Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
File:                     Myrs0kO-9YfIebv-H-TFpb6zNFU.mft (raw, json)
Hash identifier:          7AfSYq29GUuaVhv75Y8XsMvXXtZdflSk6Nl3QuiXHZI=
Subject key identifier:   A4:91:60:FC:89:84:AE:40:01:3E:38:E9:E8:BB:16:C2:81:3F:70:EA
Authority key identifier: 33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55
Certificate issuer:       /CN=332aecd243bef587c879bbfe1fe4c5a5beb33455
Certificate serial:       019E8F12AF54A9E55461C049B6764F34265D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
Manifest number:          02EA
Signing time:             Wed 03 Jun 2026 20:00:26 +0000
Manifest this update:     Wed 03 Jun 2026 20:00:26 +0000
Manifest next update:     Thu 04 Jun 2026 20:00:26 +0000
Files and hashes:         1: Myrs0kO-9YfIebv-H-TFpb6zNFU.crl (hash: or8kZeL9xhBUPmQavKL5dpNltXMBqrIDgh1kXG1KpJU=)
                          2: nCoIFZk2MnhEIDZZRukVQPEaSeY.roa (hash: SANVNvbHmnLZfOlrmAKYjLVvJPKFlkAkCF90MWF7jrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8f:12:af:54:a9:e5:54:61:c0:49:b6:76:4f:34:26:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332aecd243bef587c879bbfe1fe4c5a5beb33455
        Validity
            Not Before: Jun  3 20:00:26 2026 GMT
            Not After : Jun  4 20:00:26 2026 GMT
        Subject: CN=a49160fc8984ae40013e38e9e8bb16c2813f70ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:83:95:b5:92:d4:ce:73:7b:03:07:bd:ff:
                    e3:92:95:9b:50:83:78:af:48:5a:5c:a1:f5:f8:a5:
                    9f:c0:cb:77:44:aa:49:a4:ee:71:cc:ab:f0:a7:f3:
                    49:b1:6f:7a:5d:ea:9a:13:69:81:2f:e0:ff:38:b2:
                    be:00:66:7a:f8:b7:d5:08:05:b4:04:e6:e4:44:25:
                    51:d3:e0:bf:ac:03:9b:e6:1d:76:db:76:a6:ed:e7:
                    bb:77:9c:b8:c6:3d:8d:e5:db:c3:6f:0f:b2:fe:34:
                    8f:73:bc:b7:23:8a:e8:1e:b6:c3:09:34:1d:ca:40:
                    96:89:c5:e5:3f:ad:2a:35:7d:2e:27:b7:e5:2a:19:
                    a1:fd:6b:a4:24:7d:79:3b:e7:e4:fb:61:51:2c:7f:
                    6e:2f:29:cc:12:7a:64:be:66:4d:3a:3a:59:8a:c2:
                    e7:bb:23:8e:12:d0:36:61:d3:75:22:ca:36:58:d2:
                    1b:d1:ff:59:9f:55:b7:a1:4f:02:26:bb:0e:18:16:
                    4e:9a:5f:be:c6:33:52:67:36:e0:77:da:ea:80:94:
                    b3:21:c2:ee:1a:52:3a:35:ec:33:3a:5d:3d:98:3e:
                    de:2c:8c:f3:47:04:b8:f5:8f:08:60:92:5a:17:ad:
                    ee:af:36:df:59:8c:fd:f1:08:df:42:33:04:12:63:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:91:60:FC:89:84:AE:40:01:3E:38:E9:E8:BB:16:C2:81:3F:70:EA
            X509v3 Authority Key Identifier:
                keyid:33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:70:69:32:38:6c:76:f2:87:85:6c:79:9c:3e:07:f3:8c:c5:
         84:20:9f:f2:98:16:c9:f9:6d:8b:21:7f:78:14:de:cb:14:93:
         45:52:1f:db:7f:8e:70:70:1d:7b:76:f2:4e:e6:17:41:4c:a5:
         c6:ec:9f:21:b0:2e:a5:13:be:f3:11:fd:43:c1:22:23:f4:a3:
         4c:03:5d:5c:3c:a7:d9:87:16:2a:e1:57:05:d7:fc:13:e3:91:
         da:2b:80:41:c0:5a:25:00:85:f2:38:ef:90:83:09:f3:a7:45:
         ab:bb:5f:ac:51:4c:18:56:1b:c8:1e:db:62:be:a1:b7:00:64:
         ee:1a:0f:55:d5:0b:7c:55:a6:dd:3c:41:a2:65:3b:88:28:96:
         cf:8e:c5:5f:bf:e8:7c:d5:5b:9a:6f:00:a5:20:9a:9e:f1:8d:
         39:a0:7a:09:3e:01:52:af:46:63:9a:fa:84:69:a9:bc:9d:67:
         1b:9d:2a:19:f0:8a:cc:61:90:2d:68:b0:91:ae:39:da:62:cf:
         81:60:f6:1a:06:b8:15:27:be:9a:79:83:d6:4a:2e:84:70:7b:
         9d:b0:d6:29:05:e5:f4:ff:c8:88:b7:8a:f0:4f:25:eb:34:2b:
         64:5f:20:f6:a9:b6:c3:8e:7a:2c:f0:93:b8:5f:7e:bc:cb:c2:
         b5:a0:32:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:17:43 2026 by rpki-client