Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
File:                     4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft (raw, json)
Hash identifier:          J0dqVhII2uranL2liw9ru1+mhgRg3pRdBTBdJqZmg+g=
Subject key identifier:   D7:B9:05:0C:1D:22:0C:65:91:79:5D:BC:43:E3:40:3E:64:1B:B0:CA
Authority key identifier: E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
Certificate issuer:       /CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Certificate serial:       01A0D048AEC66C44297DDDBC7EB65C6DC012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
Manifest number:          050A
Signing time:             Wed 23 Sep 2026 22:00:19 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:19 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:19 +0000
Files and hashes:         1: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl (hash: cLnMQMeTCGNDcBHSjvNlM6uCmlo7uFS6udp7L3yKkXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 22:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:48:ae:c6:6c:44:29:7d:dd:bc:7e:b6:5c:6d:c0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
        Validity
            Not Before: Sep 23 22:00:19 2026 GMT
            Not After : Sep 24 22:00:19 2026 GMT
        Subject: CN=d7b9050c1d220c6591795dbc43e3403e641bb0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:63:ff:a4:08:b7:d3:2e:2f:06:91:f9:23:
                    51:4e:5c:62:55:e3:4e:3b:2c:44:1a:03:1c:28:f9:
                    3b:e0:3e:80:6e:98:9b:24:34:45:e7:64:a4:d3:7e:
                    f6:f3:3c:53:fc:30:e2:51:3e:9c:82:25:0b:54:22:
                    b2:a2:ef:eb:3a:b8:bf:c7:b4:7f:2d:73:5d:1a:3f:
                    54:87:81:a3:c1:cc:69:d9:9e:13:0d:5f:f2:c8:55:
                    1b:42:3d:a3:b9:5d:22:4d:90:8b:26:e9:bc:86:9e:
                    8f:52:a7:e7:b5:06:18:04:38:12:fb:36:b8:d3:08:
                    d6:f5:5c:d1:04:89:13:72:e5:c5:a2:82:52:d9:09:
                    90:71:8e:c8:2e:f5:75:fa:27:a2:f8:a1:c4:ff:9d:
                    9c:ca:88:fd:1f:0f:38:0c:8b:8f:a4:bd:58:dc:dd:
                    50:bb:6d:92:8f:22:c8:ea:5b:16:fb:e7:48:e1:95:
                    d8:49:89:45:6a:3d:12:93:bc:ee:f0:79:69:13:d3:
                    df:39:e2:ce:fc:4b:fa:ef:c4:01:92:36:ee:90:d3:
                    55:cf:0c:e6:47:f4:68:f2:3b:da:f3:09:fe:ba:40:
                    ce:d4:44:d7:38:58:ee:1b:87:f0:55:bf:88:55:79:
                    27:62:a0:49:7e:9d:2b:75:75:90:89:a8:5d:77:2a:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B9:05:0C:1D:22:0C:65:91:79:5D:BC:43:E3:40:3E:64:1B:B0:CA
            X509v3 Authority Key Identifier:
                keyid:E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3a:d4:1d:b4:a6:fa:be:a5:e1:9c:8e:bf:c0:03:8f:d9:28:
         b6:35:fb:76:08:9c:fb:49:0f:17:36:8c:1d:23:c4:87:85:49:
         1d:a9:b0:e9:62:96:94:55:da:1a:96:ad:06:a5:dc:3e:25:3f:
         5b:51:e7:06:14:51:90:43:6a:85:48:3a:63:9a:4e:13:66:1d:
         4c:1a:24:10:cf:0e:75:4c:d2:d1:e4:e5:64:89:53:76:78:04:
         ce:cb:01:31:f4:f8:40:49:41:53:54:0a:c8:a3:59:2d:af:19:
         98:cd:01:94:e6:36:93:1f:3f:17:c0:d5:16:1f:25:da:77:c6:
         54:b9:cf:09:4d:94:d1:f9:9a:18:6b:33:70:3d:06:1b:b0:3a:
         4a:94:3a:b7:e0:40:81:41:3d:af:da:a8:1f:cd:ed:c3:d1:c0:
         ed:19:35:1c:f9:f5:5a:80:39:2c:37:a5:15:d6:22:ed:ab:3d:
         53:4d:72:dd:30:fc:a4:5a:c2:a7:89:9a:2f:b9:9c:0e:8e:83:
         0a:3f:26:be:9c:33:9e:2f:96:b5:aa:73:d0:f9:52:dd:66:87:
         27:fc:ad:89:08:ee:c3:99:3d:75:5d:f1:eb:4b:f4:47:2f:d8:
         5f:2a:49:06:a9:2c:b0:c9:99:58:14:cf:b6:23:25:91:22:88:
         e5:d9:ce:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:18:34 2026 by rpki-client