Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File:                     h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier:          io6M15SMMAcQ8dOG+mBf4Zo+n0j07Cct3kl8QQzx3/8=
Subject key identifier:   42:49:98:88:15:53:05:83:C2:4E:84:DA:FD:23:BC:F9:96:C0:EC:97
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer:       /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial:       01A0EC9D7BAF467AAF2241A949875837389C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number:          1836
Signing time:             Tue 29 Sep 2026 10:02:18 +0000
Manifest this update:     Tue 29 Sep 2026 10:02:18 +0000
Manifest next update:     Wed 30 Sep 2026 10:02:18 +0000
Files and hashes:         1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: wiJxp6Zskhr0jmQUETACp9NR8Ih75YfLabYadP3ufPE=)
                          2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:9d:7b:af:46:7a:af:22:41:a9:49:87:58:37:38:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
        Validity
            Not Before: Sep 29 10:02:18 2026 GMT
            Not After : Sep 30 10:02:18 2026 GMT
        Subject: CN=4249988815530583c24e84dafd23bcf996c0ec97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:22:13:c0:7a:6b:b1:32:d8:4f:36:32:c9:f6:
                    0c:f6:7e:37:96:63:e2:83:14:3b:e4:99:44:b4:98:
                    3e:22:6b:78:58:9c:b5:e0:da:54:e2:89:0d:d2:62:
                    9f:3a:ff:56:b6:86:67:3b:c3:6b:f2:48:c5:d8:1a:
                    f2:52:46:6b:ca:1a:39:e3:c6:56:20:5f:8e:8f:fe:
                    33:93:ad:7b:41:4e:89:99:4c:39:70:a0:8b:3b:3c:
                    e5:0f:bf:c0:57:6c:70:e5:ad:fa:ad:ff:af:78:a7:
                    b2:b3:57:fc:59:41:b8:23:9a:c9:fe:71:77:ea:79:
                    6a:c2:11:66:d8:20:d2:c3:b3:df:a8:54:1b:7c:b6:
                    77:a3:81:61:36:f1:3c:9e:22:5b:4c:a6:fa:5b:83:
                    51:4a:74:9e:df:3c:d6:7b:33:57:11:84:39:d2:29:
                    25:c5:94:ca:8d:d0:d3:a0:14:5b:c8:bd:a0:cb:04:
                    b1:6f:e3:4b:da:97:9d:8b:6c:02:b7:43:d5:c3:e1:
                    9a:53:66:f5:cc:ba:86:00:a8:9c:64:bf:f1:25:2b:
                    0d:b4:c0:f4:12:25:33:7b:a3:c7:e0:fd:65:53:f7:
                    1c:41:ae:a0:eb:69:68:d2:b3:df:d5:22:48:1b:3a:
                    56:13:22:84:b2:b9:e0:cc:d4:46:24:d8:a5:02:a7:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:49:98:88:15:53:05:83:C2:4E:84:DA:FD:23:BC:F9:96:C0:EC:97
            X509v3 Authority Key Identifier:
                keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e8:b2:21:a8:89:7f:ac:18:81:00:27:18:bb:6e:e2:04:11:
         0a:34:91:7d:89:d5:16:ee:74:8b:7f:69:ad:23:f6:dd:ae:c6:
         f5:fb:cb:f3:0a:3a:a6:04:cc:d4:60:ba:47:42:47:bf:5c:9f:
         9f:78:0f:c6:64:f0:65:87:69:65:d3:37:cd:2a:ee:b8:f8:dd:
         5e:26:47:0e:fd:38:c8:02:b2:a8:c6:3c:8a:12:d3:2a:be:96:
         05:eb:2d:48:2c:d2:a9:88:0d:c8:06:68:7e:2e:4d:60:e2:6d:
         0d:f1:ff:71:55:79:60:e7:d3:b5:bd:2c:0a:7d:7e:6f:ad:fa:
         35:a6:8c:5b:47:10:a5:da:92:4a:f2:df:87:c4:b1:70:ff:4f:
         4d:f8:e4:da:13:2f:7e:2a:82:9c:5c:cd:bd:64:e6:06:f2:65:
         76:ce:9f:b6:10:45:e5:d2:d2:47:d9:a0:c1:f0:6b:e2:13:c6:
         7b:65:0d:dd:47:0b:9b:eb:91:e8:73:f2:75:ed:92:37:47:82:
         37:9b:ce:76:ea:c6:b5:e9:e9:c0:b1:c5:e3:93:c5:fa:d2:d0:
         8b:cd:2b:cf:20:79:4e:ce:51:2d:84:38:c1:67:eb:ed:5d:be:
         c2:5e:84:7a:72:91:61:83:65:77:fc:6d:7b:61:74:ae:b5:ba:
         3a:66:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:20:30 2026 by rpki-client