Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File:                     E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier:          UfaH4XaYaSnew3Nfw8xgapsY2T8u77Ex8fjx9x6Wfi8=
Subject key identifier:   2E:AB:AE:7A:34:B2:44:9B:4F:4B:24:88:BA:1C:3D:A9:C2:BC:79:D2
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer:       /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial:       019F1942FA877F8167646F4CE676215499A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number:          11FC
Signing time:             Tue 30 Jun 2026 16:00:47 +0000
Manifest this update:     Tue 30 Jun 2026 16:00:47 +0000
Manifest next update:     Wed 01 Jul 2026 16:00:47 +0000
Files and hashes:         1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: XUSd3BQINrOYJzHlJloE7HSRKEmc0ACddP1NShCsVUs=)
                          2: eIvGRKEJzXb2weR4zx6UQcOzf-I.roa (hash: fXtGDiQR6bCST/6YzQ1DTyETQIkxGKJAAeEFWx1ditk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:42:fa:87:7f:81:67:64:6f:4c:e6:76:21:54:99:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
        Validity
            Not Before: Jun 30 16:00:47 2026 GMT
            Not After : Jul  1 16:00:47 2026 GMT
        Subject: CN=2eabae7a34b2449b4f4b2488ba1c3da9c2bc79d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c1:72:e5:32:9b:a0:78:7f:b5:3a:66:09:77:
                    ab:90:9d:91:85:7a:bb:9c:b8:39:53:4a:96:dd:09:
                    ff:24:55:7e:ed:9c:f9:1b:c7:2b:7f:5c:52:17:e9:
                    07:0d:f6:a1:89:4a:ea:a8:87:fa:ab:45:ed:fc:de:
                    e9:13:27:fb:95:5f:73:13:eb:f0:ee:62:91:c0:ae:
                    86:53:97:7c:b9:61:b1:b0:29:14:2b:49:c2:a9:e2:
                    f6:27:61:d7:9e:18:a0:1c:da:97:f6:8e:45:ee:04:
                    1a:22:b4:31:21:36:76:11:d8:1f:4b:aa:26:0e:c5:
                    e9:ca:43:2e:be:1f:ac:50:bc:c7:b6:d0:21:8a:a2:
                    ea:f9:ee:60:d0:dc:aa:f6:7d:aa:7e:63:7f:cc:d3:
                    b1:82:44:5e:62:12:9f:87:9e:93:4d:73:29:29:5c:
                    a2:57:5c:85:05:c5:76:73:d9:4d:c1:ce:72:67:28:
                    38:7d:52:3d:4d:e9:35:0d:c6:1b:b6:83:46:3f:71:
                    2c:3e:f0:e3:b2:f8:54:2d:2e:f6:4a:7e:e2:88:cb:
                    17:a3:0b:2a:d2:46:a5:3c:f2:d6:ea:62:82:1a:b7:
                    5f:51:fc:5c:b0:d5:24:70:12:87:40:72:40:6c:79:
                    84:96:34:a3:e5:7d:55:0a:a5:81:f8:56:fd:8c:9a:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AB:AE:7A:34:B2:44:9B:4F:4B:24:88:BA:1C:3D:A9:C2:BC:79:D2
            X509v3 Authority Key Identifier:
                keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:86:b7:85:f7:95:5a:e8:3d:d9:9f:1d:20:83:eb:28:07:69:
         53:16:62:fa:bd:16:76:85:39:a1:5d:58:9f:51:46:e9:80:b9:
         18:c9:52:f0:3f:ef:b3:90:78:c4:66:c9:a0:7f:72:e3:45:08:
         42:38:73:82:b1:4b:45:76:3a:d2:cb:7a:e1:67:48:3f:51:df:
         b8:ae:8e:bf:74:66:c7:27:5d:8a:ee:cd:4e:0b:26:45:cf:6d:
         45:92:fb:87:f6:7e:20:b7:0a:45:af:1f:5a:13:a4:81:10:25:
         52:d5:ba:f0:1e:7a:ba:b3:ed:d7:42:65:70:11:db:7b:c8:d4:
         45:a4:0a:8a:92:17:48:d4:ef:21:6d:92:5a:28:d2:04:00:aa:
         a1:c7:d2:98:50:d1:af:fc:56:92:af:ae:ba:bf:a6:89:34:c3:
         2b:99:57:f1:5f:ff:f5:1f:fe:63:b4:31:40:8c:2d:21:a8:cd:
         3e:3a:25:ab:77:00:15:10:33:51:e2:4c:50:e5:c5:29:1b:70:
         ba:a7:ba:70:b8:ab:3e:55:38:a4:cf:59:0a:91:b6:c0:67:cf:
         58:22:2b:3c:69:28:06:11:ed:e8:cf:78:52:84:68:f8:dc:e8:
         a2:67:bd:04:3e:f6:cb:4b:40:12:06:61:b0:d8:f8:b6:94:25:
         d6:8a:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:07 2026 by rpki-client