Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
File:                     E--253AYyTVaU4hW1OueUGl19TU.mft (raw, json)
Hash identifier:          qCSPmdpvunbnZSbKC1aMM1fPcTuMhqZN0sCQ5NYrjMk=
Subject key identifier:   CD:97:10:BD:C6:32:DE:5E:14:D6:F5:10:E6:BE:46:8C:23:26:92:3F
Authority key identifier: 13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35
Certificate issuer:       /CN=13efb6e77018c9355a538856d4eb9e506975f535
Certificate serial:       019F190CECFD2936227267668310697D7A22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
Manifest number:          0240
Signing time:             Tue 30 Jun 2026 15:01:45 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:45 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:45 +0000
Files and hashes:         1: E--253AYyTVaU4hW1OueUGl19TU.crl (hash: JkZBr7l45f9OR8nvA+xvQN56iTPK8YY3ClI5TPTamMY=)
                          2: pn0eecPtI3ydGJyzmDixGdijU0M.roa (hash: hsAKDf191EtjscgSuEpFCHm/Jr/4jq8uJLk58v0knFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:ec:fd:29:36:22:72:67:66:83:10:69:7d:7a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13efb6e77018c9355a538856d4eb9e506975f535
        Validity
            Not Before: Jun 30 15:01:45 2026 GMT
            Not After : Jul  1 15:01:45 2026 GMT
        Subject: CN=cd9710bdc632de5e14d6f510e6be468c2326923f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:87:d2:f2:18:bb:ad:63:e4:12:95:d2:9c:
                    d1:ac:ca:3c:33:17:73:b2:c4:d7:2c:11:93:34:ca:
                    74:2f:97:3a:ab:e5:dd:b2:10:99:5e:2a:7d:8a:8f:
                    8f:39:4e:48:1f:35:ac:65:ae:39:9e:6e:44:59:ef:
                    78:4b:e8:e2:2b:bf:3f:3b:ba:0c:5b:10:0a:68:84:
                    5c:36:8c:75:3e:02:6c:63:91:45:0c:09:74:5a:28:
                    e3:1a:a1:31:7e:6e:e6:bb:38:79:81:4d:7d:57:3f:
                    db:10:aa:03:58:79:ae:90:c9:c3:79:b9:00:61:11:
                    af:06:f3:3b:a7:52:13:50:9c:bd:a3:ae:77:ee:32:
                    54:e3:ba:40:98:dc:7c:ba:08:17:c8:31:11:29:ab:
                    e4:39:17:74:8a:39:a9:d7:42:63:62:e8:0c:f8:e7:
                    bf:fa:26:0c:c2:cd:37:4f:d7:21:e4:6b:41:74:fe:
                    6b:3d:10:66:a1:87:04:8b:94:56:e3:62:68:74:1d:
                    da:08:4e:76:9f:89:93:3e:56:fe:ca:d9:c4:d1:a7:
                    87:13:3f:15:ea:90:fd:cd:ea:fe:7e:80:96:1d:5b:
                    40:6a:41:ad:ef:20:d4:0c:53:bb:10:40:74:37:98:
                    66:66:c1:c9:9d:63:12:ea:89:5d:13:24:9f:80:59:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:97:10:BD:C6:32:DE:5E:14:D6:F5:10:E6:BE:46:8C:23:26:92:3F
            X509v3 Authority Key Identifier:
                keyid:13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3b:88:7b:3e:b5:10:0e:63:1f:41:9f:22:9a:70:34:c0:4f:
         fd:2c:c2:ee:aa:7e:64:fa:1a:ce:a6:45:57:02:48:ee:db:63:
         2d:db:6d:c6:df:8f:21:16:0b:a4:22:7d:58:8b:4f:ba:f3:91:
         44:ab:95:17:ee:50:93:b3:b4:f7:ed:5d:fc:ff:30:d1:b6:99:
         ba:32:b4:c2:59:ad:f5:c9:b1:c9:69:7b:c4:ef:77:fb:56:ef:
         cf:e7:72:78:61:cb:bf:fe:dd:8b:34:dd:a6:b6:8e:a5:2d:45:
         20:eb:80:4d:c6:8a:a2:a3:ad:a6:95:3c:e1:84:12:51:f6:3f:
         53:fb:a7:b0:70:47:32:77:98:5a:e0:1f:6f:63:15:81:e8:39:
         c1:84:c9:47:22:7e:1b:51:51:49:4d:4f:b3:f1:56:ad:26:87:
         98:17:9d:8f:a1:3d:30:d4:8b:34:bd:e2:16:18:60:2e:94:18:
         42:44:99:cc:ca:be:e1:bb:56:7c:67:40:ce:d6:f5:a5:95:1e:
         16:b6:39:6f:ef:4c:6d:1f:68:70:e1:68:a4:34:e6:9c:dc:ae:
         49:23:7e:bf:ee:fa:e4:4a:53:41:9b:c4:d5:02:23:c3:4a:97:
         7e:6e:e2:92:fb:ed:78:1a:c4:3d:25:b1:b3:a3:c2:80:03:eb:
         7b:95:79:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:52 2026 by rpki-client