Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
File:                     4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json)
Hash identifier:          LzvS/Q5S9RuTsY4eWxDXrPjuDLONwiu11+Yf9ayt4a8=
Subject key identifier:   43:EB:9F:AA:B8:60:0E:26:23:41:3C:D0:23:14:CE:1E:83:4F:A7:C7
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Certificate issuer:       /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial:       019F8F473DA74B75AC41BF2B18B8551B7426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
Manifest number:          10A6
Signing time:             Thu 23 Jul 2026 14:00:38 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:38 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:38 +0000
Files and hashes:         1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: ESUqpa5mgwc9POBuimMjLJNK5B1ZWRZypwzXwusNivo=)
                          2: GBj2xnkuHNgnAUINodxwL8rUWI8.roa (hash: Hvt6O7hlsMwc4JJYGSfH5m3V5DBbM1bLZ9uAWK2548s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:3d:a7:4b:75:ac:41:bf:2b:18:b8:55:1b:74:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
        Validity
            Not Before: Jul 23 14:00:38 2026 GMT
            Not After : Jul 24 14:00:38 2026 GMT
        Subject: CN=43eb9faab8600e2623413cd02314ce1e834fa7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:33:f4:dd:79:f4:d8:93:74:41:07:76:f1:f8:
                    ce:f8:54:a6:5f:60:0d:44:73:85:f9:d6:fb:07:d3:
                    8c:40:c3:db:92:32:2f:e4:53:80:8e:88:7b:81:b1:
                    5c:28:e2:35:70:3d:b9:58:22:9d:e3:1e:7d:eb:f1:
                    ad:34:50:08:f9:b2:d2:71:bc:ba:92:0f:0a:82:18:
                    81:ed:f2:17:15:90:30:0d:88:69:b7:e1:ed:67:af:
                    f7:03:fa:1c:44:07:5a:d2:ce:84:33:17:08:94:62:
                    95:ef:0a:bf:53:2d:7d:d2:eb:c4:a4:1d:00:89:bb:
                    a0:34:12:fd:31:cc:00:9b:a8:42:cd:19:1e:06:8f:
                    b7:1f:f7:75:e0:bc:6f:36:99:2e:49:d5:76:5e:12:
                    49:c0:65:22:e8:0d:f5:c6:b1:03:3b:95:94:cf:c0:
                    d4:27:2b:6c:60:07:2e:f2:66:95:41:bf:4d:f7:45:
                    9f:f4:e5:e1:fa:32:c2:52:23:9f:86:7c:a5:63:1d:
                    e4:9c:96:d1:d6:2a:cd:39:6f:51:15:32:1b:4e:e2:
                    52:d0:9a:8f:b3:95:cc:e8:9d:13:da:bd:49:df:60:
                    99:a6:18:26:4e:b3:53:ee:80:9a:ec:5b:4e:51:17:
                    dd:8b:5b:9b:42:2f:01:a5:07:aa:36:25:0b:2f:64:
                    87:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EB:9F:AA:B8:60:0E:26:23:41:3C:D0:23:14:CE:1E:83:4F:A7:C7
            X509v3 Authority Key Identifier:
                keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:63:51:c3:11:8e:a3:ef:ed:24:73:24:9b:b9:fb:16:73:
         98:23:05:5a:7f:e6:be:7c:48:5a:a7:e4:99:dd:44:ef:71:7a:
         d3:6a:0a:ed:f8:80:ad:26:11:c6:88:e6:2d:58:df:61:e5:c0:
         13:10:de:c6:85:ab:c2:f3:a6:e1:14:93:10:28:8d:41:78:e2:
         4c:d8:25:25:03:b7:45:ef:ca:ba:a2:37:1a:49:4b:6b:d1:e6:
         92:59:f8:fb:4f:92:f3:17:31:11:65:6c:91:ca:81:3f:da:55:
         ea:1a:96:f5:58:f2:11:38:a8:32:11:31:73:cc:7a:fb:54:79:
         2d:6a:34:ee:b9:d6:cc:96:1c:9d:e0:33:b5:f1:83:b6:07:6d:
         47:ee:6d:af:5b:57:a3:a7:04:08:e6:c8:b8:d8:36:c8:cf:e7:
         f3:67:a8:39:e7:15:97:83:fe:a9:49:e1:58:fb:8f:50:35:5c:
         7a:3a:5f:bf:3f:2c:68:12:5a:16:2a:79:0d:46:ac:0d:24:98:
         36:6b:35:ba:07:90:dd:89:7a:0c:c2:4d:1e:07:03:33:52:2d:
         d8:34:ee:53:0e:1b:a4:a5:e4:db:5b:ae:a7:84:e2:74:54:94:
         e7:43:fb:1f:ac:38:21:dc:f3:89:04:3c:30:f8:95:50:7d:65:
         bf:f9:92:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:58 2026 by rpki-client