Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
File:                     41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft (raw, json)
Hash identifier:          XzgVIcK3hh52BSGIZJspN9HGO3YQdvuFtBNKYyrIbDE=
Subject key identifier:   8F:05:CA:50:7A:4C:B4:C7:EC:FC:8C:EB:AE:72:AD:FD:67:DE:1A:D0
Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Certificate issuer:       /CN=e35607a494200ff1f3d599e25fc013f38640cd46
Certificate serial:       019ED83F08A71A794D7047B148EA3AD7DBBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
Manifest number:          0295
Signing time:             Thu 18 Jun 2026 01:01:09 +0000
Manifest this update:     Thu 18 Jun 2026 01:01:09 +0000
Manifest next update:     Fri 19 Jun 2026 01:01:09 +0000
Files and hashes:         1: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl (hash: cBoclihQA/1fIm5u1XWxJZRtwieBzh9r9gbpg48P80A=)
                          2: fJC9vmdZueXz61wAYAD-WUsaH2A.roa (hash: k5sJI4drxp1+QGPOMqgRV5VUY5GowjbKkDKbGnRh3VE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d8:3f:08:a7:1a:79:4d:70:47:b1:48:ea:3a:d7:db:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46
        Validity
            Not Before: Jun 18 01:01:09 2026 GMT
            Not After : Jun 19 01:01:09 2026 GMT
        Subject: CN=8f05ca507a4cb4c7ecfc8cebae72adfd67de1ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:bc:23:31:9f:59:3d:de:02:4b:c5:aa:1b:
                    83:3e:32:53:41:22:09:2c:40:6c:c1:87:e8:2e:e0:
                    9d:c3:87:ed:75:6a:e1:12:55:f9:ba:33:e0:a7:ee:
                    02:18:c2:26:f3:b0:92:30:4b:d0:41:f8:b6:1f:29:
                    bd:43:86:32:0a:a5:09:43:ff:e9:be:61:78:4e:41:
                    d9:ea:03:69:4f:f2:ee:03:e2:2a:4b:f2:08:b8:c1:
                    9c:8a:36:41:20:42:e5:c7:87:e3:48:5c:d7:e2:83:
                    b6:33:82:b1:bd:d6:e0:e4:26:fc:99:cb:c0:a1:df:
                    7e:96:74:d4:40:a6:0c:70:67:99:51:7f:fe:e0:1c:
                    e4:fd:12:49:7c:0a:bd:97:26:ce:92:0f:7f:36:c7:
                    90:ea:c6:a9:b9:05:fd:45:15:3d:e7:b3:24:2a:25:
                    7a:e3:93:1b:5e:a1:f0:9b:94:7f:88:85:20:09:84:
                    0a:9a:98:05:3c:2c:8f:18:78:94:9f:03:bb:4f:a8:
                    a5:7a:2a:c8:6c:23:58:b2:f9:f1:43:86:f9:66:06:
                    80:9a:39:3a:6f:71:c4:b5:8b:41:d4:98:83:76:41:
                    70:2e:e5:9b:b6:96:8f:e3:e5:4e:89:d2:4a:a6:f8:
                    ad:f5:2e:a6:d4:ba:6e:62:2f:65:a7:a7:9f:3f:b9:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:05:CA:50:7A:4C:B4:C7:EC:FC:8C:EB:AE:72:AD:FD:67:DE:1A:D0
            X509v3 Authority Key Identifier:
                keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:da:d8:fc:da:bf:94:51:4c:97:d8:35:41:7d:ce:fb:46:4c:
         34:50:54:8e:6e:65:46:ca:aa:e5:8b:84:d0:50:33:3a:a3:9d:
         de:2d:97:20:f3:0f:96:a1:cd:6b:ef:6d:62:3b:f1:3b:cb:96:
         ba:88:22:b4:fe:9d:99:dd:27:40:ec:1a:b0:cb:f6:62:8b:b8:
         81:08:8c:9f:10:69:b0:e6:be:26:39:57:d4:f0:85:d4:2f:9b:
         be:fd:36:ea:1e:e2:1f:ff:83:b8:e3:af:bf:16:ea:4f:07:ab:
         69:c1:29:fa:7b:05:bb:23:21:2d:08:aa:1a:78:ff:eb:f4:44:
         19:f1:16:86:e4:26:f1:74:39:b2:16:2f:0b:85:f3:2f:e0:69:
         99:6c:66:b5:f6:11:d4:3c:f1:bc:2c:06:5b:ab:94:b9:fe:4f:
         ee:68:b6:3b:e1:14:6b:05:33:70:84:be:c6:18:4b:a6:7f:1f:
         90:4e:e2:1f:a7:93:3c:15:02:b6:dd:55:eb:64:53:00:8f:ba:
         20:b5:3b:68:d1:d8:a1:17:db:8d:8d:15:0a:4d:6b:a6:62:fb:
         34:c2:ad:bb:10:09:d8:34:dd:da:7c:3c:d3:c9:ee:9f:bc:f0:
         e0:3e:11:0b:3a:54:ba:0e:5a:4e:ce:47:64:a1:ed:c1:a6:27:
         54:b2:05:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 02:30:08 2026 by rpki-client