Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.mft
File:                     Re1ZewY6Xadli0iMsbbD-bIQlPM.mft (raw, json)
Hash identifier:          9C3gMBaNHVyJobrNSfuj8U+EflPZbVcoEypa1184urc=
Subject key identifier:   86:8F:9E:D9:34:0D:01:6E:2E:90:37:4D:62:F4:3F:67:3E:AD:5F:D9
Authority key identifier: 45:ED:59:7B:06:3A:5D:A7:65:8B:48:8C:B1:B6:C3:F9:B2:10:94:F3
Certificate issuer:       /CN=45ed597b063a5da7658b488cb1b6c3f9b21094f3
Certificate serial:       019EE2C2B2F80A32D0D5C1F4C9D873188915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Re1ZewY6Xadli0iMsbbD-bIQlPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.mft
Manifest number:          98
Signing time:             Sat 20 Jun 2026 02:01:10 +0000
Manifest this update:     Sat 20 Jun 2026 02:01:10 +0000
Manifest next update:     Sun 21 Jun 2026 02:01:10 +0000
Files and hashes:         1: Re1ZewY6Xadli0iMsbbD-bIQlPM.crl (hash: DhR7NR7VBv6M+fr+q31roVI+3hqtSpAHG93TxM4cRdM=)
                          2: SDpQVLxIqGRbMlfT39OKkP1mF-o.asa (hash: XIF+ZTFsKODGQx3mj+VZqNyb64ld+5zEG7Huo/CDaxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Re1ZewY6Xadli0iMsbbD-bIQlPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e2:c2:b2:f8:0a:32:d0:d5:c1:f4:c9:d8:73:18:89:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45ed597b063a5da7658b488cb1b6c3f9b21094f3
        Validity
            Not Before: Jun 20 02:01:10 2026 GMT
            Not After : Jun 21 02:01:10 2026 GMT
        Subject: CN=868f9ed9340d016e2e90374d62f43f673ead5fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:fa:9c:d9:73:26:dc:46:1a:47:da:69:73:
                    45:e9:ba:d9:90:17:5e:a7:60:a8:68:bb:2a:ee:6a:
                    da:a7:73:1c:9b:2a:93:db:ea:ee:8a:f4:99:dc:3c:
                    d7:2b:b3:a6:e7:af:ae:1f:8e:50:0c:65:db:0d:e5:
                    17:31:a1:71:04:ff:95:54:81:0f:f4:7e:56:2b:6b:
                    c1:36:1c:de:4e:69:a1:52:c5:3e:d1:77:44:0a:40:
                    5f:6c:f5:c2:70:b8:77:22:de:de:63:87:c2:0d:0a:
                    e2:d1:7b:8a:fe:e7:d3:0b:14:e5:74:b4:a7:2a:c8:
                    2c:72:e3:d3:e8:c4:99:0e:2e:a7:13:51:c2:12:23:
                    ab:ef:7c:af:21:b9:e0:59:1f:88:5a:1a:ed:83:72:
                    6b:19:20:39:26:e6:ce:11:f9:63:85:71:64:37:ce:
                    76:16:34:26:77:0b:21:de:eb:43:4c:29:ae:e5:97:
                    1d:1a:61:47:60:c1:28:62:97:91:73:e8:d3:b7:19:
                    ca:84:63:49:f0:55:cf:db:0f:5b:0f:d9:6d:df:ef:
                    0a:a0:9b:fd:ca:e8:f1:16:79:62:93:54:e1:6e:b2:
                    04:bb:a3:83:59:80:00:10:fa:b8:71:f0:6c:e6:1b:
                    6a:14:c4:84:61:65:92:d1:ff:c5:53:73:2d:c5:35:
                    85:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8F:9E:D9:34:0D:01:6E:2E:90:37:4D:62:F4:3F:67:3E:AD:5F:D9
            X509v3 Authority Key Identifier:
                keyid:45:ED:59:7B:06:3A:5D:A7:65:8B:48:8C:B1:B6:C3:F9:B2:10:94:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re1ZewY6Xadli0iMsbbD-bIQlPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:52:8f:67:6f:d7:e5:4f:94:9c:f6:3b:b4:e2:75:58:a4:6e:
         85:2c:89:ab:e3:67:d7:e5:e5:1b:ed:ff:75:33:8c:a1:1c:4e:
         c7:d0:27:2e:09:7b:1a:e9:fc:52:a2:2c:68:8e:11:24:cb:37:
         8e:fd:c6:08:89:50:3d:3b:aa:d4:bb:47:21:f0:dd:a8:4d:5f:
         6a:51:89:52:82:53:d8:4f:9d:77:27:d1:1a:0e:46:68:f5:e8:
         20:70:3d:81:e4:bf:e0:7d:89:e4:e3:38:1e:7b:7d:fa:cc:06:
         5d:a4:b1:af:d8:48:46:94:e6:52:48:cd:0b:1e:07:85:05:11:
         a0:1b:d8:89:97:d3:20:c9:1f:d1:f1:9c:26:79:a1:b9:7b:7d:
         a0:4d:29:b1:1d:99:05:65:e8:e5:2c:f4:71:d7:86:cc:1e:70:
         21:3a:4b:b0:6b:1f:73:bc:f0:e1:4c:52:33:00:a8:e7:8b:6d:
         7d:85:aa:2c:aa:b4:d0:87:29:b1:b9:bb:8e:64:f7:dc:28:f7:
         59:ca:c4:02:f9:e3:ea:fd:27:e3:0d:9b:bc:04:d8:24:b7:85:
         f4:55:67:0c:02:9e:b5:f9:e2:e5:09:5a:76:bb:29:0f:44:88:
         70:74:73:5e:52:f2:b2:9f:3f:7a:77:8e:c8:e7:c1:e2:2b:3f:
         35:ba:a8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:20:53 2026 by rpki-client