Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
File:                     4A98YCwtJIbuagplJAe5BKfUDeA.mft (raw, json)
Hash identifier:          345vmGoYCSpiqN3BzJ5G5Lvcfg/NiD+JJmCbSctch+M=
Subject key identifier:   EC:19:54:AD:EF:95:0A:C3:56:9E:C3:F7:52:C6:46:A3:F3:DB:58:D6
Authority key identifier: E0:0F:7C:60:2C:2D:24:86:EE:6A:0A:65:24:07:B9:04:A7:D4:0D:E0
Certificate issuer:       /CN=e00f7c602c2d2486ee6a0a652407b904a7d40de0
Certificate serial:       019F8F7DE050266B91A21C3501C584460A60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:00:18 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:18 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:18 +0000
Files and hashes:         1: 4A98YCwtJIbuagplJAe5BKfUDeA.crl (hash: Aav3uh1+iZEW9taobwSepcOEzmyST5nUMYxcsdUvTrg=)
                          2: XYZAtepajrERzVfepYrQ1WLpJn0.roa (hash: NwsD9n0fR/8scpVFCnvi5VpS0JM3A+KLBhhzQOSTM9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:e0:50:26:6b:91:a2:1c:35:01:c5:84:46:0a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00f7c602c2d2486ee6a0a652407b904a7d40de0
        Validity
            Not Before: Jul 23 15:00:18 2026 GMT
            Not After : Jul 24 15:00:18 2026 GMT
        Subject: CN=ec1954adef950ac3569ec3f752c646a3f3db58d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c1:d9:88:9d:46:00:37:f9:d9:b5:87:94:ae:
                    35:b2:aa:35:2b:ad:1d:0e:15:dc:f3:04:1a:e2:d6:
                    f2:fc:6a:69:fd:e3:e3:82:25:70:ce:9c:44:58:71:
                    ce:15:b1:77:fa:21:5b:89:68:75:09:dd:98:82:bf:
                    97:f6:91:d3:13:3c:c8:99:bb:ba:09:8e:ce:2a:d7:
                    5d:67:6c:cf:aa:10:10:09:b3:c9:08:f1:94:e9:3b:
                    dc:e3:33:71:c2:29:87:0b:08:de:15:08:5b:b2:0f:
                    e7:47:3e:f5:00:a1:9d:a0:e0:e2:5c:1b:80:f4:59:
                    2d:e7:85:81:59:d9:ce:25:e2:e8:6c:a5:fb:ae:d5:
                    72:c9:94:85:78:7e:43:51:38:e0:85:59:47:22:87:
                    cb:64:74:b4:ad:2b:a8:e9:3e:5c:86:da:25:06:df:
                    fe:84:cc:b8:df:70:b2:92:92:5b:a3:73:37:b1:ec:
                    5b:81:e3:8e:56:cb:db:9a:cf:f4:8e:ec:4e:42:03:
                    f9:20:8e:aa:8b:ff:c5:36:eb:18:8e:39:49:6e:5e:
                    f6:7e:24:1f:bd:cf:e6:e9:e9:14:4e:91:49:b4:0d:
                    18:a3:51:d1:ff:19:f8:16:d9:c8:39:5b:f9:7d:f7:
                    12:89:06:48:fd:17:e7:72:a9:66:f0:f3:5a:23:16:
                    20:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:19:54:AD:EF:95:0A:C3:56:9E:C3:F7:52:C6:46:A3:F3:DB:58:D6
            X509v3 Authority Key Identifier:
                keyid:E0:0F:7C:60:2C:2D:24:86:EE:6A:0A:65:24:07:B9:04:A7:D4:0D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d8:ab:a1:9a:1d:83:ab:44:24:49:64:09:21:93:58:cf:47:
         07:9d:76:2f:fe:bf:59:9d:bd:b4:95:d8:91:61:bd:69:bd:a4:
         92:82:7a:54:80:cf:c7:4f:7a:23:b9:94:4b:19:7d:20:d2:54:
         27:bc:59:b2:18:49:98:f4:d1:3c:ed:7c:b5:a5:82:54:74:52:
         2c:15:a9:0c:79:26:fe:28:21:33:e4:ad:11:6d:13:2f:6f:58:
         c5:79:41:42:48:e9:6c:c6:e1:a4:8e:4a:1e:73:8b:46:38:9f:
         71:22:4b:e8:fb:44:09:92:69:55:d0:81:c0:bb:27:f2:c1:ab:
         19:dd:d2:7c:f8:42:e1:37:d7:66:e9:25:1d:e0:17:8d:cf:a3:
         da:fc:fe:13:a5:4f:4e:d5:d4:c9:92:86:30:1c:72:5d:f0:e7:
         4e:df:91:1a:03:b9:71:b7:8e:c2:c8:b0:40:05:ef:13:8a:d0:
         53:c2:8a:b0:43:5f:3f:0d:f2:bc:19:e7:07:43:1a:54:6f:28:
         cf:e7:03:28:f6:93:36:e0:1e:2b:9c:6b:68:f6:52:b2:c0:18:
         e1:a5:d5:90:c9:ab:df:18:0a:57:96:7e:49:d0:88:cb:64:6d:
         a2:7c:05:ed:e8:9f:e1:01:16:93:86:c8:45:a9:7e:62:3e:82:
         c1:ae:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:38 2026 by rpki-client