Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File:                     04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier:          y2VAmNW72maKmhFVI9fZ0226q3G54Dq+g9Hyak8XwTw=
Subject key identifier:   34:51:16:2F:C7:EF:F4:E2:98:8B:25:A4:EE:D1:D3:D8:5D:57:84:E5
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer:       /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial:       019F1943C0424B6EB0A4AD67CA157559E128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number:          0D94
Signing time:             Tue 30 Jun 2026 16:01:38 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:38 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:38 +0000
Files and hashes:         1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: D387cMeP9AZDS0sHj5KmMVZZQHsseILYR2yTyoAhwps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:c0:42:4b:6e:b0:a4:ad:67:ca:15:75:59:e1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
        Validity
            Not Before: Jun 30 16:01:38 2026 GMT
            Not After : Jul  1 16:01:38 2026 GMT
        Subject: CN=3451162fc7eff4e2988b25a4eed1d3d85d5784e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:c3:39:85:b0:24:dd:20:35:93:c3:1a:ac:
                    18:44:30:19:a5:80:4e:19:f8:86:7f:40:9c:47:c9:
                    1c:26:88:b7:61:fa:02:82:6f:8c:ec:2f:a2:df:e4:
                    0b:8e:90:1a:42:d6:45:a4:f6:2f:e4:14:af:be:3f:
                    2b:ea:df:7f:f5:6c:94:18:e8:c3:09:a8:35:5f:18:
                    68:f3:1e:54:ec:72:f8:4d:99:ac:3b:3d:f3:1d:f8:
                    f1:08:7a:f9:2e:d1:aa:b9:e5:44:ad:e8:ed:bd:1f:
                    a2:f6:63:b8:5b:8a:7d:4c:3a:14:d3:a7:4a:e2:62:
                    79:54:4c:8d:ab:18:25:c3:d1:5c:4b:db:00:49:7c:
                    b4:60:a2:a8:f7:87:94:29:c4:9d:bb:17:c4:8b:ab:
                    38:f8:27:8d:f0:9b:5e:c7:ab:80:0e:ef:07:ab:6a:
                    1e:1c:54:28:2b:8d:59:57:96:f4:5e:2b:f6:6e:a9:
                    95:f6:3d:76:95:a2:01:66:8d:09:8c:e0:1b:18:ef:
                    e0:c4:73:43:4c:20:81:39:b5:f3:38:9c:04:47:69:
                    5c:a5:7a:a8:73:ee:fd:a6:b2:fb:7a:83:0e:9d:bf:
                    c8:bb:8d:47:e9:6a:37:1d:a8:12:fd:f2:34:4f:65:
                    68:6a:72:64:71:58:eb:d1:02:9e:ae:8e:2f:f6:eb:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:51:16:2F:C7:EF:F4:E2:98:8B:25:A4:EE:D1:D3:D8:5D:57:84:E5
            X509v3 Authority Key Identifier:
                keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d3:ab:17:7a:53:7e:fe:e3:d9:69:47:7b:4d:c7:cb:f1:79:
         0d:5e:b0:d2:80:51:93:46:df:1d:98:4e:fa:d1:b0:a3:f3:11:
         bd:1d:f4:a8:1d:09:ad:8c:8d:0f:58:2b:73:8b:15:4e:54:31:
         a6:ee:b3:d0:2d:c9:41:3f:dd:e6:cc:f6:2d:f2:d6:87:2d:90:
         8e:2d:6d:4e:c0:10:bf:d7:34:f5:25:64:cf:fb:ca:b2:d4:1b:
         73:22:2a:88:91:d0:93:d0:d6:19:50:96:9d:8e:2b:58:d6:12:
         99:73:8d:8b:95:b8:2a:0d:d4:0e:1b:b0:29:0b:3d:5a:46:a3:
         99:ab:ad:25:3e:5e:5c:3f:cb:14:fb:dc:d3:52:41:ef:db:38:
         74:3c:e1:b3:86:8e:a7:7e:37:3a:87:4d:da:bd:78:ba:1f:df:
         18:fb:ab:04:79:3c:a6:80:52:30:d9:bf:f0:ac:33:8b:76:ab:
         98:db:4f:5c:e5:7b:f5:ae:8d:f7:d1:ec:f4:12:f4:c2:11:61:
         aa:e0:63:d1:23:c1:4a:f3:4f:5d:82:c7:c5:ba:52:9f:13:26:
         dc:12:50:f3:d7:1d:c1:f3:ea:0b:a7:54:e6:ce:6b:ae:85:6f:
         87:6f:a3:b9:8c:46:c5:9f:4f:43:87:61:80:da:fb:b2:c3:43:
         67:c8:e9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:31 2026 by rpki-client