Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
File:                     4qEN5v-uWQQnJEoDND22asVkJ1o.mft (raw, json)
Hash identifier:          k81SvjGzWP9tOouVwawvUD5yLaVm9imuglLNIKgQDcQ=
Subject key identifier:   E2:69:72:34:43:80:FC:D8:80:17:3E:BE:22:14:A4:1A:81:6E:C5:AC
Authority key identifier: E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
Certificate issuer:       /CN=e2a10de6ffae590427244a03343db66ac564275a
Certificate serial:       019E1FEC9080FBDBE50C794348C2D6224AFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
Manifest number:          164F
Signing time:             Wed 13 May 2026 06:00:57 +0000
Manifest this update:     Wed 13 May 2026 06:00:57 +0000
Manifest next update:     Thu 14 May 2026 06:00:57 +0000
Files and hashes:         1: 0gIiALe6pz1IQicIRlap9JpEjvk.roa (hash: a8WIdauJpV7mniv+m0G3DWtScZS35ac1cb7lSAK0pD4=)
                          2: 4qEN5v-uWQQnJEoDND22asVkJ1o.crl (hash: iyhBdad/uyUwO5SlXHioPKG0elia1hXp3pD0/kxPIXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:90:80:fb:db:e5:0c:79:43:48:c2:d6:22:4a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a10de6ffae590427244a03343db66ac564275a
        Validity
            Not Before: May 13 06:00:57 2026 GMT
            Not After : May 14 06:00:57 2026 GMT
        Subject: CN=e26972344380fcd880173ebe2214a41a816ec5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ef:8b:0c:c3:d3:a1:65:dc:80:5b:05:cc:f9:
                    bf:b9:2a:b6:9f:ac:69:c0:d3:d1:e4:68:e5:72:71:
                    f1:ca:6b:44:ea:5b:9c:7c:6a:9f:d3:4f:80:69:6f:
                    a3:64:89:1a:49:70:45:05:f7:ad:1e:2d:da:5b:9e:
                    82:cd:69:02:66:0d:13:51:da:a7:86:2a:e8:0c:d9:
                    74:87:0c:21:22:a0:59:cc:1f:56:5e:fc:28:81:0b:
                    23:70:94:85:ed:c4:50:5a:ec:71:0f:27:a2:3c:3c:
                    6a:61:61:67:39:7b:30:18:08:55:60:8c:f1:23:5f:
                    26:cc:aa:4a:09:e2:27:71:0d:3f:5a:8c:2d:76:d0:
                    bd:62:4b:85:0e:31:6b:05:36:00:7a:b3:3f:fb:47:
                    34:7c:e4:20:13:45:db:5c:3f:a9:00:c8:97:d2:e2:
                    68:c5:14:34:19:c8:ce:29:28:10:b7:6c:ae:a3:30:
                    f3:5b:63:13:b5:93:28:6d:98:83:a1:f2:29:5e:d6:
                    78:a0:b6:f5:4b:19:e7:0b:96:60:75:3e:ee:f3:56:
                    c3:c8:35:e3:15:2c:da:2d:99:67:bd:0a:58:68:f2:
                    c7:66:7d:7f:82:68:e3:ee:e7:8b:8e:be:cd:58:0d:
                    2d:58:12:d3:32:82:0a:71:80:bd:32:9a:89:6e:e3:
                    2c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:69:72:34:43:80:FC:D8:80:17:3E:BE:22:14:A4:1A:81:6E:C5:AC
            X509v3 Authority Key Identifier:
                keyid:E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ad:71:a0:11:98:18:04:ce:6d:5e:c0:c0:3e:ac:c3:96:35:
         1d:97:e2:05:d8:30:5e:ba:ae:4a:9e:81:2c:9a:63:ef:dd:d0:
         86:fa:2c:60:ec:88:a2:a7:11:98:40:07:41:a5:ea:91:1f:8e:
         fe:ed:32:23:d0:8e:a4:55:22:4a:9e:2b:bd:6d:4b:f0:ef:c8:
         98:61:c8:83:5e:3d:82:66:5a:34:ee:50:54:e6:a5:1d:66:bb:
         e5:fe:5a:4f:18:b3:d4:43:9a:b1:7c:36:fe:4f:ef:8a:18:e2:
         df:e4:ee:78:2c:60:65:9d:aa:a5:0e:5a:50:0f:25:4b:f3:0f:
         16:a2:19:06:65:a4:50:f0:2c:80:11:5f:77:22:af:1e:31:8c:
         0f:20:ce:4e:78:17:5f:8d:51:26:38:2d:61:9a:c7:ed:53:0d:
         d6:a4:df:b4:ac:98:cd:69:1a:df:4a:d6:57:a8:ae:6e:3a:90:
         7b:7f:1c:d9:06:d5:7b:1f:f1:92:66:8c:e1:4d:ed:b1:8f:53:
         77:a3:d6:8e:06:19:2a:b5:9f:fc:a0:2f:7e:ba:62:6e:f2:33:
         df:7f:be:c9:82:48:3d:ee:a4:95:4d:8d:92:8d:1c:8d:9b:c4:
         8f:98:e3:29:a0:da:0d:49:5f:a0:e5:bc:13:d1:ee:91:29:9e:
         c6:ac:79:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:50:34 2026 by rpki-client