Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File:                     7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier:          xEBGnpxg79wCDGE4auz8MlQfN48SfoBE6uP4NQS+P28=
Subject key identifier:   4F:8C:6A:D3:04:9A:45:C6:80:F5:DF:67:3C:3C:F5:A4:CB:EE:F0:F9
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer:       /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial:       019EB733D45BC1FA272EE9AC8BDE759B1189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number:          045B
Signing time:             Thu 11 Jun 2026 15:01:27 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:27 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:27 +0000
Files and hashes:         1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: rJ7X3E0FUw/ABylyXfYfmfdlkCQeupTPIUaIxra0+VA=)
                          2: P92JZHPtYY3-_599bc_yBXOAyLA.roa (hash: zEkTEvnJRapseTP0KdSkFQigSFFq86JRm4Kqw9lBy+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 15:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:d4:5b:c1:fa:27:2e:e9:ac:8b:de:75:9b:11:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
        Validity
            Not Before: Jun 11 15:01:27 2026 GMT
            Not After : Jun 12 15:01:27 2026 GMT
        Subject: CN=4f8c6ad3049a45c680f5df673c3cf5a4cbeef0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:d3:37:98:72:28:74:9c:db:e8:1f:ee:e6:
                    8e:f7:07:15:dd:01:ff:5e:1e:03:ff:90:dd:7f:ae:
                    f6:0d:27:11:b9:6a:02:37:72:6f:44:c6:93:36:c4:
                    03:be:6d:8b:38:16:76:9f:20:c5:00:a5:cd:2a:fb:
                    6e:60:49:ed:65:91:36:db:95:b6:c1:15:14:8d:3c:
                    5a:16:f9:85:26:17:ae:57:85:48:3a:f5:ad:b2:83:
                    35:34:4a:6f:7b:36:9f:10:aa:da:47:70:38:08:46:
                    d5:73:bb:fd:9a:49:bb:2e:65:a0:96:b5:ac:44:eb:
                    3b:66:45:07:13:1c:11:be:7f:69:f3:2a:a4:54:33:
                    88:45:20:19:d3:77:66:e9:85:19:bd:f2:e5:1d:84:
                    2e:47:a0:b4:89:0b:2b:2e:6f:8b:70:ec:0b:98:7a:
                    b8:cb:6f:f2:a0:95:53:ce:17:db:e0:79:3e:43:9c:
                    d1:c8:60:4c:6a:63:ff:b3:22:4a:0b:01:b1:7b:b5:
                    16:93:f1:cf:8f:d7:99:9a:62:3f:25:53:86:05:72:
                    59:b1:60:a6:28:a0:b4:44:35:f4:52:e3:42:8c:7b:
                    25:dc:a7:47:b2:8d:91:67:37:cc:e4:ba:4d:9c:8a:
                    d9:57:94:fe:13:d7:a5:c9:e6:64:e1:32:ae:68:bd:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8C:6A:D3:04:9A:45:C6:80:F5:DF:67:3C:3C:F5:A4:CB:EE:F0:F9
            X509v3 Authority Key Identifier:
                keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:88:0b:e2:49:69:12:92:bd:80:0d:99:54:c1:48:02:a1:71:
         cf:5f:67:98:7a:9d:65:75:8e:39:df:87:50:39:23:52:3a:b2:
         11:64:06:8c:1d:8f:89:cb:6e:c0:f7:6e:90:c4:7b:e2:b7:66:
         e8:71:c5:66:a7:85:0d:dc:e3:8a:ef:64:2a:97:ea:97:66:6a:
         8e:96:a0:30:5a:6c:91:81:23:5c:fe:23:76:24:4d:6d:b7:9a:
         61:d1:37:55:25:3a:60:9f:4a:9b:36:f5:ad:01:a4:81:7c:cb:
         e0:b3:14:a5:d7:14:cf:17:d0:cf:6b:66:56:11:d3:cf:6f:c2:
         9a:10:fd:11:c7:7b:0f:2f:5d:ff:46:c3:5e:dc:c9:d1:c5:ba:
         24:b8:ab:be:e5:75:a7:e8:fb:4d:a9:50:f3:9e:85:fd:b1:be:
         af:d0:14:94:41:93:9a:d3:64:60:4a:cb:5c:ae:dc:e3:69:02:
         56:19:f1:7d:b7:e9:9c:1e:2b:7f:6d:29:08:11:a1:68:cf:b2:
         6e:ad:0c:f2:8f:ad:9f:bb:71:a4:fb:14:1a:33:02:53:02:c6:
         7d:67:20:e5:a8:7f:c6:3a:75:68:62:2d:47:68:cf:7e:1b:52:
         5b:94:2f:62:4d:a1:42:2c:8b:d3:6b:51:a3:67:a4:bb:ee:4a:
         c9:70:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:33 2026 by rpki-client