Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File:                     l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier:          gbnbt2qN6VisKr4KvBkN2b7nJOQZTzbbtFI8/ZUxqFE=
Subject key identifier:   77:7D:D5:79:82:EA:AF:03:B1:95:1E:18:E4:5D:8F:DC:49:18:57:C8
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer:       /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial:       019EB7A091087F0BD1C8603C8FA6CCB06F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number:          0E38
Signing time:             Thu 11 Jun 2026 17:00:13 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:13 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:13 +0000
Files and hashes:         1: HQ9in2gPerdxnIF0h-xK9cg53u8.roa (hash: XzbavZekgRPq70hu9alvl/LqU0pRSF/b7Peoc0VfuYg=)
                          2: RZOthdT6C9nuwbu3UIjhWwOwnms.roa (hash: 4fpWeQoxlDupX+sNQZiRpRjPM8u1NiZ4u0eyQTGiQO8=)
                          3: W9BSfJR_Mh1sxRdUNbIw0z_Nuio.roa (hash: 1JlHRLvbAOq6rKIVKlBTqSD7sE9lvV18Y1IWJ6XjyXw=)
                          4: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: izmL5JRumaZ6sGPEmWZgQA9hCvG2O5IeIsoKUE3Z58E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:91:08:7f:0b:d1:c8:60:3c:8f:a6:cc:b0:6f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
        Validity
            Not Before: Jun 11 17:00:13 2026 GMT
            Not After : Jun 12 17:00:13 2026 GMT
        Subject: CN=777dd57982eaaf03b1951e18e45d8fdc491857c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:5b:3a:e8:fd:8f:0b:95:a1:52:eb:ba:78:
                    77:36:39:1f:47:10:53:e9:41:37:ef:3f:d6:57:96:
                    51:58:97:a3:4c:60:45:69:59:92:ab:9a:d7:0d:69:
                    8f:ab:17:4a:d6:05:18:63:90:28:74:f2:eb:59:43:
                    e4:21:e1:87:39:83:23:47:1a:60:06:c7:3c:2c:d7:
                    37:64:31:35:18:ee:5a:33:89:64:f1:c0:5e:4a:f4:
                    26:ae:2d:d9:ac:50:62:ad:cf:26:ff:f3:20:ee:32:
                    19:86:57:06:c8:96:f8:75:a4:77:40:89:a4:0c:37:
                    c4:9a:bc:9c:13:3e:d2:7f:49:c7:e0:81:c5:8c:ae:
                    ab:4f:cf:89:7d:f2:8d:f9:9c:d9:01:bc:2c:a7:da:
                    96:23:47:d3:5e:2a:39:73:23:2f:83:4c:7a:ec:5a:
                    57:5f:c1:57:42:c9:1d:37:68:25:39:68:55:42:10:
                    01:27:27:a0:47:fb:ca:3c:8d:0e:97:e7:a5:45:bd:
                    23:8d:2e:f3:73:fc:5e:d7:24:d1:c5:65:ab:0c:ab:
                    b7:7c:8e:21:bb:f6:b0:33:a1:ee:b5:50:74:04:ed:
                    55:a8:b9:1f:d6:fa:96:07:6e:3d:18:0a:5c:80:0d:
                    39:ad:db:1e:48:76:6e:0d:5e:cc:2c:04:fa:25:88:
                    5b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7D:D5:79:82:EA:AF:03:B1:95:1E:18:E4:5D:8F:DC:49:18:57:C8
            X509v3 Authority Key Identifier:
                keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4f:57:05:26:2d:a0:4c:7d:3a:76:4e:6d:b5:c1:31:ab:3a:
         58:41:bd:92:89:23:09:bd:59:4b:04:3f:43:5d:8b:bd:6c:9c:
         6b:6d:dc:84:bf:98:e3:43:44:16:60:cc:b9:7f:ea:85:f1:5d:
         26:fa:68:8e:85:ef:7a:10:69:fe:e6:b0:d8:ca:88:56:5c:6e:
         ca:7e:35:7a:59:a3:ec:22:16:f8:a1:ed:f5:cc:88:40:0e:34:
         8f:3b:d4:2f:28:f1:a8:e0:44:dd:6b:9f:a6:48:c0:ad:cf:98:
         7a:36:07:1e:f7:ae:e2:24:64:6e:01:40:7d:13:2f:0a:fe:9d:
         9b:6a:97:bc:99:9c:24:31:7e:60:b8:c2:b2:29:04:8c:70:22:
         29:02:30:10:36:3d:58:17:0f:8e:95:a6:61:57:3d:0e:6c:06:
         7d:64:67:d9:36:ac:78:59:6a:42:46:08:13:28:49:3c:45:3a:
         69:6a:d8:8f:2d:f3:e4:f2:1f:ab:3e:9f:6e:0e:e5:1e:be:47:
         35:df:28:62:59:37:ec:70:78:5c:62:fe:f8:79:19:c9:0c:b2:
         a9:fa:36:c9:cc:fd:24:2d:1f:aa:17:c7:31:c9:5c:af:71:b7:
         f4:71:5f:9a:a8:ac:5c:a3:60:ca:2d:06:46:37:b1:d6:31:e8:
         c3:2a:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:15:52 2026 by rpki-client