Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
File:                     CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json)
Hash identifier:          bFvTCMp9drgE3bXcAOimQ80OHlDqBRhjGARY9H4JzLs=
Subject key identifier:   C5:43:95:0D:AB:51:98:BC:B3:20:B9:01:C1:46:A0:CF:28:05:75:FC
Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
Certificate issuer:       /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Certificate serial:       019EBD6C79EF29CDD8BE0A6AD1273B3695A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
Manifest number:          06E7
Signing time:             Fri 12 Jun 2026 20:01:03 +0000
Manifest this update:     Fri 12 Jun 2026 20:01:03 +0000
Manifest next update:     Sat 13 Jun 2026 20:01:03 +0000
Files and hashes:         1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: ohYx68RX+X+Aa1hbZkfyODRaBX0QCEBaORmtL1BnXG8=)
                          2: IZEphWg69cSETII6yv_zCGuLAdo.roa (hash: KJY/8Q52tgDHO65sY7/mwgDgyHvwck3lR6gtDYReLqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6c:79:ef:29:cd:d8:be:0a:6a:d1:27:3b:36:95:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
        Validity
            Not Before: Jun 12 20:01:03 2026 GMT
            Not After : Jun 13 20:01:03 2026 GMT
        Subject: CN=c543950dab5198bcb320b901c146a0cf280575fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7b:38:9c:27:e6:c1:5e:63:03:a4:b2:5b:28:
                    97:f8:92:77:25:2f:fa:ba:10:6b:eb:22:f3:27:c9:
                    f1:cf:3e:cc:63:b3:d4:41:18:cc:70:7a:59:1e:86:
                    0a:f1:bc:43:fc:81:3e:d8:85:a8:1d:c0:04:0a:a6:
                    ef:7c:29:82:ef:fe:f6:d3:c7:bb:e1:59:35:b1:3d:
                    46:f9:f9:09:14:46:df:09:3d:de:28:5f:cb:f9:ec:
                    b1:35:ab:ce:52:22:07:1c:85:08:c4:33:01:0b:8d:
                    96:29:8b:72:ff:05:34:84:e0:d8:af:63:42:c3:0d:
                    77:42:e3:3b:0c:bf:cd:1b:b0:12:95:28:bb:d0:0b:
                    49:a1:af:78:c4:02:b2:79:79:05:4a:93:ce:3a:6f:
                    31:6e:28:31:02:a0:bb:5d:5c:22:80:78:51:e5:64:
                    12:72:3a:b4:90:a0:27:59:74:dc:25:a1:69:00:cf:
                    f3:84:99:3a:c9:05:17:ea:19:5c:33:28:7b:57:a4:
                    aa:c2:b5:89:5f:b5:71:96:fe:0d:53:c3:f7:56:67:
                    2c:6f:19:e3:f3:39:2f:c8:10:04:1b:0e:d3:a2:41:
                    eb:3c:b5:21:c1:f6:45:61:97:6b:26:3e:19:c1:76:
                    98:65:55:9f:3c:45:6e:20:7e:26:89:7b:1b:e1:3b:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:43:95:0D:AB:51:98:BC:B3:20:B9:01:C1:46:A0:CF:28:05:75:FC
            X509v3 Authority Key Identifier:
                keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:90:2e:9a:c9:e3:ba:a0:5e:f6:04:32:71:38:10:e1:ff:d5:
         cc:51:e9:97:9f:19:b1:8a:82:d4:eb:2a:e8:f9:78:f4:c8:32:
         18:8a:0a:af:4c:14:d4:85:a6:d3:04:35:04:38:68:c0:12:9b:
         c4:e0:e0:64:f1:2b:d0:d2:80:00:60:ba:51:b7:7e:72:81:8a:
         72:71:9e:b7:e0:c0:16:0b:ac:6d:0b:68:7a:c9:28:ea:da:cb:
         fa:8f:85:e3:74:44:ae:87:0a:44:9e:41:2e:71:45:30:1e:d9:
         cf:b3:e6:c3:2e:ad:8e:ea:b9:65:f8:e8:0b:24:78:c9:c8:c5:
         be:68:9a:3d:e9:47:f3:37:18:03:d3:ae:5f:fb:28:2b:6e:2b:
         dd:19:b4:53:34:11:32:62:bc:48:be:db:5e:30:67:51:fc:2a:
         98:b3:27:f2:aa:ab:1b:c3:6b:e8:c1:f9:23:c2:29:f9:9e:84:
         f7:1e:e6:1c:72:b8:b2:72:45:60:c6:32:49:f1:2a:3a:65:e9:
         d5:bc:2e:95:95:4a:12:a2:37:ea:28:ba:06:8a:4d:59:a1:2a:
         79:f6:5f:36:f9:3f:4d:3b:1c:10:ba:c0:1a:76:47:e8:9e:ea:
         41:40:04:35:bb:91:7a:83:82:6a:cb:f3:06:b5:39:13:d7:ae:
         06:f1:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:34:56 2026 by rpki-client