Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
File:                     ENJnhg06QDsA4aYcVDSs_265c5Q.mft (raw, json)
Hash identifier:          M4meYbSNSuB5zRggxrMapoRs9u93s9AcDEk/usd6LZQ=
Subject key identifier:   CD:BA:DD:72:87:85:C3:1F:51:C5:E8:F0:4A:0D:B5:0E:99:0B:B0:38
Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
Certificate issuer:       /CN=10d267860d3a403b00e1a61c5434acff6eb97394
Certificate serial:       019F1341761F997E7AD6C59186E8D1EA881C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
Manifest number:          1918
Signing time:             Mon 29 Jun 2026 12:01:24 +0000
Manifest this update:     Mon 29 Jun 2026 12:01:24 +0000
Manifest next update:     Tue 30 Jun 2026 12:01:24 +0000
Files and hashes:         1: 8AFAw8J8BylZNxkuCYZxLwFMDu4.roa (hash: rqqV4vNuT7ox7Umt3jz1Rj0aoR+gnpbzztReONXP05Y=)
                          2: ENJnhg06QDsA4aYcVDSs_265c5Q.crl (hash: 8y2sA+TPesuBHhDjx9jTi4oogBoiwEKZjY6xPBagv2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:41:76:1f:99:7e:7a:d6:c5:91:86:e8:d1:ea:88:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394
        Validity
            Not Before: Jun 29 12:01:24 2026 GMT
            Not After : Jun 30 12:01:24 2026 GMT
        Subject: CN=cdbadd728785c31f51c5e8f04a0db50e990bb038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:40:7f:d5:46:9d:e7:bd:8e:1e:1b:c8:eb:4f:
                    c9:81:fe:1c:13:8a:2f:1e:07:3a:29:4b:1a:df:e3:
                    75:84:a5:36:b2:74:4d:c9:3a:bb:f7:85:e0:54:5d:
                    30:60:e5:7b:d3:ce:75:01:39:d4:a2:56:ef:2f:46:
                    0c:48:51:18:e4:da:1a:96:e5:59:3c:6b:ac:59:e5:
                    87:62:2e:38:70:27:b1:d5:9c:8e:7e:f9:48:32:74:
                    31:0f:1b:e5:53:5b:9a:63:6a:9b:fa:f8:27:df:8f:
                    04:ea:84:5b:5b:1b:4c:ce:ce:f4:e0:7f:b2:9f:69:
                    ab:58:e6:26:74:8d:84:6f:89:79:41:72:16:d1:20:
                    aa:51:83:7a:e7:57:51:c0:44:d5:1e:4f:13:25:f7:
                    66:4e:1c:f1:fe:5a:aa:06:87:7a:90:53:a0:44:64:
                    ac:3b:c0:d7:f4:77:f0:c8:57:4d:23:9e:a3:8e:a1:
                    5d:6d:72:90:a8:ee:f8:0c:d6:cf:99:ad:70:08:59:
                    73:3d:70:23:b1:1e:95:1d:f4:cf:d4:c9:4d:0f:ec:
                    65:b7:b0:a4:46:4e:f6:b5:ba:69:ee:ef:fe:08:d2:
                    e3:54:54:cf:8d:c4:52:e5:34:42:62:fb:16:ff:0f:
                    c1:72:4b:bf:70:c5:40:15:df:aa:ff:fd:57:27:5a:
                    45:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BA:DD:72:87:85:C3:1F:51:C5:E8:F0:4A:0D:B5:0E:99:0B:B0:38
            X509v3 Authority Key Identifier:
                keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:63:2b:01:35:a8:88:c7:e4:d9:08:40:76:b9:b9:4d:38:86:
         55:60:64:e2:92:47:ff:53:14:0d:cb:a3:40:d8:d8:13:40:0f:
         d7:db:0f:22:30:87:45:7d:c0:1d:5d:02:7b:b8:db:a0:2b:f1:
         cd:16:31:3a:c3:e8:a3:1c:2c:ea:1c:bb:11:0f:e6:eb:61:56:
         d2:e2:ef:f7:38:79:7e:c1:53:41:18:4b:2f:88:35:fc:e6:a5:
         59:3c:b9:eb:5c:4d:94:8f:1a:91:c2:60:98:06:f1:0e:2e:c1:
         e8:bd:9b:8f:d3:8a:7f:bc:3d:d4:63:6d:17:f7:08:e1:6b:9c:
         7d:3f:4d:dd:9b:59:0c:3a:ea:1e:fe:e2:08:7f:d3:ce:7d:dc:
         09:8e:26:0e:fc:96:9a:19:7d:1c:08:43:e9:57:d1:60:3d:e7:
         57:e9:85:eb:ce:3a:22:ee:31:47:22:ea:20:5f:fa:d3:35:40:
         11:c5:4c:67:d8:54:1e:db:bf:fa:b6:89:65:76:f1:78:36:df:
         65:51:15:8c:81:90:4b:cc:9d:33:2b:2c:78:af:fe:9e:30:29:
         a6:b8:5c:e1:e3:5f:43:1a:6b:c0:81:fe:c2:65:19:69:55:47:
         61:26:cc:72:9e:1b:52:1f:90:bd:98:7a:8e:d2:11:ff:90:c4:
         7f:f2:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:37:39 2026 by rpki-client