Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File:                     4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier:          6vCA6hhTXbPBexUSwMycY/P0nueIVp2GocJq7PVunFc=
Subject key identifier:   9D:8D:BE:B2:9D:CC:CD:24:02:80:51:86:0E:A3:45:7C:FA:C7:FC:CB
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer:       /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial:       019F909134492E642BDB5CB3957E0922D3A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number:          0766
Signing time:             Thu 23 Jul 2026 20:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:02 +0000
Files and hashes:         1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: RJ2S7M7Wz1luavlDAc95QtkYQtaJjFO86xcK+TmD/9s=)
                          2: z585MlMo7mSSr9Hk1ivV-63iY4Q.roa (hash: DZmssWKd0chIvnTRvKAN4jdqih24+ZhEvPT2Hj5FZkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:34:49:2e:64:2b:db:5c:b3:95:7e:09:22:d3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e109e278c7862254c88755e4717398a552a49040
        Validity
            Not Before: Jul 23 20:01:02 2026 GMT
            Not After : Jul 24 20:01:02 2026 GMT
        Subject: CN=9d8dbeb29dcccd24028051860ea3457cfac7fccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:80:89:86:7c:c1:14:92:2b:1a:ed:1f:e4:
                    d5:3e:a8:c9:39:0f:91:7f:ed:fd:89:16:c4:d5:74:
                    b1:21:f5:6a:ef:45:94:b7:64:23:aa:1e:33:e0:96:
                    03:59:ef:21:1a:f7:75:49:17:3f:b7:7f:10:0a:09:
                    3f:ca:08:2c:3a:56:b6:b6:38:72:b1:96:42:cf:e3:
                    ef:19:c9:7f:a0:e2:f7:8b:c9:68:85:36:85:b5:4a:
                    21:c3:fd:6e:b3:c3:ef:4b:9c:d0:26:88:f3:32:f3:
                    5e:2d:0a:4b:1a:95:ca:01:0a:3f:39:24:72:b1:22:
                    7a:4f:4e:a2:91:84:7c:a9:17:4f:38:bd:1f:9c:50:
                    e8:c4:ee:18:bf:1b:9b:1a:48:0d:0d:d3:18:bf:25:
                    9f:89:44:2d:73:5b:96:98:da:43:45:6b:f2:98:9e:
                    de:9e:81:7b:16:71:79:e6:7c:1a:54:b1:8e:fd:b6:
                    62:29:ff:19:7c:89:cd:4d:dd:52:6b:ec:fa:34:53:
                    57:37:22:ad:c5:ee:cf:23:9d:db:04:42:07:6c:4e:
                    21:af:9b:92:b5:89:6c:77:04:b8:08:08:7b:19:5a:
                    40:67:3f:5b:16:e9:72:3c:9e:a2:b3:4c:05:4e:c1:
                    b3:e0:f1:f3:a7:97:55:2d:7c:54:8e:29:86:c2:16:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8D:BE:B2:9D:CC:CD:24:02:80:51:86:0E:A3:45:7C:FA:C7:FC:CB
            X509v3 Authority Key Identifier:
                keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ea:68:ed:35:90:98:0d:bc:84:7a:dc:ec:8f:57:49:a0:96:
         5e:7a:4e:cb:5f:6c:e1:a5:cd:9d:15:8f:6c:3d:bf:85:c7:74:
         bf:99:50:29:89:15:34:05:81:41:7c:8c:ff:03:ce:26:05:ab:
         47:27:a8:f9:e2:c4:db:b6:d1:62:fc:6c:9b:04:e2:fc:11:18:
         bd:26:65:8f:84:56:37:aa:fb:02:fa:90:d8:23:3e:65:5a:79:
         b5:3f:7d:69:c6:12:34:0f:c3:0e:d8:e9:03:45:12:0e:b3:fe:
         dc:dd:fa:5a:62:56:88:2a:aa:67:e8:cd:22:57:3c:38:00:10:
         cc:cb:e3:47:96:62:62:10:37:05:4d:df:a5:e4:36:19:11:94:
         34:5e:58:87:56:b1:d6:b8:fb:c1:bd:b8:8b:0f:56:00:87:e0:
         e4:62:da:08:d3:ed:eb:ff:ff:a1:f8:94:78:a9:0f:e0:3a:ea:
         80:ed:f4:8e:bf:07:e3:1a:36:5a:9a:d0:cf:2c:3a:f5:96:21:
         b2:1a:18:a9:fd:c7:9b:90:2b:a5:0c:51:84:7b:ea:23:2f:81:
         88:53:75:cc:9b:38:51:d9:fc:2e:78:39:21:7f:51:a8:93:d1:
         5b:9f:1b:12:88:a3:55:d5:80:a5:a8:ee:a6:a6:6c:19:9e:88:
         da:7f:7f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:26:04 2026 by rpki-client