Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
File:                     4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json)
Hash identifier:          8RNNZEs/Ayv+V0GniK7w1VqPgTdFr4GFxXqcOuN/XTQ=
Subject key identifier:   27:1D:2C:88:98:47:23:23:CA:0C:9D:E5:DA:F3:66:4F:66:35:D4:79
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Certificate issuer:       /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial:       019EDE7831B461C33B14656C14FCEC94C7F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
Manifest number:          158E
Signing time:             Fri 19 Jun 2026 06:01:19 +0000
Manifest this update:     Fri 19 Jun 2026 06:01:19 +0000
Manifest next update:     Sat 20 Jun 2026 06:01:19 +0000
Files and hashes:         1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: Xro9/Z80gbPtYesBb6qixCMiSGWAhQ+ENG1s7+lAygA=)
                          2: QpTGyhEqHx6901xnQ91Zzt7qUHE.roa (hash: YchmT807E93vtUCwowps9RxjRDg1qTobGuNKmeL1H4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:de:78:31:b4:61:c3:3b:14:65:6c:14:fc:ec:94:c7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
        Validity
            Not Before: Jun 19 06:01:19 2026 GMT
            Not After : Jun 20 06:01:19 2026 GMT
        Subject: CN=271d2c8898472323ca0c9de5daf3664f6635d479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:4e:e4:80:a4:29:56:62:20:24:4a:0d:93:
                    74:dc:94:20:af:21:ae:c3:f4:1f:67:02:b5:59:f9:
                    e0:ee:2f:5e:1d:f3:d5:94:f5:b9:76:26:08:f7:ae:
                    da:28:0d:90:28:d0:3b:df:fc:4a:9b:70:51:2d:3d:
                    c8:48:50:e2:2c:ed:fb:4a:52:dc:fd:a8:75:72:c1:
                    08:70:13:ad:2d:a1:32:ca:60:d7:15:fd:35:04:3b:
                    3e:8b:85:81:d4:5b:fb:88:6c:b7:03:da:88:2e:47:
                    27:ad:5c:04:3e:11:01:73:40:5e:26:07:10:3b:28:
                    72:0e:2a:6d:a3:d2:a2:3a:2a:f7:87:5a:ee:f2:28:
                    fb:75:68:f9:75:83:e8:09:fc:65:81:bd:b3:5b:5f:
                    18:87:49:12:ec:4e:28:8b:a5:48:da:46:4f:1f:01:
                    f3:4f:3e:60:87:55:bd:0c:93:0f:b8:4e:cf:13:40:
                    2a:e3:2a:a5:71:78:ff:06:2f:c7:19:1b:91:b3:cd:
                    b9:22:f9:b1:9d:31:26:e6:81:4d:d9:c9:4d:d2:41:
                    46:a3:4c:38:b3:14:f2:8e:50:5a:3f:21:67:78:48:
                    84:5d:e8:85:2a:ef:72:b2:f6:74:e7:81:51:92:fa:
                    aa:27:19:96:8d:20:92:1b:17:53:e3:ee:2b:51:d6:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1D:2C:88:98:47:23:23:CA:0C:9D:E5:DA:F3:66:4F:66:35:D4:79
            X509v3 Authority Key Identifier:
                keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b2:c7:0a:84:db:98:46:bc:87:52:a4:42:cf:71:ef:71:e2:
         52:87:d1:51:0f:b2:7b:e4:d2:e7:81:f0:0b:47:ef:80:a3:f9:
         93:6e:c0:f0:bb:ef:e3:0f:83:d2:71:05:01:49:6f:5e:c3:93:
         ce:85:57:54:0e:82:e3:42:bc:56:f1:fb:4c:df:8d:8c:17:bb:
         f3:4f:d4:c3:75:5e:a4:b6:d7:46:8a:99:f5:5e:93:c7:19:dc:
         93:66:76:7d:d0:12:e8:5e:94:08:60:93:5c:77:a6:c5:4b:45:
         ad:0f:8c:c5:85:b5:6e:68:49:e3:16:12:c6:02:6f:53:2b:04:
         0a:0b:cb:1c:29:00:1f:2b:71:2d:3c:ea:86:0f:41:2d:fb:a3:
         0d:ba:49:43:cb:0e:e3:28:56:69:f6:55:9c:a5:d4:78:0f:6b:
         47:52:f3:81:ad:76:5d:c9:7e:04:6f:d7:68:94:30:05:13:05:
         e0:bb:09:da:97:0e:f9:af:68:1b:c0:b0:23:15:bc:48:15:46:
         24:88:0b:85:ee:4a:ca:9c:04:dd:19:b5:86:6d:83:23:90:fd:
         db:85:c6:57:e4:8f:4b:9e:9e:f1:36:3d:ab:9c:5e:7a:27:fe:
         dd:c3:e1:75:db:29:c5:f0:db:6f:f8:2a:90:c5:9a:b2:46:17:
         c1:ff:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:32:09 2026 by rpki-client