Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
File:                     4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json)
Hash identifier:          V8tgfkXrGVzba1T8aJWMn+AUJrpRfgp07B1xhnqNtNE=
Subject key identifier:   5C:0B:5E:B0:59:39:3C:6D:B4:BE:5E:62:BD:45:FC:09:33:04:1C:C8
Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
Certificate issuer:       /CN=e0405884dac59da1e5d585193e065681f9d6615e
Certificate serial:       019F189EA9A848F6AFB305E5A2E3AD1DC506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
Manifest number:          07EC
Signing time:             Tue 30 Jun 2026 13:01:19 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:19 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:19 +0000
Files and hashes:         1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: Jrv2B/Jht5kFwKhmdX0QMS0pYjrvrYk+3Jn/p17lmUI=)
                          2: widqsiuwPxfEW8bWQB1tkfB48s4.roa (hash: 0gWr/NZK7bJ0qmV7EdmyhABMtqf0GTQXbYmyzeQSrko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:a9:a8:48:f6:af:b3:05:e5:a2:e3:ad:1d:c5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e
        Validity
            Not Before: Jun 30 13:01:19 2026 GMT
            Not After : Jul  1 13:01:19 2026 GMT
        Subject: CN=5c0b5eb059393c6db4be5e62bd45fc0933041cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:3e:29:bd:ef:02:ca:a9:69:9c:0b:49:cd:
                    85:75:91:d1:52:75:e1:7e:f6:66:8c:b1:c0:db:4b:
                    14:09:e7:4b:36:0e:02:87:67:80:82:0d:7e:25:ef:
                    b1:fc:4f:d0:e1:56:98:85:cd:26:74:77:c2:dc:98:
                    93:7a:bf:c9:c2:4e:50:fe:d5:89:f3:50:98:bc:1a:
                    91:5e:86:41:de:39:b4:fe:2d:df:fb:8b:14:ec:54:
                    11:4e:04:8c:4f:c5:23:bb:6b:f7:48:a3:b4:ae:44:
                    47:f5:84:62:15:26:b5:0d:09:db:66:de:41:a8:7d:
                    63:a8:75:93:3c:f1:ea:fe:2a:9e:73:72:4b:23:2d:
                    b1:bf:7c:9a:83:e2:08:bc:57:10:65:35:7d:d3:e9:
                    fb:47:1c:ef:7f:91:e6:f8:db:b1:d6:96:78:f6:74:
                    91:fd:b8:23:ff:a0:23:46:8a:8c:da:65:fc:64:30:
                    94:b7:34:65:0c:77:04:c2:70:c7:e3:cc:fe:d6:3a:
                    54:68:78:2c:0d:da:d3:75:02:c8:93:36:04:2d:10:
                    02:13:39:d4:2d:66:a7:31:de:de:ba:c9:28:f4:65:
                    f7:cb:02:05:4d:1c:20:c2:d5:05:bc:6b:59:da:00:
                    17:0a:4e:00:be:ff:f8:fc:5f:89:09:dd:87:34:9f:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0B:5E:B0:59:39:3C:6D:B4:BE:5E:62:BD:45:FC:09:33:04:1C:C8
            X509v3 Authority Key Identifier:
                keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:5a:47:31:9d:64:33:dc:1e:03:16:83:55:47:73:0f:56:
         f1:24:f4:5c:5a:c5:b1:ea:bf:10:c1:6b:92:b6:05:c2:8e:e2:
         29:6c:c1:16:08:81:8b:f9:d2:39:88:34:d6:7d:0a:ec:f3:f4:
         08:dd:cf:28:cc:2d:28:2a:03:f6:c5:01:a2:df:e7:4d:a4:18:
         c4:01:84:10:5e:65:e3:29:59:1f:df:ac:d9:36:8a:82:c8:9c:
         4d:7c:ea:2d:61:6b:ca:33:2c:64:5e:6e:bc:8b:e6:9f:54:10:
         36:22:de:e5:32:05:44:25:26:46:07:65:97:4c:6b:7b:72:ab:
         29:bc:78:98:81:a3:0c:90:74:2a:93:95:98:22:4c:53:53:e3:
         e0:7c:f7:80:58:12:85:28:f2:74:d6:e0:6f:b8:ca:36:98:73:
         12:2f:56:ae:37:cb:88:f6:3a:37:30:3a:94:5c:dc:ce:5a:c4:
         4e:fc:55:4d:9b:fc:38:d5:4c:1f:37:9d:b1:d7:02:71:74:36:
         60:a6:1c:ee:30:21:90:23:a1:16:55:44:42:f2:45:33:95:76:
         41:35:8e:8b:4c:af:42:11:5e:84:91:c0:07:b4:df:27:31:5b:
         05:f2:6b:ac:1a:5e:41:6e:85:e4:e0:ec:82:ba:2a:05:bf:40:
         39:b7:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:19 2026 by rpki-client