Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
File:                     4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json)
Hash identifier:          Rkx6S2LD+D4K+rTKywRwzdDrfD2y4G9ucf2qpMFQbG0=
Subject key identifier:   CE:26:ED:19:60:B4:47:77:11:DA:AF:CC:A2:BD:F6:60:4A:40:9F:DE
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Certificate issuer:       /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial:       019EB921F15B87DE0388CB208E531CFB0F08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
Manifest number:          1957
Signing time:             Fri 12 Jun 2026 00:01:09 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:09 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:09 +0000
Files and hashes:         1: 0Ie8zJ3vobcDR9ujGlZqgjvHUAY.roa (hash: FJlCbonLD9dF4g0EKnBAz84rCEY7Zmpte8ZXE9ooZuo=)
                          2: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: ozAUNN55Yh6Zn1SnyVSf2RXb9oS7PgfvIxEzMVQYT3Y=)
                          3: CwpxvpCjkjiVHLiVbQuAWgtQ54o.roa (hash: A9xtP47/NQPXNxopvGJvQs5ptoCe1VvA5rj1UqAT7fA=)
                          4: jl2G_Du7vY1XFmIxGhvnvFEWvcE.roa (hash: RFk3rcVrZLSmQvBNuxyGLTQ7ZkOHCUZDzMm3yZpbe5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:f1:5b:87:de:03:88:cb:20:8e:53:1c:fb:0f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
        Validity
            Not Before: Jun 12 00:01:09 2026 GMT
            Not After : Jun 13 00:01:09 2026 GMT
        Subject: CN=ce26ed1960b4477711daafcca2bdf6604a409fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b0:15:ea:f9:c7:5b:89:e7:67:74:5b:c5:0f:
                    06:d6:e7:73:ac:e5:22:e4:03:46:74:ca:8f:b0:d6:
                    db:ab:1c:e3:54:3d:01:24:3c:17:b3:d5:43:11:63:
                    8e:43:7b:2b:8f:d1:fa:e1:7b:37:4d:f0:3c:4e:24:
                    6e:a3:c6:93:ca:c1:0b:fd:04:68:c0:fe:b1:62:4f:
                    38:75:b1:53:5b:4b:fc:93:ac:12:af:25:3c:4e:9c:
                    fb:12:ca:c3:df:b2:55:66:59:37:c2:86:cc:96:9f:
                    af:8d:71:1d:a7:be:4c:be:6f:e5:08:86:ef:4d:39:
                    fe:79:b4:f1:a3:db:ac:9d:a9:5c:21:9c:33:d5:45:
                    ec:b5:81:ab:94:f7:9d:65:5e:82:6d:7b:2c:20:bb:
                    9f:d3:23:67:ba:f7:67:6b:20:29:bb:7c:27:5a:6f:
                    52:ce:b9:51:a9:f1:7f:d1:ad:e2:03:9e:ab:9f:6a:
                    ea:51:4a:31:d6:6d:e9:95:55:4a:7a:b1:5c:5c:6c:
                    94:cb:e2:fd:c7:54:08:ef:a2:20:2c:3b:e4:1d:34:
                    9f:8e:14:25:dd:65:b2:c6:a4:33:e9:f6:b9:8e:ed:
                    f0:be:97:45:2f:34:d9:79:ea:fd:31:30:0c:38:b2:
                    6d:d9:7b:7f:e3:1c:22:02:0b:c6:e5:ca:b8:d0:f7:
                    3d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:26:ED:19:60:B4:47:77:11:DA:AF:CC:A2:BD:F6:60:4A:40:9F:DE
            X509v3 Authority Key Identifier:
                keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a4:b1:f5:d1:e2:a7:60:a7:6a:6f:08:1b:5c:5d:87:b7:ac:
         4f:ab:0f:03:92:67:a7:d1:6c:81:01:06:fe:a9:cb:2c:b9:02:
         9c:93:08:11:39:2e:5f:f8:6f:8c:d2:8e:2d:50:fd:c4:c3:27:
         6d:69:29:32:e9:2f:61:ea:ce:82:b3:1a:94:b3:b9:2d:2e:0e:
         1b:61:fb:df:9d:c1:1e:ea:cb:c2:94:35:a4:34:3a:21:e8:d0:
         c5:c9:aa:50:ac:ba:88:f3:88:30:1d:0b:da:aa:47:d0:46:80:
         be:0c:b1:e3:d4:bf:5b:bf:e9:68:bb:0b:e9:14:9b:2d:4e:54:
         47:10:db:cf:c5:4d:dc:d0:4f:0f:4d:04:a2:0a:3b:68:89:0b:
         d2:2b:79:f6:58:0b:0c:9d:f9:cc:68:de:c1:61:b3:a1:68:35:
         51:5c:11:76:77:d5:d3:f7:98:5d:a2:08:0c:33:fc:51:e2:fe:
         16:f6:55:d1:2a:16:82:08:92:a6:4e:a2:f6:16:58:87:47:7c:
         59:6c:7d:ec:d8:e7:16:72:ad:3f:c0:ca:f4:75:3e:42:eb:2e:
         1f:e7:55:c6:c1:a3:f7:e9:37:69:0c:76:ca:34:55:1b:84:8b:
         c5:be:7b:27:d2:5b:c7:20:dc:f9:1d:3d:75:ab:6a:14:03:72:
         54:04:1f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:09:31 2026 by rpki-client