Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File:                     4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier:          mtCaB2EhX7Q90A8E13f0fGOsKzyo4SJ0iPfpZZ52jR4=
Subject key identifier:   71:83:A4:D1:7A:27:F1:18:ED:D3:99:17:60:EC:A2:CA:C5:36:57:96
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer:       /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial:       019F90C77D898AD492A054F70D66EC16DA5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number:          0881
Signing time:             Thu 23 Jul 2026 21:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:20 +0000
Files and hashes:         1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: mXW5/RiuiI9py4Jw5qUuN7AkDbToRMDI7lgXYpZaNuw=)
                          2: 6-2FD8HR51guZuZo3woN4IVR9zc.roa (hash: PJc3A8dXSGr4yP32dRfCtlI52+k/p1Mtsy/ZQcI6iOs=)
                          3: X7BmyTsEbGnFLW3J_leT1himypU.roa (hash: YLQzVzV/7MjHj/da8FwrBCVQuruzlxfvIrqTRIBeu1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:7d:89:8a:d4:92:a0:54:f7:0d:66:ec:16:da:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
        Validity
            Not Before: Jul 23 21:00:20 2026 GMT
            Not After : Jul 24 21:00:20 2026 GMT
        Subject: CN=7183a4d17a27f118edd3991760eca2cac5365796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4a:58:29:51:cc:01:9a:be:16:ae:5f:c9:0c:
                    ba:d4:ed:a9:42:fe:a1:19:43:45:2e:49:2e:21:03:
                    13:db:bc:08:44:05:56:1a:a7:13:70:da:46:c3:f7:
                    d1:2e:7e:e6:c1:e9:6b:fc:79:83:7a:77:e0:01:06:
                    32:e5:60:b7:d9:d3:d6:71:9a:85:d7:e0:12:7f:40:
                    a6:93:d8:cd:97:ee:1c:cf:22:ce:ed:93:84:c4:81:
                    b8:28:c2:8c:b7:a2:7a:ea:8d:a9:a6:18:da:de:b4:
                    a9:ba:34:24:ff:db:16:06:6a:f8:e5:fc:b6:79:58:
                    ec:93:2c:2c:7f:7a:f7:3b:66:81:96:f2:17:01:84:
                    2b:8a:ad:1f:ed:c7:ca:85:66:34:8b:2e:f4:c6:b5:
                    a5:a1:2d:93:d2:fc:0d:87:37:d9:51:49:a6:8d:84:
                    f3:55:a2:68:2c:aa:43:b9:27:e4:33:6f:9a:6a:51:
                    eb:6b:46:08:60:21:bd:f5:a9:75:16:96:b1:ef:66:
                    a0:b5:cd:22:a3:9a:d5:5e:6d:28:a9:f0:28:84:d8:
                    b2:ef:df:88:25:eb:73:a0:7d:f0:c8:4d:99:eb:9d:
                    9e:12:2d:59:e6:de:4c:f8:41:8f:31:76:eb:3e:63:
                    77:dd:75:78:48:03:62:ba:2a:e9:f6:59:b6:6d:2f:
                    87:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:83:A4:D1:7A:27:F1:18:ED:D3:99:17:60:EC:A2:CA:C5:36:57:96
            X509v3 Authority Key Identifier:
                keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4a:28:e8:ec:4b:22:f7:27:4d:bf:df:44:a8:66:c8:10:dd:
         34:2b:14:71:d8:ba:5e:3b:47:48:80:6c:e5:2a:d4:1f:5c:5e:
         c7:2c:56:31:08:83:19:0e:61:e0:3d:7d:c7:6a:ba:85:4c:e2:
         94:22:50:40:03:ee:d7:09:4f:00:14:01:50:42:26:fc:0c:0d:
         3f:6c:33:30:c5:a9:a4:f4:cb:a6:7b:81:cd:4a:18:33:84:ed:
         c6:54:61:1a:40:75:3b:e9:87:81:a9:9a:e9:4a:42:cd:4f:86:
         99:c4:72:88:d2:2c:8b:84:96:e4:9b:c3:63:be:48:74:6a:27:
         73:1d:df:b8:6a:64:ad:c1:35:27:88:c4:bd:8d:47:2a:32:74:
         c4:0a:e2:b3:18:10:5d:a9:7c:b0:d8:d2:86:2f:b8:5a:b5:40:
         4b:b2:82:4a:a0:e2:41:e9:87:f5:66:72:72:c1:93:c1:d5:91:
         0f:ac:85:bb:19:a6:c6:bc:64:5c:a7:3b:7e:6b:29:2f:18:e4:
         6c:69:26:4e:37:3a:28:86:19:b5:62:b1:55:70:4a:ac:a6:ba:
         9d:ff:7a:bb:81:22:6a:ff:24:e8:85:59:d6:66:ba:42:ca:a9:
         10:98:02:d7:ab:3a:61:4a:67:2a:97:48:ce:25:80:f3:c4:6d:
         ef:20:de:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:22 2026 by rpki-client