Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
File:                     eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json)
Hash identifier:          lPk1KugoRBMlfPZOL5yw19cVrJXPxG9gjHS+7hxT5PY=
Subject key identifier:   4D:F0:D2:A6:02:DE:29:DC:AC:6E:29:00:E1:9B:29:F3:53:D0:40:3F
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Certificate issuer:       /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial:       019EB76A5504D4AD4712544E42B150FBF513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
Manifest number:          0932
Signing time:             Thu 11 Jun 2026 16:00:59 +0000
Manifest this update:     Thu 11 Jun 2026 16:00:59 +0000
Manifest next update:     Fri 12 Jun 2026 16:00:59 +0000
Files and hashes:         1: SEbMX_kWUsX_R1OTVRjFem2rhCY.roa (hash: XiNk8rorUk0GfMBPxUagzsQDmXdqYnZd77EYh58Os5s=)
                          2: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: ZI5cxa5ejcoRzaWl7gSOBThXn1+H4Fnx1vl6YjxSt1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:55:04:d4:ad:47:12:54:4e:42:b1:50:fb:f5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
        Validity
            Not Before: Jun 11 16:00:59 2026 GMT
            Not After : Jun 12 16:00:59 2026 GMT
        Subject: CN=4df0d2a602de29dcac6e2900e19b29f353d0403f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:16:19:3b:52:09:17:f0:48:36:78:d3:68:36:
                    5d:fa:6b:a5:7e:3e:55:b9:a1:aa:d2:24:35:f3:c0:
                    6e:28:d5:32:08:d5:ba:76:68:e2:9b:1a:cb:04:39:
                    c0:de:dd:95:05:98:14:3e:e4:f3:d5:ac:8f:e1:e7:
                    5a:54:c2:20:71:62:ac:f0:0b:c0:12:20:f8:96:eb:
                    00:db:af:2e:b6:a6:b6:3a:b8:a9:b2:06:ea:68:3f:
                    df:6f:fb:6d:d0:84:b3:7c:26:29:d9:fb:8e:fc:6b:
                    3b:9f:45:b8:a1:f8:d8:7d:ce:66:0e:2e:62:5b:3c:
                    c0:65:00:b9:32:41:2e:b9:d2:45:c3:72:87:50:28:
                    3e:d3:c3:c7:22:38:ff:e7:6c:93:55:c9:0b:79:4c:
                    34:bb:0a:19:be:58:20:fc:f9:7c:f8:09:71:44:c7:
                    b5:bc:ca:c4:99:46:ea:e3:e9:1d:2b:08:00:af:ce:
                    73:e9:8a:7f:70:44:c3:d7:f3:3b:a6:22:42:f3:9f:
                    9a:33:1f:04:7b:e3:be:db:67:ee:9c:12:95:44:89:
                    67:49:f2:da:d8:1b:cf:51:2d:ff:8e:f8:6d:4e:52:
                    fa:20:96:4c:9f:10:4b:a6:78:b3:16:3e:b9:aa:1f:
                    38:8e:fc:cc:6e:00:7c:81:86:f4:30:99:4d:fb:2a:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F0:D2:A6:02:DE:29:DC:AC:6E:29:00:E1:9B:29:F3:53:D0:40:3F
            X509v3 Authority Key Identifier:
                keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:09:37:20:ad:69:f4:91:56:f4:2e:79:6a:9d:59:e3:33:44:
         3f:24:e8:4b:fb:ac:ab:d5:9a:47:21:85:9e:92:44:d4:f6:af:
         7e:0f:eb:5a:48:a0:6a:0d:23:22:24:16:a9:cc:1a:7c:63:37:
         6e:75:e1:fc:6a:e1:d8:84:33:3e:a2:9f:2b:e4:81:51:11:31:
         8b:d2:98:6a:b9:2e:ba:7e:16:bd:72:c4:2d:75:60:3d:69:72:
         f2:27:38:a6:36:84:87:3c:ee:88:27:15:be:9f:7a:e7:56:91:
         39:74:6d:03:a2:08:2f:4e:b9:7a:fa:d9:ea:75:c5:ce:69:00:
         90:b5:ba:74:1f:1b:13:e4:dc:39:7c:7e:41:36:16:7a:58:aa:
         ea:28:30:bf:c3:2c:c9:a0:48:21:c2:7c:88:40:de:ec:a7:12:
         ed:b2:76:02:2a:c6:ce:b6:c8:5b:95:0d:94:41:23:c0:cb:8a:
         32:44:5d:74:76:7c:6a:84:91:f1:84:4d:9e:ef:22:bc:25:fc:
         0b:80:7b:b7:c5:82:5e:ab:69:6c:52:1e:dc:85:0e:13:e1:30:
         96:9f:dc:8d:86:71:47:8a:1a:51:c8:6a:8a:94:ae:db:f1:b9:
         c9:6b:25:9c:71:92:8d:48:30:35:7d:60:0a:64:b6:87:11:92:
         30:4a:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:48:33 2026 by rpki-client