Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File:                     9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier:          MeiGuGcUIbN/jI82LI+kqN8t92ji5ITGj2q2L9tVHTg=
Subject key identifier:   9E:06:8E:F3:D6:8B:26:C6:3E:C4:29:CB:92:2A:CC:FF:77:71:C2:DD
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer:       /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial:       019F1831432655C07D05F3D730282C30674E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number:          118C
Signing time:             Tue 30 Jun 2026 11:01:49 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:49 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:49 +0000
Files and hashes:         1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: VDbdksxQayu2QkRerPZKBShkd8QQ2DueeB4XqaeNtzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:31:43:26:55:c0:7d:05:f3:d7:30:28:2c:30:67:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
        Validity
            Not Before: Jun 30 11:01:49 2026 GMT
            Not After : Jul  1 11:01:49 2026 GMT
        Subject: CN=9e068ef3d68b26c63ec429cb922accff7771c2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:67:c5:f2:c6:4a:3a:19:15:69:d1:2c:40:47:
                    22:46:fa:fc:ee:ba:85:e2:b6:29:23:20:d0:5b:2a:
                    a8:18:fb:ce:64:8f:e1:a0:56:70:a4:84:bc:84:60:
                    73:d3:2c:18:ab:ae:47:22:9d:46:b6:17:bf:8b:a1:
                    58:e1:44:62:17:69:99:10:8e:c0:63:e7:fa:54:75:
                    32:81:e7:de:8f:18:af:8d:1a:5c:4e:65:ca:e2:10:
                    38:ad:08:9d:85:db:42:21:ea:f7:3d:7e:c1:48:18:
                    11:19:55:4b:96:d5:54:81:72:5e:d7:1d:c6:2c:41:
                    94:fb:6e:4e:18:a7:cf:af:24:d5:75:82:92:ff:f1:
                    25:be:f7:ee:ad:42:2b:73:80:2e:d5:8d:08:30:e8:
                    69:05:87:c8:88:86:12:b8:1f:c1:ef:ca:30:8d:18:
                    bd:d3:d2:3d:a6:98:c1:41:96:f6:46:60:ca:78:fd:
                    12:7c:34:a0:eb:41:04:ee:bd:2f:85:be:60:f1:0d:
                    e4:68:77:0d:27:fe:95:b0:bd:f0:53:3f:93:db:08:
                    a9:48:02:11:04:9a:91:1d:8d:4c:89:82:e0:28:b9:
                    bd:71:3a:b9:c6:03:ec:13:0e:dd:19:3e:f5:bb:0d:
                    7a:4b:27:5f:b1:cd:63:58:5b:e5:f1:d2:f5:23:a9:
                    8b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:06:8E:F3:D6:8B:26:C6:3E:C4:29:CB:92:2A:CC:FF:77:71:C2:DD
            X509v3 Authority Key Identifier:
                keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:65:e8:14:6a:b5:8a:e5:c6:1f:8f:24:16:3e:8b:b0:9b:1b:
         68:e0:2e:6b:aa:16:aa:8b:1a:5c:a6:3f:e1:02:24:db:07:77:
         de:dc:32:52:d7:70:89:50:11:bb:16:a0:a6:85:6d:db:86:a5:
         7c:11:9b:0d:e1:fe:e1:22:8b:69:fc:fe:e9:c3:54:01:03:c6:
         a3:ad:e0:09:46:b1:b6:e6:30:f1:a6:8a:cd:29:8f:77:51:e8:
         18:f5:35:7b:3e:fe:7c:05:b1:e9:1a:e4:fb:18:40:8d:b4:1c:
         27:7e:fd:ce:53:86:47:c7:01:ac:e6:07:38:d6:cc:91:92:6d:
         25:08:c7:30:e3:89:a8:98:16:4a:49:45:c0:e5:73:5f:fa:c1:
         bf:11:dc:93:ee:ea:35:5e:9d:34:5e:e8:36:09:3c:31:c4:2b:
         4d:6d:b3:c3:2c:81:d8:1e:dd:11:f1:28:f5:a3:c3:a9:2a:5d:
         5d:45:e9:36:ce:22:b9:36:3a:97:14:98:e7:65:0b:cf:3e:d2:
         51:fe:f0:4b:e5:c2:13:bd:87:2e:01:e0:b2:07:35:0c:09:09:
         99:b1:d4:94:6c:54:4a:7c:27:9f:11:e1:bb:cb:e7:61:75:0d:
         ea:2f:ac:c5:66:5c:27:0d:25:d7:32:5c:fc:3d:d8:39:a0:b9:
         22:cb:43:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:43 2026 by rpki-client