Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
File:                     PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json)
Hash identifier:          22N9ood8WMuHb/fjbsEVjVKHX1qmmf0oWrpU6ZzG+ws=
Subject key identifier:   6A:27:9D:98:8F:09:0B:17:E0:8F:B3:89:E1:1A:B1:55:54:14:AC:48
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Certificate issuer:       /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial:       019EA89B4C07E4440E0D1909CCD0AFB5124D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
Manifest number:          1951
Signing time:             Mon 08 Jun 2026 19:00:10 +0000
Manifest this update:     Mon 08 Jun 2026 19:00:10 +0000
Manifest next update:     Tue 09 Jun 2026 19:00:10 +0000
Files and hashes:         1: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: kmutUi6HK4sqKfY4CuFeiwMK/KvBJ4hlnfYnNut98h0=)
                          2: sCE1yodUvj9BdJNK5llFZ8BEDYY.roa (hash: 3/B6MniV1srlZK4xMEp39gTJz673XIWVDanm60XM8zU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 14:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a8:9b:4c:07:e4:44:0e:0d:19:09:cc:d0:af:b5:12:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
        Validity
            Not Before: Jun  8 19:00:10 2026 GMT
            Not After : Jun  9 19:00:10 2026 GMT
        Subject: CN=6a279d988f090b17e08fb389e11ab1555414ac48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:8c:e2:31:44:28:14:d9:a5:e9:46:0a:3d:
                    0f:4f:4f:f3:4b:97:a4:ed:0c:84:62:63:1a:9e:cf:
                    61:e6:80:28:f3:1d:d0:5d:51:93:b3:5d:75:f3:d5:
                    86:a2:8c:e7:a0:5d:54:c0:67:6f:f6:16:3f:81:d2:
                    7e:e0:31:97:f9:53:54:cd:8b:0f:4b:b2:a0:b9:3e:
                    c9:85:31:58:4f:65:89:ae:33:f6:1a:47:a7:4a:0f:
                    e2:fb:5c:4f:b0:95:e5:fa:e8:0c:9b:fb:1b:34:b2:
                    d1:05:ce:18:3a:7a:6c:04:d6:5b:72:19:9e:9d:f7:
                    11:71:59:d1:ba:bf:fb:2a:e0:04:48:50:6f:bc:51:
                    c9:b9:06:fb:9b:0b:99:61:07:f2:24:93:27:ca:3e:
                    ec:34:72:be:20:4e:9a:76:cf:bc:91:e3:91:e1:4d:
                    1a:37:fb:f8:cd:c4:a7:25:c6:d0:01:f7:7a:15:4b:
                    33:d4:d7:34:cd:ce:42:67:20:05:44:1e:2e:53:c5:
                    c3:18:64:02:00:f9:83:df:2e:d1:44:76:e4:80:2c:
                    30:ba:90:cb:1c:2b:1f:5a:4c:c1:25:88:87:c7:d3:
                    4d:35:b9:81:24:bf:8d:63:38:69:d0:08:66:71:44:
                    c3:dc:a5:d3:68:63:9a:6c:62:43:5b:f4:e5:d0:c7:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:27:9D:98:8F:09:0B:17:E0:8F:B3:89:E1:1A:B1:55:54:14:AC:48
            X509v3 Authority Key Identifier:
                keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:19:6a:0c:b8:93:13:27:93:2f:81:24:d8:a9:e8:6a:92:
         10:a9:a0:5a:a5:a9:92:a8:51:1e:ed:27:2d:df:1d:eb:77:67:
         88:d5:1f:0f:6e:ec:8c:81:4b:a1:f2:e1:91:59:d0:95:b5:3d:
         4f:b9:de:2e:2c:8d:43:ea:4a:e9:a4:9a:b0:bd:6c:3d:f9:c1:
         64:36:00:37:d0:d4:4c:72:30:f7:8c:33:48:71:4d:28:df:17:
         4b:67:dd:da:6a:17:0f:53:2c:8b:59:28:55:56:48:1c:50:18:
         93:ef:b2:2a:57:7d:7e:90:ba:f4:03:85:4d:19:1f:fd:87:65:
         a4:6e:58:8c:43:fc:0f:a2:bc:9c:a3:42:07:e0:d5:bb:cc:38:
         5b:a5:88:2a:72:2a:33:c4:50:88:3b:2a:dd:37:01:74:70:21:
         eb:e0:44:56:15:ec:27:25:37:0a:c3:bf:d9:6c:36:48:29:a3:
         56:e8:4d:6d:c9:8b:cf:a7:7b:00:64:41:10:b5:f6:88:6b:83:
         38:d8:06:d6:5b:7a:5d:67:c7:9f:b4:fc:39:ab:37:26:22:a3:
         81:72:61:fd:bb:7f:b2:de:3c:bc:c3:2b:7a:55:76:e2:69:df:
         95:c0:7a:70:2d:8d:2d:50:34:1c:6b:97:68:a5:f2:54:e9:8d:
         93:b7:12:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 23:08:49 2026 by rpki-client