Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File:                     ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier:          4iiKObGrirlrnzCDFLRNCkDzAzvSmbvnomEVXh/o5Lo=
Subject key identifier:   97:B1:83:38:AB:6B:ED:08:6A:BC:92:BE:5C:66:00:30:53:56:9C:38
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer:       /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial:       019EBA3419F079A568ABAD0FA786495842EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number:          1956
Signing time:             Fri 12 Jun 2026 05:00:37 +0000
Manifest this update:     Fri 12 Jun 2026 05:00:37 +0000
Manifest next update:     Sat 13 Jun 2026 05:00:37 +0000
Files and hashes:         1: 5tBrp55-EAXMGlNBrWNqj744wk4.roa (hash: rV+tN1f8sl1mzbaoUz6eUbNwGQ89OtRS1uDIueamB+M=)
                          2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: inRT3qe5sWJFHBZdnnzNkh/6hGx9778eh0m23eiPPng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:34:19:f0:79:a5:68:ab:ad:0f:a7:86:49:58:42:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
        Validity
            Not Before: Jun 12 05:00:37 2026 GMT
            Not After : Jun 13 05:00:37 2026 GMT
        Subject: CN=97b18338ab6bed086abc92be5c66003053569c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:51:7d:3b:d7:f3:39:a8:33:e8:9d:03:9f:
                    e1:4b:52:d8:7e:bd:18:fe:9b:07:47:ec:dc:4b:79:
                    30:6d:48:a1:04:06:f5:64:41:6d:90:6d:5f:84:30:
                    99:54:6c:40:94:b7:d4:43:66:3c:a9:c2:37:43:53:
                    68:07:24:88:93:da:37:e2:4e:80:f9:57:1c:8d:f5:
                    04:7b:b7:c8:35:a5:94:a1:ea:44:4c:f8:cb:6c:9a:
                    45:ed:bd:23:d8:19:3f:bb:64:92:8e:90:1f:c6:58:
                    b1:08:60:70:86:e3:35:fb:13:9b:c1:6e:85:d4:5a:
                    e6:42:5c:6e:8b:f2:3e:ca:39:30:38:80:bc:dc:a1:
                    17:d8:d6:e3:41:5f:3b:12:c3:4a:27:09:66:cc:8b:
                    d1:28:60:ce:31:ac:9d:ce:88:3d:38:24:35:2c:1e:
                    3d:36:48:5b:e8:78:8a:a2:64:98:81:a1:80:a6:9f:
                    62:eb:74:5c:ba:2b:80:5d:7f:16:73:69:05:e9:e7:
                    63:3a:ba:9a:b7:db:fa:bc:ab:e1:66:c1:91:3b:07:
                    dc:a1:59:0c:b0:a1:1f:6a:62:07:c6:f5:16:bf:4d:
                    58:ed:d6:68:43:0d:88:47:99:b8:03:75:5a:7f:47:
                    96:e9:53:00:17:d5:31:41:61:99:04:06:c3:69:f0:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B1:83:38:AB:6B:ED:08:6A:BC:92:BE:5C:66:00:30:53:56:9C:38
            X509v3 Authority Key Identifier:
                keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:74:35:f6:14:d3:11:a6:7c:87:70:70:65:18:62:17:31:45:
         f8:3d:1f:91:c0:0f:ba:c6:c0:df:6c:13:11:4b:66:73:a3:88:
         20:41:7c:f0:c4:78:53:dc:d9:14:c2:87:66:82:37:36:5e:bc:
         47:25:22:80:22:f1:59:4b:68:59:8c:83:8f:22:80:dc:94:c7:
         e3:3a:21:c5:2e:aa:da:be:07:f8:f8:61:0c:d9:39:ee:b9:9e:
         f2:95:5d:7e:01:13:13:7a:1e:3a:f5:f2:94:2d:87:55:b3:6c:
         82:0a:3a:10:b9:99:9f:ca:c2:bd:cb:73:2a:af:39:86:9e:88:
         2f:d1:71:31:35:40:47:ff:5f:db:40:e5:dc:20:27:9c:54:91:
         51:10:a4:82:3a:d9:65:08:51:18:a1:48:c8:65:d1:ac:22:ea:
         51:e6:54:72:13:ec:b6:ee:1f:e1:80:d2:a0:98:9d:94:31:b4:
         af:b3:71:c2:89:d8:80:7f:1c:4d:8f:16:5f:cf:39:59:8b:39:
         1f:b1:0d:f4:46:ea:f6:6e:19:d9:6f:68:05:e5:ae:eb:8c:24:
         a1:67:99:37:cb:a4:d9:0d:e5:a3:2b:fa:17:f9:e1:1c:06:fa:
         19:e8:e4:3a:8a:71:d8:8d:72:54:b8:be:ac:87:6c:64:11:84:
         5e:c3:98:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:53:07 2026 by rpki-client