Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
File:                     SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json)
Hash identifier:          zesHLFNsfZGZQWT8lAiYN/2UadtT78Wd0AqVk3NwvCU=
Subject key identifier:   81:D6:B2:FA:F1:D8:45:77:02:BD:A4:58:78:F3:AC:CB:AC:77:AB:BB
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Certificate issuer:       /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial:       019EBD6C1BE7D71357888FD1CFA1563B1BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
Manifest number:          1960
Signing time:             Fri 12 Jun 2026 20:00:39 +0000
Manifest this update:     Fri 12 Jun 2026 20:00:39 +0000
Manifest next update:     Sat 13 Jun 2026 20:00:39 +0000
Files and hashes:         1: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: Haob/FfrDfMVx0/wks3zmo5TQN0cxRE6FbOAjKwagD0=)
                          2: SoAQuS5JowSg-Xqd5VshgLzAyh8.roa (hash: dnJRYYtWMblvVb6Q3Lx0OC4l73F34CIRhK7TSvLECKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6c:1b:e7:d7:13:57:88:8f:d1:cf:a1:56:3b:1b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
        Validity
            Not Before: Jun 12 20:00:39 2026 GMT
            Not After : Jun 13 20:00:39 2026 GMT
        Subject: CN=81d6b2faf1d8457702bda45878f3accbac77abbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:30:22:e3:fc:aa:9c:60:20:d9:39:d6:d4:
                    63:df:29:6b:02:46:dc:a3:2d:63:bd:47:93:c3:9e:
                    a1:8e:ce:b4:58:2b:ad:74:5a:a5:e0:f8:7e:e1:83:
                    45:03:37:9f:e6:3c:d3:46:56:f0:86:e0:c1:53:56:
                    aa:09:a0:48:4b:20:8f:42:a7:43:16:fd:4e:b3:7b:
                    1a:83:b9:52:af:14:cd:06:19:e1:06:a8:19:62:e3:
                    94:e6:fa:bf:01:49:51:63:1d:e9:0e:d8:19:c7:2a:
                    ee:08:2f:db:6e:ff:63:08:f0:8c:01:fb:40:27:c8:
                    be:56:70:9e:37:e1:f6:c3:c9:f6:1f:e5:19:02:1f:
                    c9:4a:1a:ed:c8:1d:b7:68:43:24:54:d8:f8:0a:1a:
                    f0:b7:18:0e:3e:4b:7e:8a:af:8b:65:5b:d4:a4:07:
                    c4:2f:3d:57:0b:39:0f:87:6e:a9:0d:75:ff:24:f9:
                    a8:de:c4:1a:1b:17:c2:63:e7:66:ff:fd:23:bc:ea:
                    5d:45:d1:42:44:39:77:7d:a1:04:29:1e:f5:09:a4:
                    05:af:fe:37:58:c0:5c:1f:c2:3f:bb:f0:e2:bc:08:
                    14:e8:03:e5:30:d4:59:1d:42:ef:60:4d:6a:ad:9f:
                    b6:f2:6b:29:13:c2:a9:2c:2e:5b:5d:40:76:72:7a:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D6:B2:FA:F1:D8:45:77:02:BD:A4:58:78:F3:AC:CB:AC:77:AB:BB
            X509v3 Authority Key Identifier:
                keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:7b:38:4f:af:00:da:db:01:38:0c:4b:df:05:2a:f7:2f:42:
         f1:91:1c:4a:27:44:4e:9d:fd:48:a4:65:83:d4:ee:90:b7:c5:
         f4:aa:ec:da:fa:31:95:0c:44:4e:5f:a9:61:50:5b:f3:68:0f:
         ca:bb:fe:44:2a:c7:7c:ea:1c:5e:8d:c2:7b:19:25:20:67:ff:
         c4:a8:a4:9d:3c:61:c8:71:9d:ea:ad:df:7a:60:bf:09:df:e5:
         28:37:33:2b:58:b3:b9:c1:79:1b:4a:34:45:b6:53:b8:31:83:
         45:56:e2:41:26:32:bf:c0:23:81:4e:33:96:35:cf:e3:b9:0d:
         6f:6c:f8:59:a3:b1:ef:57:98:b1:92:8d:10:d6:18:ba:e5:46:
         af:8c:d8:f8:25:f4:38:7c:86:dd:a9:fc:d1:66:a3:17:8a:78:
         2a:06:23:5b:da:32:56:15:cd:16:6f:bc:40:c0:17:24:a0:3a:
         85:9a:d7:27:7a:f8:8a:5a:c6:7c:d1:a3:70:d2:c3:99:ab:05:
         92:96:7b:f8:db:59:da:2f:97:dd:4e:5e:bb:22:b6:5e:fc:7f:
         de:3d:5d:6d:03:ac:7a:4f:5b:70:d3:81:42:3b:14:16:e4:8a:
         ad:4d:5e:ff:6a:5c:b9:6f:20:e0:da:dd:57:83:aa:69:ff:16:
         23:2b:73:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:28:17 2026 by rpki-client