Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.mft
File:                     4E7WArv2X18jlv2AlcPZhhRnQf4.mft (raw, json)
Hash identifier:          E54o3EQOm2eUZ9UfUdQRu9V51HZ8GMWkwPtFrVRfIo4=
Subject key identifier:   1B:8F:04:7B:B0:5D:8D:04:44:B0:BC:99:EE:C9:66:F8:8F:36:B4:1D
Authority key identifier: E0:4E:D6:02:BB:F6:5F:5F:23:96:FD:80:95:C3:D9:86:14:67:41:FE
Certificate issuer:       /CN=e04ed602bbf65f5f2396fd8095c3d986146741fe
Certificate serial:       01A0CC350C5228586DCA1D54E41D63A23CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 03:00:23 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:23 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:23 +0000
Files and hashes:         1: 4E7WArv2X18jlv2AlcPZhhRnQf4.crl (hash: ALVVobW/bX+jz0K9kvBgZk+5HEYiQJ5imsAmSiSY2Pk=)
                          2: ZaoftZNK70ijBezF-hPekywKJp4.roa (hash: /YydUnIu0lwQr4MU0CkW6JlqBtskYtFFQEmrq4eHBP0=)
                          3: qS5pyl9pypw36FT-lbjeONyk28Q.roa (hash: 3XhF5aY0cvvvNLZA18eCkajF3VHk7yUuOdxjn+SLuVQ=)
                          4: w-g9EUxKOtgFE5rf6jRVRa8B7aQ.roa (hash: V67Y6C537HMNAsGY9bRCuGZ6echEOhzyPmdBPlRkQsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:0c:52:28:58:6d:ca:1d:54:e4:1d:63:a2:3c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04ed602bbf65f5f2396fd8095c3d986146741fe
        Validity
            Not Before: Sep 23 03:00:23 2026 GMT
            Not After : Sep 24 03:00:23 2026 GMT
        Subject: CN=1b8f047bb05d8d0444b0bc99eec966f88f36b41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:1c:c6:24:e1:55:e2:8a:bb:ad:d3:13:60:
                    a0:a3:5e:17:c0:45:ae:e4:85:ab:d1:d6:74:70:0a:
                    ed:a8:13:1e:16:05:17:fd:ed:97:a2:4e:89:b8:4e:
                    01:46:cd:fa:c3:38:87:ad:d6:9f:49:bf:39:b3:21:
                    30:73:76:f1:7b:56:71:a4:3d:d1:95:e7:dc:2c:1e:
                    27:49:45:e9:07:ca:72:ef:09:ea:d9:56:d4:49:54:
                    2c:92:71:b0:6f:d7:f3:d3:b4:6e:82:c9:00:48:e0:
                    d0:91:f8:ef:60:90:3a:9b:50:49:8b:42:51:1f:db:
                    3e:08:8d:96:1c:4e:01:70:10:8f:73:e9:49:ab:e2:
                    c7:6e:df:98:90:21:71:f8:3c:36:14:d1:b7:01:af:
                    25:9c:32:e0:53:3c:fc:a0:df:f7:da:c7:ee:ea:28:
                    e9:75:39:12:b0:46:4f:6b:1e:00:a5:ae:ac:a3:ca:
                    f8:dd:dc:aa:25:e6:86:ec:91:93:f7:59:1b:8c:d1:
                    92:b4:f1:b5:e9:58:a7:0c:97:76:0f:d6:47:cd:21:
                    52:30:ee:69:49:20:b4:5b:b0:ef:db:1d:46:dc:ae:
                    0c:66:a6:aa:71:fa:bd:d2:a7:bb:90:90:1d:35:4b:
                    96:a8:99:19:e5:5b:80:97:f5:c4:7e:26:3f:fd:33:
                    fb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8F:04:7B:B0:5D:8D:04:44:B0:BC:99:EE:C9:66:F8:8F:36:B4:1D
            X509v3 Authority Key Identifier:
                keyid:E0:4E:D6:02:BB:F6:5F:5F:23:96:FD:80:95:C3:D9:86:14:67:41:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ca:f4:0b:0f:dd:f8:8b:06:4e:db:2c:fd:fe:92:6e:27:40:
         6a:b6:9a:15:8c:f1:a8:c8:9c:40:1e:cd:4f:5c:70:ab:f8:64:
         c2:bb:37:ca:fd:45:e0:69:81:4e:c4:3d:78:cf:18:f7:cd:37:
         fe:96:90:f5:d0:d8:22:1a:83:23:17:d8:30:f1:e4:c7:d2:77:
         56:03:38:44:5b:ca:9d:6a:2d:3e:b3:f1:11:92:96:a8:20:45:
         4a:cc:09:17:86:fc:22:52:d8:9a:60:0d:13:ac:56:14:42:e9:
         05:ff:71:47:af:d8:56:eb:c8:0b:85:44:b4:09:1a:09:f0:3e:
         93:b8:70:ba:ed:7e:39:41:0f:f0:f6:ab:7d:2c:86:3e:53:13:
         9a:67:1c:6d:02:33:4a:52:04:e1:93:35:31:1b:dd:3c:d5:75:
         db:01:05:a7:ec:7f:92:9d:db:96:94:99:d1:51:47:55:46:e2:
         7c:06:b9:25:19:f6:04:6d:46:6a:49:ab:fc:8c:c0:df:3b:10:
         98:4c:64:f9:10:09:60:65:79:8f:3a:04:3d:89:21:b0:29:57:
         d2:2e:b8:a6:9e:db:f4:8f:55:e8:41:97:f1:c0:8e:59:6a:2f:
         b5:70:80:0d:9c:cd:68:5a:e9:52:2f:52:cd:19:41:ff:69:4c:
         d8:27:50:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:55:06 2026 by rpki-client