Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
File:                     vL4wndalMhnOvVZb4fI0uT5WLjk.mft (raw, json)
Hash identifier:          6tRDJlPD+H/UeKhrP4q4NjFO2BoJcFf+uEmrh+BYpks=
Subject key identifier:   12:86:17:CF:F7:2B:FE:51:CB:CD:10:50:C8:E8:AE:9A:E3:EA:7C:48
Authority key identifier: BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39
Certificate issuer:       /CN=bcbe309dd6a53219cebd565be1f234b93e562e39
Certificate serial:       019EFCF22AFF12340C4FE0DE9CB7FD02E3E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
Manifest number:          0147
Signing time:             Thu 25 Jun 2026 04:03:09 +0000
Manifest this update:     Thu 25 Jun 2026 04:03:09 +0000
Manifest next update:     Fri 26 Jun 2026 04:03:09 +0000
Files and hashes:         1: vL4wndalMhnOvVZb4fI0uT5WLjk.crl (hash: UBLbEvCjBWp5uWxzN4uOzrLCkqOzrUDX4mB8+7PtHV0=)
                          2: y80B_uuM_hGD_Q988wwVbuTVVzQ.asa (hash: wqE3B1uMY7o5p44haT4r4tbcqIzVxJtI7cONoSQ5lKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:f2:2a:ff:12:34:0c:4f:e0:de:9c:b7:fd:02:e3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcbe309dd6a53219cebd565be1f234b93e562e39
        Validity
            Not Before: Jun 25 04:03:09 2026 GMT
            Not After : Jun 26 04:03:09 2026 GMT
        Subject: CN=128617cff72bfe51cbcd1050c8e8ae9ae3ea7c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:97:17:a6:fe:1e:8b:47:ff:aa:7b:08:db:
                    92:a9:c5:69:c7:12:f6:1c:ff:13:04:8f:f3:5d:2b:
                    2f:35:95:dc:29:7b:33:69:51:45:a1:68:b1:1c:ce:
                    7a:e8:d7:9a:d0:f4:35:11:8f:96:59:b7:90:9e:02:
                    2d:0e:7d:0f:fe:41:8c:5e:f2:5b:a8:ef:d8:63:3a:
                    fa:2b:90:fa:0b:83:f5:4f:4a:f5:01:33:e3:77:fd:
                    38:d6:ec:eb:1e:54:0e:38:5b:a9:2e:a7:fb:84:00:
                    16:24:db:56:58:ed:cd:84:f3:d0:9d:97:66:c8:ca:
                    a3:41:31:37:e9:88:b8:4e:33:14:4a:45:82:3d:54:
                    38:83:d3:73:95:40:d2:04:8f:ef:17:8e:8e:2e:b0:
                    1d:c5:fa:d4:71:81:f0:fd:70:91:fd:d7:59:21:a5:
                    6f:ee:82:03:e8:64:10:b2:a6:8d:dd:eb:e7:fe:d7:
                    e6:b0:91:5a:fb:35:6f:aa:de:8b:fd:65:45:a8:b1:
                    d7:ce:7a:6d:df:73:5a:3f:49:91:74:c7:f2:59:a5:
                    f1:24:e3:d2:57:84:d3:d4:cf:8a:d9:bf:dc:5a:e7:
                    88:4d:6c:6f:bf:a5:f5:96:d7:91:b5:1e:8a:59:16:
                    2a:f2:f0:5d:e8:8a:36:76:34:7b:9b:67:91:d1:33:
                    b4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:86:17:CF:F7:2B:FE:51:CB:CD:10:50:C8:E8:AE:9A:E3:EA:7C:48
            X509v3 Authority Key Identifier:
                keyid:BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:89:85:0f:0f:ee:7e:c5:d8:73:30:7b:47:60:6e:bf:3a:8a:
         1d:f5:76:17:dd:53:e3:09:e5:ee:95:da:58:c8:7f:7f:74:d9:
         cb:b7:27:18:8d:cc:7c:ec:04:c6:63:35:bd:74:49:0c:f6:00:
         3c:50:26:26:08:cd:5a:c2:a6:80:36:bc:97:09:fb:09:bc:18:
         eb:52:16:95:9a:b7:42:6a:4f:85:d5:9e:32:7e:1f:2e:9c:04:
         47:c1:8b:03:de:dc:39:55:36:a0:12:9c:15:a6:78:56:a3:e7:
         51:9b:15:c9:17:0b:6d:88:59:59:c5:ca:a7:e0:30:2a:d7:79:
         3a:16:55:2e:42:65:23:65:ea:55:30:c4:de:08:3f:d4:b7:1d:
         6d:4e:1b:af:09:89:d9:0d:e3:7b:05:56:12:45:36:6c:fa:21:
         7c:fa:1e:b4:69:b4:ae:48:6b:22:bf:62:c9:f5:6a:eb:10:cc:
         c0:e0:85:5c:68:45:95:3a:b9:73:e8:bd:e4:03:f8:a8:33:e0:
         7a:f2:e9:00:fc:3a:f2:aa:cb:22:35:d9:80:51:b3:25:3d:6b:
         d5:8d:b1:88:88:dc:00:6d:8b:21:83:5f:92:7b:5e:2e:5a:fc:
         27:ca:4a:b3:68:51:bb:6c:07:e9:bd:74:f5:d7:04:24:ce:60:
         79:67:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:29:33 2026 by rpki-client