Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File:                     D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier:          fXsfv6Gni0z57bGziuI/Rot2seNl6Ff0y7YzJLN3SwA=
Subject key identifier:   74:1D:4F:1B:9C:C4:0C:BC:A3:18:94:39:35:63:CC:63:D2:FE:0E:56
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer:       /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial:       019F916CAF085A2A06ED11C3BF6E8E9D22FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number:          04EF
Signing time:             Fri 24 Jul 2026 00:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:46 +0000
Files and hashes:         1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: hjwFNioynFlmBK78H4iD6QdY+FBMtvptPdw6ql1OlGQ=)
                          2: rQ8HP-1CHQ2WJh4AZ9S-FHE5GNI.roa (hash: 2H9ylgH0h8jNYwcMQW9wprZPjTTUA+nJy+8c2P6cl8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:af:08:5a:2a:06:ed:11:c3:bf:6e:8e:9d:22:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
        Validity
            Not Before: Jul 24 00:00:46 2026 GMT
            Not After : Jul 25 00:00:46 2026 GMT
        Subject: CN=741d4f1b9cc40cbca31894393563cc63d2fe0e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:5b:5d:af:57:63:72:d6:78:c1:c3:4d:aa:
                    89:a0:00:7e:84:78:bc:63:e8:8b:68:93:2c:14:df:
                    19:c9:21:2c:eb:c6:f9:c3:4f:fa:37:30:0a:d4:48:
                    7a:46:c2:56:f2:cc:48:1d:7c:85:5a:69:3a:f4:a8:
                    1d:cd:67:34:ec:e3:da:66:60:2e:d1:96:14:20:dc:
                    4b:a2:90:97:19:09:77:7d:98:0b:4e:17:f9:ba:1a:
                    18:cd:7a:1a:f9:26:3d:a7:92:1d:e2:2f:cc:41:ae:
                    fe:66:3f:43:0d:49:89:bb:59:ba:e8:38:3c:4e:25:
                    19:6b:fa:74:e2:28:36:58:ed:9c:13:6e:ae:63:95:
                    2a:55:a2:b7:61:e4:f4:70:0f:1f:2b:a6:57:91:cf:
                    46:04:f2:85:6c:c4:eb:ec:1c:ab:43:1e:fb:56:bc:
                    fa:05:97:c6:3e:bb:31:bb:41:28:b3:bb:bc:ec:2d:
                    16:bc:85:a2:6a:fc:a5:84:ae:cb:1a:97:71:a8:3e:
                    77:1f:da:0a:6b:9c:d6:47:46:20:c8:18:a5:67:5d:
                    b2:5b:e0:78:f0:b6:2a:5d:4b:36:14:85:9b:7e:1b:
                    9a:5d:06:22:d9:64:84:15:97:4a:8c:5a:50:f4:1f:
                    43:09:4f:c4:81:51:68:a7:7e:e3:7d:35:16:89:dd:
                    13:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1D:4F:1B:9C:C4:0C:BC:A3:18:94:39:35:63:CC:63:D2:FE:0E:56
            X509v3 Authority Key Identifier:
                keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:79:2a:f1:e8:b4:12:76:ab:28:8d:d5:fc:79:b3:f1:5b:07:
         14:bb:04:e7:53:26:e5:36:f3:a9:06:54:df:81:8d:63:94:67:
         e7:77:d1:c6:0a:85:03:52:bf:bb:08:6d:45:20:87:af:e4:93:
         cd:0b:04:f9:c3:9b:79:1e:9e:8e:08:76:18:ff:ed:61:3d:3a:
         67:2e:08:46:a1:cc:c3:cd:32:ab:bb:33:e7:06:d8:e0:5e:e5:
         f1:7b:3d:8f:8f:f0:70:71:d7:a4:e0:4b:fc:a2:88:1b:f9:44:
         9b:a5:17:80:b7:fc:8e:93:d1:48:68:4d:94:d0:56:4b:65:a4:
         13:61:8b:25:c2:c5:fb:19:c5:ec:27:8d:f5:21:52:e2:ce:c1:
         35:12:d8:05:05:d2:32:7f:dd:eb:12:28:11:f6:ee:c3:c6:ed:
         b6:6c:0c:0c:cc:97:ce:d3:97:73:65:1c:08:be:f4:99:32:85:
         e2:83:c9:75:cc:f4:98:3a:c7:fd:2e:70:3b:3d:83:0a:95:39:
         a3:d6:bf:6f:17:68:09:26:18:ae:3c:d8:d8:b3:36:f8:a5:77:
         d9:ec:19:a1:b2:96:ac:d0:1e:01:ff:c6:d4:9a:ae:fb:c9:37:
         0b:31:89:8e:6c:a0:70:24:ce:83:a0:1f:5e:1b:41:f1:95:a8:
         6e:64:c2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:29 2026 by rpki-client