Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
File:                     4N6QuLKkhGwldFi_G_tset6TLss.mft (raw, json)
Hash identifier:          GHqSJvoI6sGkdWOvtGXPYLTNQTm+fJtsP5RUZpifutA=
Subject key identifier:   B4:E8:32:21:11:DD:1A:0F:4A:D6:CB:5F:D1:61:81:06:BB:42:D2:62
Authority key identifier: E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
Certificate issuer:       /CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Certificate serial:       019E31179504F19540A0D76283D0441E2E28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
Manifest number:          0605
Signing time:             Sat 16 May 2026 14:01:29 +0000
Manifest this update:     Sat 16 May 2026 14:01:29 +0000
Manifest next update:     Sun 17 May 2026 14:01:29 +0000
Files and hashes:         1: 4N6QuLKkhGwldFi_G_tset6TLss.crl (hash: DjCCnm6KpkNEplC3E+pyMS3v+ET3G5Tr3N/x9eGUge0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:95:04:f1:95:40:a0:d7:62:83:d0:44:1e:2e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
        Validity
            Not Before: May 16 14:01:29 2026 GMT
            Not After : May 17 14:01:29 2026 GMT
        Subject: CN=b4e8322111dd1a0f4ad6cb5fd1618106bb42d262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:22:a6:05:77:81:42:28:fa:17:ff:e5:eb:
                    90:e0:b4:f5:f1:e2:ef:a0:03:ce:f2:f3:8b:5e:ca:
                    50:fa:7d:96:01:ec:0a:fd:40:96:e9:b6:c1:45:0a:
                    44:18:5e:a0:b9:18:9e:d4:40:ee:02:a0:3e:54:c2:
                    94:db:1b:4b:70:88:45:e1:80:6e:da:ad:64:2a:99:
                    89:fb:18:e5:24:33:06:27:bc:8d:9b:3e:a4:44:9b:
                    8b:1c:54:ae:3f:29:20:2a:a7:f8:bd:95:65:df:c2:
                    32:2c:43:b6:cb:a2:4c:45:d5:9f:9f:d6:76:eb:10:
                    a8:b2:27:6b:21:37:dc:2d:e5:10:ba:17:53:fb:a5:
                    a5:6f:27:b7:21:d7:97:cb:b4:ad:11:2f:2e:dc:84:
                    48:c1:7f:b6:ad:6a:8f:0f:fa:c2:fb:65:c9:eb:60:
                    bd:09:c2:47:df:a0:71:4e:16:5b:a7:9c:f8:96:41:
                    07:fb:dc:55:05:ca:b7:4c:f3:04:ea:c2:66:95:bc:
                    df:4c:b9:16:a2:1d:e5:7b:53:29:6d:7f:f5:b3:18:
                    c4:10:e8:9f:82:30:b4:cd:21:7f:54:22:1d:28:42:
                    63:45:85:7d:42:25:46:31:6c:6e:63:af:df:fe:1e:
                    59:d2:5a:10:e7:cd:1e:39:34:15:8c:74:4d:1d:39:
                    8e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E8:32:21:11:DD:1A:0F:4A:D6:CB:5F:D1:61:81:06:BB:42:D2:62
            X509v3 Authority Key Identifier:
                keyid:E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:5b:f9:29:03:ac:fa:d7:23:d6:61:77:5d:b4:11:c9:a1:55:
         bd:db:d9:f0:82:5b:5a:bb:9a:a7:ff:61:bf:75:7a:8a:5e:6b:
         00:38:a7:2f:75:c3:d7:bb:1a:4a:0e:98:94:28:5b:63:e0:72:
         de:bf:7a:45:76:4c:5f:26:a3:e2:8d:56:25:fc:78:4b:27:af:
         43:15:e7:27:3d:03:74:96:88:28:78:20:5a:be:66:60:58:f0:
         60:05:11:86:bf:c3:ea:f6:2d:2b:34:35:5c:62:52:a9:c3:a1:
         1d:bf:67:f9:60:82:d5:2f:88:59:45:f7:5f:e8:83:cd:15:a7:
         8f:b8:71:e5:d5:6f:25:a9:eb:79:38:e2:0a:c8:be:80:24:bd:
         6d:1b:b4:b5:77:75:08:2a:d6:72:06:f5:dd:f5:ae:be:a4:2b:
         fa:29:9b:c8:02:35:6d:8e:7f:3f:05:51:f4:4c:78:e7:04:f3:
         7f:3d:e5:e8:b6:0e:51:c2:39:7c:d6:56:2c:16:67:53:d6:03:
         8c:52:f7:41:f9:79:32:41:79:34:bc:4e:13:94:55:e6:59:54:
         e8:ce:13:51:dd:14:0e:d7:e0:2b:9a:62:c4:18:53:ad:8a:88:
         3f:cf:e0:e9:05:b4:c9:07:7e:63:9d:68:a8:f4:a3:82:4e:b7:
         1c:ce:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:52 2026 by rpki-client