Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
File:                     4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json)
Hash identifier:          IW+Vkp5425F8bbiMWxfDx5CPI8drx9Uh5B2Hm+DPddc=
Subject key identifier:   2A:F9:38:86:60:88:62:E6:97:69:0C:CF:EC:3F:53:3E:D7:CD:B1:E1
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Certificate issuer:       /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial:       01A1DE7057244DB846E9F1657BA158CB11F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
Manifest number:          06D2
Signing time:             Sun 15 Nov 2026 09:01:06 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:06 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:06 +0000
Files and hashes:         1: 0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa (hash: XeB6K6T8p6c7RwUL3urLh05fa1KeuyMXlU3sgTg6kwI=)
                          2: 1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa (hash: h7CqqSl2LQjJmhCLF1MeDbbfhgUi7N6nFb/MApYSj04=)
                          3: 3gai81UGgfLPbQftciy3jGMkOwI.roa (hash: kiaWDVp8FEgRP18QSL61NeSbPNIL/KFNeSuP3Gkl88Q=)
                          4: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: 956KTzEaJpcgtWt/kebKHgyEHsNpHpcw6z0AX4EHlzE=)
                          5: C6uUnb-GcnQfqIvL7gX32SouFUA.roa (hash: W8gXCQVnHQZj4Fig+/xRtixgdI9dMwYVfKpFVE38sls=)
                          6: Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa (hash: qthe4k3qdM7snNafkTyRsJRCRgLD006FLSrfqpvtf/M=)
                          7: P2DOHQZk6uadyNsFYKTvp0Yljns.roa (hash: drWm8UAEyYp0gk5pD0pZZGlNfBy4kmJrj0xpKvuccbI=)
                          8: dUz1_BGuEwa1si0sC79DuRXSTMw.roa (hash: EggvRKKO8J9fQom0RkmSKJQOGfA94V2BXYRDmutG/IA=)
                          9: jG8u0DdMeVDnzAs9ajzk41GxjYI.roa (hash: 2i9+DbG6rnpNrbDbrTa+vcvNqwfsERMCoNQAt/YdO9A=)
                          10: pMSYP5P8y8eLfNyDEeXV3zc-nps.roa (hash: enJ6YCYyQ+/wl2mffuOqzFyRpZKc2xjCWdqck8SgcXI=)
                          11: pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa (hash: 2qg2UMxY9Ne99nZ+znUrMGap65SST+L3iSUILMH/2YQ=)
                          12: uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa (hash: 5GA0c289K1eM0975vFreXvBAvts4XCEq2R0BlZHe6C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:57:24:4d:b8:46:e9:f1:65:7b:a1:58:cb:11:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
        Validity
            Not Before: Nov 15 09:01:06 2026 GMT
            Not After : Nov 16 09:01:06 2026 GMT
        Subject: CN=2af93886608862e697690ccfec3f533ed7cdb1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:ef:17:c8:d2:f3:49:3c:f7:76:5f:fb:a2:
                    9c:0d:c7:5f:86:2b:86:89:15:c6:28:de:33:bb:f5:
                    28:e4:6f:1c:c1:8b:f6:8b:4e:b9:a5:39:5c:7c:57:
                    f9:50:af:81:d0:7f:3f:96:9d:1a:4c:a5:4f:8d:2a:
                    48:a7:ad:69:61:3d:71:61:e4:36:7b:4a:f8:fb:fd:
                    94:d5:48:d4:77:aa:df:17:2f:c3:5a:09:a9:31:21:
                    c5:e6:2a:4d:59:df:02:78:b9:60:a1:2e:6c:ae:a2:
                    9f:af:ae:b6:39:3f:64:94:41:45:91:f9:77:94:c6:
                    ea:89:64:a5:3e:b3:c8:55:d4:2c:97:cb:6f:c8:b8:
                    84:38:a1:65:aa:3f:f3:e5:58:e6:89:62:ad:95:e7:
                    47:40:aa:47:c8:01:40:96:79:05:1f:eb:a7:ac:06:
                    b6:aa:cb:ab:ee:31:b3:d5:76:49:83:44:0b:55:4f:
                    b2:87:53:55:29:82:8f:dd:bb:b0:55:b4:81:de:9c:
                    60:eb:14:f2:a7:13:60:d4:04:70:f9:d0:8d:2d:b0:
                    21:dd:ce:41:24:74:1c:aa:09:1a:2c:0e:57:b3:a9:
                    08:78:ca:32:fc:e5:60:eb:31:79:79:98:f1:a5:df:
                    80:85:5c:9c:51:57:70:a9:83:98:d4:df:4a:10:b5:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:38:86:60:88:62:E6:97:69:0C:CF:EC:3F:53:3E:D7:CD:B1:E1
            X509v3 Authority Key Identifier:
                keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e9:3e:16:82:22:3b:a1:03:b3:0a:5e:af:3d:c6:4d:39:f7:
         e9:0f:1a:3e:2f:e1:e1:54:0e:00:02:49:74:03:9d:b5:01:70:
         ac:c5:5e:a0:73:93:36:23:aa:9c:db:4c:67:54:53:e0:c3:08:
         70:05:05:ba:8c:3f:1b:a6:fe:01:2c:62:da:03:7c:10:9c:18:
         ab:59:d0:ea:89:ae:32:a9:09:d4:ba:8e:cd:de:9a:89:64:11:
         80:06:ca:55:9b:6d:7d:e5:3a:cf:cc:ed:32:23:cb:c9:29:a2:
         ca:a8:30:42:11:13:69:6d:ca:78:6a:78:c5:62:ac:c7:e9:37:
         48:06:b7:57:5e:f7:8c:b8:5c:6f:e0:f6:7a:bc:30:df:74:ae:
         62:2d:14:b3:ea:26:ae:91:f4:ba:b6:b0:47:4a:d8:f9:79:04:
         80:a2:76:73:a0:07:ec:3a:5e:07:c3:43:3c:db:b1:fe:43:8c:
         60:5d:15:1e:61:65:d5:e6:c4:6c:1c:58:f7:56:b4:37:dd:68:
         f6:8c:70:13:f7:3a:80:ef:20:a9:d4:25:1b:6a:02:41:24:41:
         15:03:ea:15:71:9a:ca:c2:b6:05:f6:45:6f:a2:6d:b8:46:9a:
         f4:55:06:4e:62:3c:78:17:57:da:b5:d9:c6:cf:de:dd:aa:15:
         67:8f:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:32:56 2026 by rpki-client