Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File:                     T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier:          mJ3yfxZEDG6KtrxsC5Bx20yZ7QqA0jM9j4Z1a9R9/9A=
Subject key identifier:   11:F0:13:42:E2:A3:11:D1:AD:41:9C:8B:47:77:BA:90:82:ED:F9:A7
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer:       /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial:       019ECDBAEC160C15470778C530BA77FA7578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number:          0EB6
Signing time:             Tue 16 Jun 2026 00:00:39 +0000
Manifest this update:     Tue 16 Jun 2026 00:00:39 +0000
Manifest next update:     Wed 17 Jun 2026 00:00:39 +0000
Files and hashes:         1: 1tI6G_uipCGYM7G28gO9zYS_vd0.roa (hash: jQHm0OXPGE8VAsUUw4pohYSxJ7gjNdv50GcJUwt6Vgs=)
                          2: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
                          3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
                          4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: u+fVHDsvh39Zrx2t3FkctmpBN814O18X+HVo8a2JcI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 00:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:cd:ba:ec:16:0c:15:47:07:78:c5:30:ba:77:fa:75:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
        Validity
            Not Before: Jun 16 00:00:39 2026 GMT
            Not After : Jun 17 00:00:39 2026 GMT
        Subject: CN=11f01342e2a311d1ad419c8b4777ba9082edf9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:57:83:f5:bb:4a:28:51:17:43:2d:9e:7f:
                    cc:93:31:db:83:cf:c8:08:df:6b:1c:be:73:20:f6:
                    ab:5f:7e:6a:28:7d:a7:6c:11:ad:bf:4d:e6:51:3c:
                    db:aa:0e:4b:4f:33:2e:54:df:96:73:06:65:1e:f2:
                    f6:b9:d8:dc:17:f7:b1:ea:94:90:7e:54:52:8a:56:
                    5b:5d:27:57:33:05:48:a1:40:e9:9d:43:3d:d8:fa:
                    80:a5:96:70:8f:a1:8e:9f:ae:60:f7:cb:4e:59:68:
                    d1:cb:fd:c7:9a:41:cc:34:dc:79:81:69:b2:85:4e:
                    83:52:b0:e3:5b:84:ae:1f:f4:34:77:27:c5:db:7e:
                    8c:ef:7d:2c:26:78:59:65:66:6e:13:fb:1b:56:89:
                    83:4d:28:5f:69:0c:18:57:53:90:a8:ee:37:a1:9f:
                    7d:a1:b4:9a:74:8c:a9:9a:77:f0:99:48:57:2a:f7:
                    c7:24:e8:b3:7a:31:fd:53:ae:01:fd:07:7c:00:5e:
                    b7:29:3f:dd:79:63:89:ce:97:df:00:71:34:83:8b:
                    1c:8a:da:51:b9:93:84:c2:c7:3e:48:97:95:78:41:
                    65:46:59:90:42:35:2a:4a:99:68:f9:63:ec:32:f8:
                    0d:f1:26:ad:36:42:49:ab:d6:f3:94:cd:8c:74:ff:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F0:13:42:E2:A3:11:D1:AD:41:9C:8B:47:77:BA:90:82:ED:F9:A7
            X509v3 Authority Key Identifier:
                keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b6:23:ab:29:f5:19:11:6e:f0:db:83:47:48:99:7a:5d:a4:
         2e:57:67:6b:bb:ed:fc:45:57:18:66:3b:61:23:c2:ea:f0:a4:
         90:5b:d6:26:e7:b4:55:5d:ce:7b:53:fd:d1:fc:11:3d:97:55:
         a2:6b:86:64:ac:2e:a5:b2:7c:e8:5e:10:38:e2:4c:05:32:30:
         dd:df:cd:d3:ab:58:59:29:41:65:ee:a3:c2:5d:7a:e0:d1:2c:
         7e:00:3f:ba:8c:e3:11:27:55:47:56:ac:8e:6f:24:32:69:34:
         66:12:09:93:c7:1f:2e:40:ff:67:ef:18:f2:3d:01:f1:e0:d0:
         97:aa:d0:57:03:ee:85:c2:9e:45:67:f0:d8:1b:99:95:60:06:
         b0:dc:c0:58:b9:e2:9f:5b:da:5e:bb:fe:82:73:78:5a:87:9c:
         a5:bc:b5:06:cf:e7:da:d7:eb:45:a0:ce:7a:ca:84:60:94:20:
         41:c2:7a:fc:49:51:9c:b1:dc:2d:be:f3:e5:00:c2:f3:27:f3:
         79:36:f1:5a:e4:d1:ac:2a:b7:ea:f7:8f:34:4f:2b:cd:ed:04:
         e7:bc:a1:d7:b1:a5:9d:a4:27:7f:9b:fd:f9:de:b6:e3:10:61:
         18:aa:fe:bf:c3:a2:97:9a:0a:71:9a:b2:c8:fe:cc:e2:7f:dc:
         a5:4f:6c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 11:10:57 2026 by rpki-client