Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          H2W0dPylAwhNOqICQwtbhx3EQ6X9b2DrUmQkCiGgeR4=
Subject key identifier:   11:49:2A:D2:A2:93:6E:3C:DC:44:5F:86:F4:6F:CE:DA:9F:5B:10:1A
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       019F8F7E0A3B878B7E47D97EF71E2FD820B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          1A32
Signing time:             Thu 23 Jul 2026 15:00:29 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:29 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:29 +0000
Files and hashes:         1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: kTxlRZMGMH0pR0e7LkXWzVOGG/zciYAZy6/CpeywkzM=)
                          2: 6GUIWwZxGI0_11LUAF2nyD6ApTM.asa (hash: o9hRLFlhcdetNherJ5nziP+ejI2p5Hk/AOSB3fzCgR8=)
                          3: CyXEon0EjqXOHr8IeWjEVFpMffs.roa (hash: 61FTseLqfGHD+d4UC74A9kaSSpCsOAMcXitG3hvPp+Y=)
                          4: JMUe3al0pklathcu47XaPUqkjyY.roa (hash: WrIFwPH2vXkQmPfNJ4EO/lLH8xEpJfsA80i818mNAGc=)
                          5: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=)
                          6: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=)
                          7: ccBq--nhlrlj-SQFFud3LvSjHcs.roa (hash: xXhVmuwZaVq/u5W4va4FychwRtt+dYkphzF8S3KVfQI=)
                          8: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=)
                          9: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=)
                          10: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:0a:3b:87:8b:7e:47:d9:7e:f7:1e:2f:d8:20:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Jul 23 15:00:29 2026 GMT
            Not After : Jul 24 15:00:29 2026 GMT
        Subject: CN=11492ad2a2936e3cdc445f86f46fceda9f5b101a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f7:55:8b:1e:18:47:51:95:ec:41:46:a7:3e:
                    73:7b:49:49:67:90:d8:9f:94:64:2f:25:f7:39:9e:
                    d9:e4:ab:09:15:3e:1d:6a:51:5b:2c:95:19:66:bc:
                    18:53:b0:5d:8e:0f:b5:c8:ad:f7:e6:02:69:03:35:
                    be:c5:c9:72:f9:e0:16:e8:8d:75:2a:00:05:9b:c2:
                    02:20:42:60:3d:02:95:1c:ba:10:9e:97:a9:92:8f:
                    d6:9f:51:8d:1a:4a:31:d5:bc:00:54:6f:34:69:32:
                    19:09:96:da:97:b3:ea:cf:03:92:79:b0:8f:1d:05:
                    b8:13:7d:c5:28:98:c1:ce:da:f1:80:a7:8d:2a:45:
                    29:24:de:d5:31:35:4e:b3:df:14:b3:fa:d3:31:e3:
                    9b:16:06:a6:c8:21:ea:25:5c:d0:bd:59:7f:3f:3b:
                    6e:fb:47:45:7b:24:b9:92:30:e3:9b:9a:62:86:c8:
                    1d:2f:b3:c2:a7:8c:52:4a:05:ad:48:36:2f:bb:b2:
                    16:5b:72:8f:63:ee:3d:83:f1:95:bc:0e:8c:5a:8f:
                    96:db:ea:61:6c:58:02:50:95:d0:42:93:a7:f6:66:
                    c3:b4:8b:cf:53:ef:84:12:41:d2:78:06:52:c6:c7:
                    62:57:0a:61:2e:90:2c:58:ec:4d:5c:fe:6c:f4:34:
                    9f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:49:2A:D2:A2:93:6E:3C:DC:44:5F:86:F4:6F:CE:DA:9F:5B:10:1A
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:08:d4:ce:ec:f0:86:f3:6d:62:ce:64:db:b3:1b:42:2c:a9:
         b3:fc:94:f6:53:e5:f6:9b:45:d5:c1:ca:f1:50:12:03:8a:29:
         a2:a8:40:d7:17:ec:95:a1:c6:e1:e3:36:c7:6d:dc:fc:c0:e2:
         c5:cd:a6:33:06:30:de:a1:59:16:67:15:db:ee:07:d5:3d:c1:
         f5:5d:2a:83:60:7c:b8:30:69:4f:35:b6:1f:cc:e7:c9:c4:d3:
         d9:43:38:db:37:8d:c3:a6:b1:6b:4d:40:82:41:03:ed:dd:a2:
         f5:99:80:cb:cb:d4:26:b1:d6:5d:7f:c4:86:2b:62:2d:7f:29:
         06:a6:02:36:8c:7a:09:01:bf:7a:3a:0a:70:e5:ac:a9:e5:37:
         d1:b9:af:66:60:76:d3:77:9f:9e:a8:09:7b:07:c5:c3:7a:d1:
         58:eb:c0:20:4f:13:48:8f:ee:79:3a:99:02:80:ed:03:e8:4d:
         66:3e:b7:f5:01:ef:e0:d1:77:d3:1a:0c:3c:0c:4b:16:8d:86:
         03:da:69:54:be:58:2e:4d:4b:df:fb:8c:1a:ad:15:da:1d:4a:
         d9:e5:dd:af:62:6e:da:92:0a:d2:20:e2:cb:1f:e5:6c:d7:d0:
         0b:4f:66:d5:f7:2d:7a:b5:7e:0a:f0:7d:bf:c4:f1:39:10:6d:
         6d:af:a7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:37 2026 by rpki-client