Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File:                     xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier:          q4phujsfYQ2hZIL5l4LmMnjhNO7KeRljl1abiqyRPIw=
Subject key identifier:   BE:02:BF:32:89:05:E1:8C:E4:14:D5:4C:35:6C:62:FF:26:23:BF:5C
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer:       /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial:       019F11C037D6D06EA890A22005C37C919EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number:          070E
Signing time:             Mon 29 Jun 2026 05:00:37 +0000
Manifest this update:     Mon 29 Jun 2026 05:00:37 +0000
Manifest next update:     Tue 30 Jun 2026 05:00:37 +0000
Files and hashes:         1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: A7ind/L4l0ElgCeB5aSVa1gQY7fgCzo+ZqFCk/jdC9Y=)
                          2: zzi8zjGe28pTyTWtNNeVC8-_dWE.asa (hash: QeR+Juy6P7hMJ8A5+I8ru+6te5JuUSLSPP0C9C3wehI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:37:d6:d0:6e:a8:90:a2:20:05:c3:7c:91:9e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
        Validity
            Not Before: Jun 29 05:00:37 2026 GMT
            Not After : Jun 30 05:00:37 2026 GMT
        Subject: CN=be02bf328905e18ce414d54c356c62ff2623bf5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:a8:b5:7b:93:28:b7:b6:0a:38:4c:4d:16:
                    c1:50:6e:8a:a2:60:33:45:28:fd:54:2e:4a:7e:94:
                    13:f3:d5:f5:a3:68:09:a9:81:ec:d8:6b:d0:94:a3:
                    29:9f:be:76:44:5f:c8:e4:0d:5e:88:45:f4:e2:97:
                    f5:31:68:95:ee:6d:6c:f4:a4:bf:1c:be:58:c8:9c:
                    99:86:01:d4:6d:c0:cc:02:91:ef:93:b4:97:8a:ba:
                    ec:fd:be:06:d3:bc:04:bf:8c:63:54:5e:07:16:63:
                    08:80:7d:b3:40:69:d5:83:19:10:4b:db:5e:38:00:
                    b4:7e:3c:3e:ea:22:a5:98:c8:eb:c6:d8:d8:71:73:
                    20:a6:3c:90:a4:93:20:f4:7a:2d:a9:03:ac:65:78:
                    9b:be:36:88:23:eb:7e:cf:78:c0:62:65:52:5f:08:
                    0b:49:fd:6c:43:a8:84:2f:06:65:c5:4d:32:cb:e4:
                    9f:83:f2:4a:ed:0a:06:90:64:94:ba:96:65:cc:7d:
                    b4:97:ee:93:00:02:3a:f8:30:5b:48:bb:ec:e8:7e:
                    76:48:6b:bc:24:24:59:42:25:bb:35:7d:70:7a:f1:
                    d6:c2:57:a0:fe:5e:c9:8c:01:1c:8f:c4:dc:17:f3:
                    e8:27:85:e3:28:8b:03:cd:ae:49:32:c0:e0:26:a1:
                    0c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:02:BF:32:89:05:E1:8C:E4:14:D5:4C:35:6C:62:FF:26:23:BF:5C
            X509v3 Authority Key Identifier:
                keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:e1:49:50:9a:90:ea:f5:86:2f:7b:55:ec:2d:02:74:85:54:
         a0:16:48:2a:7e:68:fd:47:b5:e7:bf:ba:3d:68:2e:06:4c:d0:
         bf:a5:a4:5b:3c:77:ed:f9:a7:12:47:6e:b9:4c:13:1b:19:d2:
         6f:a6:5e:27:6b:df:b2:95:21:5b:bc:27:c5:df:e3:04:88:ac:
         c6:98:aa:24:6c:40:13:e7:ce:62:64:20:8a:86:3d:8a:84:57:
         fd:9c:2d:d0:0d:80:ee:11:d3:f4:8c:21:7f:72:b9:71:6e:32:
         c1:a6:65:10:3e:4e:e5:f3:8b:21:65:1a:bb:8b:52:74:44:80:
         a3:50:97:1f:a2:4f:8a:db:bc:ce:25:05:18:7b:f4:59:13:72:
         4f:e2:3f:b9:45:20:b9:24:6a:5a:fd:c9:aa:28:a0:e6:61:4a:
         6c:b2:9d:ae:b7:09:a6:41:33:97:71:26:53:ec:5e:72:5e:03:
         03:13:66:82:85:6f:81:ad:a0:14:e3:e3:20:22:e5:04:e9:4b:
         50:53:ca:f2:85:5e:dd:cb:e9:95:9a:6a:b1:bd:b5:6c:cb:32:
         ed:e0:7e:b1:ee:d1:6c:3b:26:22:58:3d:e0:0b:dc:4a:be:b8:
         24:26:a0:33:6e:9d:7a:06:f5:c6:60:c1:7a:5d:9e:b6:28:b5:
         61:66:c4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:34:36 2026 by rpki-client