Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File:                     4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier:          iCYeGTupSsUNExSSzl6MisgwkmF/9NvHRQogzr/GbPc=
Subject key identifier:   D6:49:39:CB:36:13:E7:B3:DC:11:98:CA:6E:C7:7E:6D:D3:F3:5B:68
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer:       /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial:       019F1943D58F134BD748440E1E0F2E31C78E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number:          185A
Signing time:             Tue 30 Jun 2026 16:01:43 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:43 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:43 +0000
Files and hashes:         1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: mCfNRsWG21Kek0IBRabnyO3JsldFoKCG0zafVML+y+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:d5:8f:13:4b:d7:48:44:0e:1e:0f:2e:31:c7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
        Validity
            Not Before: Jun 30 16:01:43 2026 GMT
            Not After : Jul  1 16:01:43 2026 GMT
        Subject: CN=d64939cb3613e7b3dc1198ca6ec77e6dd3f35b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:fe:90:f0:24:d5:46:81:94:6f:a6:e1:41:
                    d9:84:8d:bb:4d:20:22:a3:7e:f6:d6:46:b4:56:55:
                    96:59:7e:22:be:f5:5a:a4:a4:79:62:4e:09:12:ce:
                    1d:19:42:ee:a8:d3:bc:3d:2f:70:e9:1a:75:8a:ac:
                    63:a1:57:54:f0:8e:37:4f:dd:b2:91:57:f6:47:22:
                    be:bf:5f:d5:00:c3:40:88:cb:6b:39:3d:ca:18:5a:
                    81:1d:0a:04:99:91:a5:b0:9d:4d:89:08:57:e0:68:
                    ab:69:72:1e:c6:2f:86:1e:83:75:21:c0:f8:9d:61:
                    d9:45:c5:24:7e:cb:3e:32:48:47:e3:b5:b8:7d:49:
                    10:7e:79:31:04:6e:c1:5e:67:a2:3c:18:71:95:95:
                    de:d6:2a:2f:36:b4:3b:fd:1c:90:71:93:d8:11:3b:
                    bf:32:fb:4b:61:aa:60:3e:14:ed:5b:59:83:46:b9:
                    4a:67:43:ad:64:8b:65:c2:20:ad:93:92:fc:a0:0f:
                    63:8f:f2:1c:91:16:65:97:69:a8:01:ad:20:7f:aa:
                    8e:b9:d9:63:e8:f3:13:19:7b:27:71:9a:c3:43:7b:
                    c6:4a:7d:c7:86:d3:c9:bc:a9:e4:19:07:a1:78:11:
                    7c:89:10:d0:0c:54:2f:55:d2:36:0c:98:ec:c2:ab:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:49:39:CB:36:13:E7:B3:DC:11:98:CA:6E:C7:7E:6D:D3:F3:5B:68
            X509v3 Authority Key Identifier:
                keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:86:51:fe:96:b4:b5:59:2e:d4:9a:0a:0c:b0:9e:07:2d:34:
         97:f7:d3:d9:42:d0:8c:f8:1a:fa:58:dc:53:f9:85:fe:74:d7:
         2b:96:78:99:45:29:49:88:6c:f5:43:69:97:03:b4:6b:bc:23:
         10:00:d4:90:5c:41:e0:4e:64:f6:76:95:96:de:39:cc:95:4a:
         41:7d:3a:ff:26:42:b2:00:7e:54:ff:70:13:de:99:05:17:9f:
         e9:6c:be:36:ef:80:23:80:21:c2:99:b2:a5:92:cd:64:26:8d:
         3c:b2:4c:14:67:19:02:e9:17:72:a5:2a:67:8a:da:09:1b:6b:
         0d:10:64:f7:c9:9b:4a:07:8b:28:92:b1:6b:73:2a:93:4f:33:
         41:7c:2c:f9:c9:55:e8:c3:b2:50:1a:97:a9:c3:f1:f9:4d:e9:
         c1:27:b9:57:78:15:1f:1c:71:9a:ba:68:2e:69:4a:17:73:e5:
         4a:f4:a1:c9:eb:82:61:b5:39:5c:32:24:62:63:66:dd:e3:98:
         c4:52:a4:79:61:25:2e:2d:10:03:34:b7:d8:75:e8:9f:df:38:
         30:62:72:f6:43:d8:2c:b6:9e:dc:6b:28:2d:66:3c:36:76:57:
         e9:7b:7d:00:20:04:3a:85:97:cc:8e:16:56:06:20:88:87:a5:
         65:99:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:07 2026 by rpki-client