Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File:                     4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier:          CAQyaPjb2SuyT1EHBb4CKZ3JGhcGiNglKyaKdm4nJvY=
Subject key identifier:   8B:C5:B8:A8:68:BB:F8:3D:7A:A3:9C:25:89:1C:40:47:DB:DE:F9:5A
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer:       /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial:       019E1D59E1327271AA72D9564A3C149E4615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 18:01:30 +0000
Manifest this update:     Tue 12 May 2026 18:01:30 +0000
Manifest next update:     Wed 13 May 2026 18:01:30 +0000
Files and hashes:         1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: rbe2D5uv4zKWgggPqyPa+XE/MQC/Du0fiHUiu5a6UQU=)
                          2: FvV4UNNN1I3u5_f_mw8uvFShvcA.roa (hash: qoCza9pR6RXvspT8eRTV0uWK0mL3e+fmf3gOpC7a0Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:e1:32:72:71:aa:72:d9:56:4a:3c:14:9e:46:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
        Validity
            Not Before: May 12 18:01:30 2026 GMT
            Not After : May 13 18:01:30 2026 GMT
        Subject: CN=8bc5b8a868bbf83d7aa39c25891c4047dbdef95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:da:42:89:34:d8:39:c1:7e:b7:bd:6d:ad:
                    c6:a4:50:8b:c8:c4:b8:c0:42:9a:99:c1:53:33:e6:
                    cd:5a:7d:64:29:f4:e1:ff:c8:13:6b:c3:db:94:3e:
                    52:f7:84:52:28:ba:44:04:f7:8e:0c:02:c3:20:c0:
                    34:05:4c:d7:f7:0c:39:ba:8e:48:c2:ed:dc:8f:6b:
                    62:19:24:1a:e1:9e:d4:07:8c:f1:7d:02:fd:a1:40:
                    88:73:82:17:44:91:60:ae:5e:00:ef:d2:83:a3:f9:
                    85:d4:14:e2:23:06:2c:cf:85:a3:e0:98:a9:2c:38:
                    00:fc:b5:36:ff:9b:d0:98:f6:f4:c1:2c:a4:c2:f2:
                    00:a3:c5:4f:9a:12:8e:41:f9:d7:2f:3d:7d:13:23:
                    5b:7b:a5:4a:83:bc:44:c4:e2:7c:7f:37:e5:c6:c4:
                    54:87:2e:79:86:25:d1:14:11:49:5e:5e:8c:2b:be:
                    17:ff:5a:83:c2:9a:e9:18:b5:f6:cd:c9:a3:24:bb:
                    12:7a:6d:93:e8:92:cb:92:6c:17:54:d0:4a:ec:d8:
                    2e:e0:78:d7:3c:e9:71:1f:9c:c4:0d:bb:f2:22:04:
                    07:88:2f:9c:d9:58:c3:c7:3c:f6:04:13:be:cf:05:
                    2c:c2:ca:4e:3a:e7:8e:d2:3c:4b:53:ad:1b:3d:aa:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C5:B8:A8:68:BB:F8:3D:7A:A3:9C:25:89:1C:40:47:DB:DE:F9:5A
            X509v3 Authority Key Identifier:
                keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9d:41:d6:0f:d2:3c:61:3d:7b:16:45:54:02:09:80:9d:3c:
         0c:fb:77:31:ad:25:8e:09:bf:e5:97:21:c0:20:0f:28:54:1d:
         03:4c:22:f8:97:7a:e0:d4:71:d3:07:2b:64:cd:26:b2:07:f7:
         14:33:01:e8:1c:68:96:c2:af:af:cc:94:46:dd:3c:52:02:57:
         a3:4b:66:87:e1:e4:d0:2e:07:99:97:bf:90:c3:5f:51:af:d3:
         33:92:c9:64:23:59:f0:75:a3:7a:57:a0:a7:ab:40:b7:9b:de:
         23:63:82:57:0e:95:57:bb:5a:61:96:b9:8b:db:16:ce:3a:e4:
         04:ae:2c:21:8f:5f:f9:38:11:f9:53:1d:f5:c7:28:26:a4:56:
         55:1b:e8:1b:b2:fa:26:9a:32:d6:47:6a:29:ec:f0:c6:cf:25:
         81:e1:2b:e0:35:97:6f:2c:a2:ab:d2:f7:d1:d2:68:40:06:50:
         a9:93:7e:5e:c1:07:4a:f2:fc:bd:6d:1e:61:96:f8:73:d3:81:
         a3:10:f2:ce:cd:4c:d1:16:cd:63:a2:02:8e:3a:59:2f:95:5d:
         73:e4:34:7a:8a:21:1b:1e:13:fa:f3:4e:4d:08:a8:e0:83:43:
         83:d6:33:ab:0d:d0:c3:5f:c8:30:3c:a0:3f:d6:af:f0:55:30:
         2c:a6:1e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:57 2026 by rpki-client