Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
File:                     cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json)
Hash identifier:          8i+7/bs6cQZE1kGefJ5maNSOHNhy4eugdd6wxRYVCes=
Subject key identifier:   4C:6C:78:C3:80:E1:33:7B:5D:49:DC:E7:DB:98:50:C5:0A:1C:1B:C7
Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
Certificate issuer:       /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Certificate serial:       019EBA346A7A0CE0830DC2CC7861AC8B53B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
Manifest number:          18C7
Signing time:             Fri 12 Jun 2026 05:00:57 +0000
Manifest this update:     Fri 12 Jun 2026 05:00:57 +0000
Manifest next update:     Sat 13 Jun 2026 05:00:57 +0000
Files and hashes:         1: Uvjl_e-fGHqxg-WZscin2AO7GsM.roa (hash: fWbVIXU+/s+B7hBrHIOQSlS6p7bvD78hGqL26k6k6h4=)
                          2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: uI8ZDnlgNnDRcGQjz4Zyqllc5ByAqqzoAnrx8v1HWOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:34:6a:7a:0c:e0:83:0d:c2:cc:78:61:ac:8b:53:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
        Validity
            Not Before: Jun 12 05:00:57 2026 GMT
            Not After : Jun 13 05:00:57 2026 GMT
        Subject: CN=4c6c78c380e1337b5d49dce7db9850c50a1c1bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:7a:f2:8c:40:ff:b4:69:7e:9e:9e:7e:9b:
                    0d:d8:ea:78:84:47:34:82:88:6b:c0:36:70:1f:89:
                    3c:7e:16:46:19:9c:4c:67:9f:00:2d:34:4e:9c:62:
                    1d:31:65:5a:0b:86:0b:62:8a:99:1f:06:2d:41:16:
                    30:a8:78:d7:0f:f8:e3:ac:45:95:2b:d8:ed:09:65:
                    3c:b6:06:a3:12:58:7c:29:dc:79:8c:36:b8:a1:65:
                    55:7a:8e:4b:84:0a:30:ed:6d:ca:76:75:9f:20:b3:
                    a3:2f:01:54:34:7a:00:69:3e:51:06:f7:ce:12:05:
                    11:ba:e2:0c:b7:34:6c:ac:79:55:a9:a7:1d:e2:b0:
                    39:4f:c9:59:67:19:56:70:22:1b:4c:99:df:5f:67:
                    cc:b9:93:07:e5:2b:81:11:80:aa:20:22:b9:92:e7:
                    23:b3:c9:4b:04:2c:80:6d:dc:ab:58:5b:d4:70:0b:
                    4c:3c:ea:65:41:96:f7:e6:a5:ee:ed:c3:8b:50:bb:
                    70:ac:43:b9:d2:d9:ae:0a:69:6d:3c:7f:43:63:b7:
                    10:5a:0d:f5:1f:c8:12:08:90:d3:3a:fc:66:49:a1:
                    22:93:b9:88:5a:b7:88:99:90:67:34:91:ef:68:7c:
                    fa:04:80:c1:01:27:bf:07:b5:b6:a3:0b:40:e3:7a:
                    dd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6C:78:C3:80:E1:33:7B:5D:49:DC:E7:DB:98:50:C5:0A:1C:1B:C7
            X509v3 Authority Key Identifier:
                keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9c:7c:1e:c4:fb:98:34:df:a3:fb:d9:84:d8:2b:b9:b8:0b:
         94:a4:82:92:9d:9a:f9:8d:43:8b:fe:c3:7b:22:e9:1a:17:12:
         49:43:c6:13:36:6f:31:bd:00:78:d3:8f:94:19:e7:df:2d:b3:
         49:c2:82:68:89:c2:ec:7a:01:2b:70:2d:9f:1b:c5:01:7a:48:
         84:b5:4b:34:a4:b5:27:13:5d:84:ed:ef:e2:e2:4d:ab:7d:30:
         1a:d2:cb:8f:19:bf:44:66:04:bd:96:b2:bc:63:ac:2c:14:cd:
         29:dc:44:99:de:35:84:50:dd:04:40:5a:d1:9c:34:aa:8f:29:
         be:0e:9d:84:23:cd:25:e0:2e:79:38:6d:91:f4:87:8f:a6:5a:
         63:db:f3:bb:bb:37:0f:94:33:cb:21:4e:57:e0:ce:e9:58:cd:
         a7:ec:d8:71:7b:11:4f:6a:30:e8:e9:7a:77:24:7c:d1:6f:a7:
         29:ec:f1:73:35:98:07:8f:77:44:06:44:33:9f:5c:6b:38:fa:
         94:42:c8:ef:22:75:54:ce:92:d1:b9:6a:93:91:dc:58:eb:fa:
         a9:6a:f8:e0:ad:37:d3:fc:a6:2a:cc:99:39:ff:75:0e:f1:6a:
         3c:e2:93:0b:32:b6:81:65:28:42:29:c4:a7:94:78:e6:80:79:
         0e:86:ff:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:09:14 2026 by rpki-client