Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
File:                     4Yup6gmzdhhN50OUcr0G2LHRfQs.mft (raw, json)
Hash identifier:          u5H3gT4PxyYxKA0vQRMURFlmoLZ0RstCz3DTCs4pJAw=
Subject key identifier:   4F:FA:3D:DF:35:20:1F:A0:DB:1F:47:56:5E:17:5D:AF:6A:5D:F9:A9
Authority key identifier: E1:8B:A9:EA:09:B3:76:18:4D:E7:43:94:72:BD:06:D8:B1:D1:7D:0B
Certificate issuer:       /CN=e18ba9ea09b376184de7439472bd06d8b1d17d0b
Certificate serial:       019F905A8521981E9CFCF9D26FDE1DEFBDB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Yup6gmzdhhN50OUcr0G2LHRfQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
Manifest number:          0153
Signing time:             Thu 23 Jul 2026 19:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:19 +0000
Files and hashes:         1: 4Yup6gmzdhhN50OUcr0G2LHRfQs.crl (hash: QDtrcvT4Ndc3xFyeSnS4iTlLGQS8Cos4Dma+6BygPmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Yup6gmzdhhN50OUcr0G2LHRfQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:85:21:98:1e:9c:fc:f9:d2:6f:de:1d:ef:bd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18ba9ea09b376184de7439472bd06d8b1d17d0b
        Validity
            Not Before: Jul 23 19:01:19 2026 GMT
            Not After : Jul 24 19:01:19 2026 GMT
        Subject: CN=4ffa3ddf35201fa0db1f47565e175daf6a5df9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:77:5e:1d:32:f2:d5:64:81:0c:39:07:b6:78:
                    fa:53:69:a2:f0:90:d2:f9:d0:fe:30:9f:04:93:67:
                    ef:9d:89:24:d2:cc:76:ec:06:88:27:fa:5f:a9:1a:
                    a4:3f:b6:fb:45:cb:72:33:a0:81:1a:ac:66:e5:f2:
                    06:de:49:0e:6f:18:ef:0d:99:94:ea:21:84:0f:4b:
                    fc:83:86:58:a4:d6:98:df:d9:4c:cd:7c:c0:1d:d1:
                    2f:fc:fc:da:79:c0:cc:31:ad:3a:b7:1b:3f:93:85:
                    d8:11:c3:b9:cf:34:ab:be:56:ac:b5:13:68:64:f4:
                    fc:94:96:26:b2:51:16:77:fe:74:33:91:43:5f:60:
                    0a:47:c9:49:f5:b5:aa:20:97:99:22:eb:f5:e1:83:
                    e8:6d:ce:4c:77:a1:70:e2:27:fd:e9:06:c1:ad:43:
                    ae:08:5f:90:b2:4c:99:e6:fd:75:77:70:be:ec:bf:
                    a2:8e:9a:f5:25:cb:3a:e9:f7:94:10:d8:6a:5f:72:
                    05:43:18:1f:5f:db:49:9b:cd:ca:db:7a:70:ae:a1:
                    a6:c0:9d:d7:c1:da:58:fa:df:cc:d9:73:68:3e:3f:
                    47:e8:e2:a1:03:08:72:6a:1a:48:74:a8:89:7f:f5:
                    d7:9e:62:c5:52:38:f5:4a:6d:a2:ac:8c:c1:61:38:
                    2f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FA:3D:DF:35:20:1F:A0:DB:1F:47:56:5E:17:5D:AF:6A:5D:F9:A9
            X509v3 Authority Key Identifier:
                keyid:E1:8B:A9:EA:09:B3:76:18:4D:E7:43:94:72:BD:06:D8:B1:D1:7D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yup6gmzdhhN50OUcr0G2LHRfQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1f:b2:cc:1f:0d:68:69:6c:8b:5f:ab:cf:2f:1f:4e:ab:ac:
         cc:b4:00:2c:d5:55:81:4f:3a:b3:7b:86:01:b3:ba:55:08:bd:
         7f:68:6d:80:6b:0c:b7:9a:b2:d8:2f:44:a0:b0:b3:ee:d2:7f:
         8c:a5:b3:ab:4e:42:21:b0:52:85:34:90:25:06:e2:5a:64:2b:
         3d:7d:a6:0c:58:84:03:cb:3d:1b:52:3c:47:7e:de:7f:26:3c:
         20:86:35:6f:e8:08:a3:53:d2:6a:f2:0e:d6:e5:6a:e5:14:e2:
         32:16:3e:6d:92:58:11:b8:91:4d:6d:b5:ee:49:d5:05:6a:89:
         a2:35:f1:1e:e9:34:87:08:79:10:f5:51:a9:70:4f:d2:3f:6a:
         28:3b:aa:62:ac:00:7c:23:92:16:17:8e:3b:a6:02:11:b5:d1:
         e8:58:ac:5b:90:b4:32:33:47:dd:a9:63:3b:44:47:6c:95:f1:
         4b:89:16:57:14:db:e3:02:b7:85:9f:89:fc:46:4f:be:ef:3e:
         58:bd:1c:62:97:d3:cc:e6:1c:92:8e:96:98:0c:76:1c:51:d2:
         e3:2a:9e:20:78:76:19:2c:3c:0b:78:7b:38:65:b1:0f:96:17:
         ba:ca:82:ad:ec:47:81:fd:61:47:02:76:c7:44:c3:0e:e3:29:
         93:38:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:17 2026 by rpki-client