60:
         70:fb:66:3f:a5:b3:37:37:20:c9:b0:db:b2:b6:1d:3f:8e:e3:
         ab:62:18:33:0e:34:f0:29:ae:d7:40:39:7e:dc:d0:fe:2f:80:
         a9:12:2f:64:ab:ff:76:ca:cf:bd:69:30:59:c4:c8:52:8c:81:
         a1:0c:d2:6e:cd:3e:c4:64:48:6b:59:94:a0:3c:2d:b1:9a:c9:
         4b:a0:25:28:0a:24:fb:15:17:92:bc:43:33:9a:e4:77:49:3a:
         e2:d9:89:fd:06:08:b7:3a:82:ac:fa:ba:55:fa:77:45:04:96:
         f1:b3:22:20:01:79:46:7f:8a:fa:e8:38:e8:d5:25:53:fa:de:
         fd:42:ac:10:6f:76:4c:62:29:86:d7:f3:d6:1f:65:6a:54:0b:
         96:56:68:ae:95:f2:f1:e2:c1:07:5d:41:2e:99:24:64:d4:68:
         66:f5:fc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:05:44 2026 by rpki-client