Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
File:                     4z5VR668F6SCuM0e6BfdjO_2o68.mft (raw, json)
Hash identifier:          rkshy+NL8kX+QKaf5yurnDBlJwJ3oO9M6wRxcMEXapM=
Subject key identifier:   61:08:B5:36:FF:5A:A6:96:9E:81:25:6B:8F:16:87:2F:57:9C:AB:04
Authority key identifier: E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
Certificate issuer:       /CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Certificate serial:       019E1C46D373D766A4CA203C74BF617722D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
Manifest number:          10E6
Signing time:             Tue 12 May 2026 13:01:04 +0000
Manifest this update:     Tue 12 May 2026 13:01:04 +0000
Manifest next update:     Wed 13 May 2026 13:01:04 +0000
Files and hashes:         1: 4z5VR668F6SCuM0e6BfdjO_2o68.crl (hash: YO0qAt9N+b9MTsCt0rMuliWPU9q8UWqL16NuQ+HZteA=)
                          2: qdXzckccTNRBLeVgvgBV-qMZrj0.roa (hash: 3pjw8O0uhsqIQNn1FT30jie8vZXZn3/jYkrEa74ywGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:d3:73:d7:66:a4:ca:20:3c:74:bf:61:77:22:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
        Validity
            Not Before: May 12 13:01:04 2026 GMT
            Not After : May 13 13:01:04 2026 GMT
        Subject: CN=6108b536ff5aa6969e81256b8f16872f579cab04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:73:7a:90:37:d4:cc:cd:f7:34:a0:05:74:
                    5f:d1:c0:84:bc:d1:22:ba:2c:66:66:ac:2d:83:90:
                    76:53:ff:2e:65:bb:1a:92:43:da:d7:8d:ba:24:a4:
                    a2:6a:1e:0c:1d:40:85:cd:0a:32:69:ca:5c:65:ac:
                    73:35:b1:1f:33:dd:fe:42:9e:99:06:d4:ec:d7:b9:
                    60:aa:82:2e:18:53:4e:fe:99:d4:75:a7:8b:3e:79:
                    7c:51:f4:bb:13:51:31:49:45:d1:0c:fa:1f:28:f2:
                    e8:59:c5:4e:1d:32:b8:c5:1e:69:07:9f:6a:66:4e:
                    22:14:cb:09:0b:f4:15:a1:86:92:aa:12:6c:cf:d0:
                    93:ad:1c:b2:6e:66:41:39:a6:32:33:9f:fb:09:5d:
                    c3:5c:38:52:dd:a0:40:12:6e:9a:0f:b1:50:9e:55:
                    b7:7c:b2:d2:bb:13:be:1b:6a:1a:55:cd:da:cd:96:
                    6c:ff:95:bc:9c:2f:2f:ab:90:c4:d3:c3:6a:ee:f9:
                    34:da:05:59:c0:b0:17:10:fd:5f:3b:68:7f:7b:31:
                    4b:35:e2:2c:91:7c:1b:d8:92:8d:dd:ca:90:dc:6b:
                    14:ee:9d:af:93:a7:78:09:fa:2f:b5:47:74:d2:3a:
                    af:90:7d:fb:a0:9f:6e:90:d6:f1:71:82:43:02:49:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:08:B5:36:FF:5A:A6:96:9E:81:25:6B:8F:16:87:2F:57:9C:AB:04
            X509v3 Authority Key Identifier:
                keyid:E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:7f:ff:51:2e:7f:a4:04:fc:98:20:80:33:17:85:0b:cf:bf:
         69:7c:7d:3b:eb:be:91:ee:62:d1:f2:23:bb:d0:fb:62:4c:b8:
         88:98:5f:23:4b:38:dc:a9:0c:cd:6c:48:5a:a0:05:40:ba:da:
         7e:60:43:92:fd:3d:10:69:3a:e8:17:03:da:e3:ea:a4:3c:61:
         ae:34:b0:8e:bc:49:c5:7b:7e:ea:c2:98:f7:ad:4b:d3:37:2e:
         e6:b8:3c:82:fa:e5:13:16:ed:58:69:8c:c4:3b:8f:3e:3d:8d:
         39:56:59:03:c6:92:62:3a:1a:10:11:96:0a:fb:94:1d:db:27:
         6c:56:9c:01:8d:14:0a:ad:c2:1f:2a:d0:13:62:ef:13:28:4a:
         a0:4e:29:0c:78:97:56:c8:4c:25:b6:2f:2f:1e:51:5c:1c:e1:
         97:8d:5b:15:c8:2c:e7:8c:5f:70:93:9c:5e:51:58:26:d1:ed:
         de:8c:8d:1b:0a:77:81:db:cc:d9:d7:1a:8f:e1:6b:0f:11:36:
         66:33:98:51:cd:78:5e:42:14:67:ad:80:6c:82:22:fa:42:a9:
         8e:dc:61:07:92:8a:30:7e:67:d3:30:57:26:f2:50:4b:c8:28:
         03:22:db:4c:87:71:ad:3e:c7:3f:50:f0:09:df:c3:0d:c1:c9:
         7e:4c:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:17 2026 by rpki-client