Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
File:                     E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json)
Hash identifier:          l6GoUBuSLD4i/5DUF9ATA0quoR6616WHxftFk+7BpbA=
Subject key identifier:   86:38:E3:84:10:A0:25:A8:D9:FC:FD:DE:AB:9A:EA:0F:FF:C3:FC:13
Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Certificate issuer:       /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Certificate serial:       019F178B990F30A84758C81AC283A6F7D537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
Manifest number:          1919
Signing time:             Tue 30 Jun 2026 08:00:52 +0000
Manifest this update:     Tue 30 Jun 2026 08:00:52 +0000
Manifest next update:     Wed 01 Jul 2026 08:00:52 +0000
Files and hashes:         1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: ZZLKhF7OKghV9Px+z8b1ScgV49arkboe//rb1tqkOQo=)
                          2: lTILXF_5UJEPBougJpxtW4AUOSc.roa (hash: rxyPJTpQ/gl87k+22vSPyFPaWDffDg7c8Gqk+kLh1/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:8b:99:0f:30:a8:47:58:c8:1a:c2:83:a6:f7:d5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
        Validity
            Not Before: Jun 30 08:00:52 2026 GMT
            Not After : Jul  1 08:00:52 2026 GMT
        Subject: CN=8638e38410a025a8d9fcfddeab9aea0fffc3fc13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:91:54:e1:8a:e6:1c:bc:77:b0:30:77:63:
                    2f:a8:3c:de:73:85:87:e2:d5:c8:3c:b9:d4:aa:85:
                    da:eb:bf:83:e6:f4:7e:2b:3b:ca:ba:70:47:53:b2:
                    bc:ef:21:fe:70:03:cd:10:3b:0a:c8:4e:23:45:68:
                    7c:3c:c0:79:18:98:21:d6:e2:6e:ac:bd:df:3b:db:
                    22:83:be:43:91:b9:92:3d:9a:e7:69:95:18:2d:ab:
                    ec:c1:fe:59:32:41:f9:ef:3b:46:a3:09:6c:09:07:
                    1e:48:6e:a3:80:e2:b3:a5:67:d3:75:cd:dd:7f:55:
                    ea:38:e0:c8:ee:7a:9f:58:27:74:e0:c1:85:49:72:
                    6e:73:df:e1:79:03:7c:d4:e5:83:4b:d7:09:c4:a7:
                    f0:2c:02:b3:44:df:82:48:0a:48:2b:56:32:1d:eb:
                    42:bb:91:60:49:81:74:fa:2b:85:22:8f:34:3a:05:
                    0d:f3:b4:ae:57:00:56:af:e9:22:15:8a:a8:2a:94:
                    f9:aa:ed:8d:e1:db:18:36:ec:f3:bb:63:3a:4a:3c:
                    8c:d5:ed:01:67:a3:3a:17:0e:44:e4:30:40:cb:1a:
                    83:91:b9:51:d1:d7:44:45:f5:65:92:d4:8e:20:a4:
                    dc:09:5e:5f:ff:5d:d3:94:2c:0f:e4:33:4b:ab:fc:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:38:E3:84:10:A0:25:A8:D9:FC:FD:DE:AB:9A:EA:0F:FF:C3:FC:13
            X509v3 Authority Key Identifier:
                keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e5:1c:1c:85:09:07:91:08:16:72:8a:cf:c8:74:39:8b:23:
         0e:48:74:e6:6b:67:e6:54:25:2d:04:79:f8:48:b1:b2:ce:47:
         33:bf:38:59:93:13:5c:2a:71:6c:15:21:6d:a0:8a:22:91:22:
         a5:ae:97:c8:53:65:ca:27:7f:ee:ba:db:56:f3:a9:d1:0f:c6:
         f5:7a:94:06:9c:98:42:34:90:18:3b:cf:f5:a1:ea:7e:bf:f9:
         d3:54:1b:88:3f:58:06:3c:f9:07:37:d5:e1:d2:58:8f:a6:6a:
         90:c4:0c:04:c9:be:e3:c4:2d:49:23:29:cd:82:8d:ac:86:63:
         ff:5d:eb:83:c5:34:6d:10:be:6e:15:3d:cf:14:d6:83:ac:f7:
         6b:05:91:4c:07:db:fb:06:51:27:6a:00:96:f4:9e:37:0a:85:
         2b:df:de:07:08:fa:d2:7d:33:62:8c:84:e6:72:0d:40:fa:ad:
         a5:03:6e:f5:bd:a1:0c:82:3e:ca:63:7e:38:0b:10:3b:2e:82:
         57:18:ee:57:6a:fa:9f:ec:f3:1c:6d:4c:c9:4f:e5:29:25:51:
         a6:ff:f4:ef:96:2e:4d:14:7d:38:d7:52:fd:54:d7:34:84:60:
         ca:2b:98:7c:b7:12:cd:41:46:5c:ff:3b:a5:dc:06:b0:dd:48:
         35:67:05:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:44 2026 by rpki-client