Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File:                     4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier:          UksSmW9kvoTNGWiHUoAjcBcaCc/ZunWP5bkp8ftcPlQ=
Subject key identifier:   09:F9:55:E3:EF:21:8F:8B:37:DA:4F:CC:FE:D2:C1:04:20:EA:D8:87
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer:       /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial:       019F17C296B06DAB4876C09A4C548FC333E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number:          0C53
Signing time:             Tue 30 Jun 2026 09:00:56 +0000
Manifest this update:     Tue 30 Jun 2026 09:00:56 +0000
Manifest next update:     Wed 01 Jul 2026 09:00:56 +0000
Files and hashes:         1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: Hbj5vHsRXLkhusk3H3I75PcNMs3FgagNjzEgkrFP9uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:96:b0:6d:ab:48:76:c0:9a:4c:54:8f:c3:33:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
        Validity
            Not Before: Jun 30 09:00:56 2026 GMT
            Not After : Jul  1 09:00:56 2026 GMT
        Subject: CN=09f955e3ef218f8b37da4fccfed2c10420ead887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:e1:bb:ad:21:f7:e5:45:aa:da:64:43:9a:
                    54:87:b8:f0:38:62:69:66:6c:70:5f:3f:ef:b3:f6:
                    53:41:c3:d7:18:f8:a0:8f:64:31:3c:4c:13:3d:85:
                    9b:06:e5:df:ce:e5:76:f6:ee:f7:94:6c:43:8a:06:
                    4d:2e:32:ed:c0:5d:4e:18:41:36:6a:3a:34:ee:2e:
                    30:b5:07:93:0a:32:00:93:b8:b3:6a:90:ef:63:36:
                    19:6b:ca:6d:93:b3:38:a8:e3:1b:d9:53:66:3c:52:
                    24:85:c8:ce:5d:58:b2:bc:56:9f:74:f0:00:80:8d:
                    0f:b2:b1:8f:4b:58:cc:05:41:45:a0:b8:8e:a1:23:
                    03:7e:88:de:43:4f:72:1d:14:ae:0e:66:7a:aa:be:
                    18:6d:56:e0:a3:f6:5a:d1:c3:77:e8:e9:ee:bb:e0:
                    7c:a8:3d:13:de:62:4a:14:df:ae:5c:2e:85:fc:16:
                    9f:80:63:d0:d8:b2:e5:a2:39:46:e4:da:21:99:60:
                    7b:21:ab:fc:fa:37:d2:ae:5a:23:f6:31:03:93:a9:
                    73:7b:50:1b:35:c6:88:58:90:f3:55:40:f2:a9:7e:
                    40:b5:71:70:80:20:b7:ac:cc:29:55:41:87:62:5a:
                    f1:61:b8:e5:63:92:ca:36:85:d0:2f:9f:9b:73:9a:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F9:55:E3:EF:21:8F:8B:37:DA:4F:CC:FE:D2:C1:04:20:EA:D8:87
            X509v3 Authority Key Identifier:
                keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f6:99:18:14:69:11:ea:be:89:15:58:ab:1e:14:70:e1:fd:
         c0:d8:d7:c4:59:c9:e4:31:79:2b:3f:56:cc:ea:23:20:e5:32:
         cf:58:5d:61:e3:05:6b:87:cf:ba:d0:dc:87:84:38:61:e6:00:
         a4:56:f5:5a:47:eb:87:f1:9d:94:4b:63:a9:bd:de:4a:7d:f4:
         f7:73:10:f6:02:f7:11:82:1a:45:5b:78:69:60:51:9c:4c:30:
         df:c3:5c:d6:96:72:1c:36:57:68:0e:ad:16:19:1b:6b:46:0a:
         0c:41:88:96:1d:f6:0b:7b:95:ff:32:26:b1:bb:14:12:4f:45:
         d7:cc:a4:a2:b0:33:6d:c9:85:58:f9:6f:2d:37:14:4f:3f:5f:
         77:a7:d4:33:44:ea:65:aa:0f:6a:70:35:f2:04:8f:6a:ce:69:
         fb:fa:a7:4b:58:1c:d6:6e:71:c2:99:c9:9d:d2:2a:44:4a:40:
         ab:5d:97:d3:e2:56:d6:98:22:aa:c5:c8:ae:a2:1f:a7:85:6a:
         be:89:29:39:d8:75:4f:7f:c8:2b:a3:5c:de:5e:3a:4d:c0:9a:
         ad:46:ba:33:1e:bc:c8:1f:02:de:10:a9:e0:19:52:98:a4:ad:
         32:5b:13:a6:0d:0d:c7:e0:01:70:7d:31:9a:5d:26:cd:a9:42:
         d1:69:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:08 2026 by rpki-client