Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
File:                     4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft (raw, json)
Hash identifier:          QtWoVIUZijp25DaEEj53PwrnfrK1ulktGqOicWo3EVM=
Subject key identifier:   CA:84:C6:A3:FD:2A:CF:19:13:F9:50:BE:DE:A8:CD:C3:C5:C9:83:3E
Authority key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
Certificate issuer:       /CN=e33779b8388d001fdcbddc48ace227f009850660
Certificate serial:       01A0E10646D527250C6722161B5D9FD90BB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
Manifest number:          1A6F
Signing time:             Sun 27 Sep 2026 04:01:20 +0000
Manifest this update:     Sun 27 Sep 2026 04:01:20 +0000
Manifest next update:     Mon 28 Sep 2026 04:01:20 +0000
Files and hashes:         1: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl (hash: opIcicKRg8XNyCWRYMNftFTqZd66yOlVI4XTfyFLQ5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:06:46:d5:27:25:0c:67:22:16:1b:5d:9f:d9:0b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33779b8388d001fdcbddc48ace227f009850660
        Validity
            Not Before: Sep 27 04:01:20 2026 GMT
            Not After : Sep 28 04:01:20 2026 GMT
        Subject: CN=ca84c6a3fd2acf1913f950bedea8cdc3c5c9833e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:0b:f0:e6:65:46:91:84:08:a0:37:86:52:
                    fc:90:20:8f:1f:12:a9:fe:7e:89:26:35:eb:9d:04:
                    4c:22:bc:90:fd:54:58:f7:53:db:4c:5c:f0:fc:f5:
                    d4:cf:75:e0:2d:1b:77:0f:b2:56:c3:5b:75:f5:d7:
                    29:e2:e6:b7:02:3c:15:bb:24:04:06:f4:69:de:8e:
                    02:7b:5b:3a:a1:63:0a:c0:d9:da:d3:88:fe:1d:1a:
                    25:e6:6c:23:9a:63:7d:5a:e5:d6:a2:b0:96:d2:1a:
                    c5:f7:bd:e5:e3:5a:82:f7:47:9c:bd:e6:33:ed:0f:
                    80:6f:b6:b5:82:54:e8:53:42:6a:8e:f9:47:4b:ed:
                    2b:d2:7c:20:79:5e:51:cc:7c:96:de:57:5f:9f:8e:
                    1d:32:b0:1e:93:de:3c:8f:bb:c5:fd:90:ad:a9:b8:
                    84:79:50:9f:a3:08:1a:10:fa:aa:d5:59:cd:6e:d2:
                    70:29:b8:df:a2:87:be:07:c2:1b:ad:24:1e:0b:45:
                    78:5c:92:f4:62:a2:d1:92:40:95:6c:34:3f:73:29:
                    3a:9d:81:32:db:0c:69:17:f1:bb:ef:9d:5b:a0:6c:
                    18:1d:1e:1f:92:6f:a4:15:35:df:2e:e4:62:96:60:
                    56:22:33:4d:8c:96:2f:be:9c:81:5e:fb:91:31:35:
                    87:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:84:C6:A3:FD:2A:CF:19:13:F9:50:BE:DE:A8:CD:C3:C5:C9:83:3E
            X509v3 Authority Key Identifier:
                keyid:E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b9:ba:9d:8e:5a:c0:83:3e:ee:3c:f7:1b:b0:7f:14:e6:4b:
         95:61:b0:02:6f:db:5a:64:a2:11:44:9f:aa:b2:ce:9e:35:44:
         7d:fe:35:86:b7:21:74:1b:a1:9e:e2:a9:12:85:d0:8d:2e:10:
         58:45:9f:57:e6:54:cb:6b:39:12:d8:f2:9a:02:d9:f2:02:02:
         c0:5b:e6:2b:07:88:11:94:bc:31:55:a5:c1:0f:f2:cf:c3:d2:
         8f:5e:f8:1b:72:b9:2c:8b:29:e0:2e:a0:8c:7c:ba:f4:cc:f1:
         5c:cb:e6:d3:f2:df:ff:e1:f1:3a:36:47:77:e2:38:db:5e:fa:
         83:d6:fb:37:1e:b9:c9:cd:3b:ed:af:1e:86:78:9c:fb:36:40:
         71:cf:e3:d0:6a:79:a3:cb:5f:fe:e0:ad:d5:57:b1:67:ab:57:
         c2:bf:85:23:bd:25:22:00:37:72:55:00:9b:81:8d:36:37:76:
         85:1a:6f:3f:b0:a3:12:a6:d2:56:d7:3d:2c:b9:69:9a:40:f1:
         45:bc:11:11:9f:ae:af:13:27:61:b1:b0:37:04:9b:6f:80:48:
         30:cb:21:7b:af:97:0e:1a:07:13:d2:c8:b5:71:22:75:2a:b5:
         64:ef:21:12:96:16:c7:17:b2:19:5c:c8:6d:c6:e7:a4:73:83:
         30:47:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:19:38 2026 by rpki-client