Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File:                     4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier:          PGWvn4ySVndLKHRxU802cv+LWCy+XWzvNImTLJ8UvPM=
Subject key identifier:   48:E6:57:2E:15:5B:C1:C5:31:94:E3:0D:2E:FA:93:27:A9:3F:50:A5
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer:       /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial:       01A0CFDAD01D067B756AC4E60F8772710B74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number:          1B32
Signing time:             Wed 23 Sep 2026 20:00:18 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:18 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:18 +0000
Files and hashes:         1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: XYREsuT3PT5B748Cy44LWh1YxEUrbt0cGTTC1lmElog=)
                          2: 6DlgWAr1pze2xwhzVuH9SH83sUI.roa (hash: gbVO2/E/cSyLnCFbipnzOKJO3cIbi/OYiOvNNgSS+Wk=)
                          3: 9-Pohzrk-GfEO26UigGLQdLJ5LM.roa (hash: EPYycU2WAxzj+yLpGaTsCA1/RIi1UbCCCRWYLB4Q/h0=)
                          4: BKrXZmCPzjDJeoMATTIUCly8RMI.roa (hash: 0jP41FvG8z+VmpVhR+SHdcHSIxObtE+cEfVhbqGGTzs=)
                          5: CFccTSuCEIxalR4ALqPdkAzUO7M.roa (hash: kaoUX+bTmXS7CQqlA/MKZqDGlkdoafsR1N6tmoItSeo=)
                          6: DIoNrmpQjSgOtSSDaoVlE1M8a74.roa (hash: 8EDhoGEvZWxcOl5QR8SMI35B2oKzz+sS9FfHtqdv38c=)
                          7: Dvm1ivM5p4ePpgysDtLtoLHwJ5w.roa (hash: QPVOPL6nSnWbsKxxKr4oQ5BFOYUcMw/3uW2oYvYKLmo=)
                          8: IcS9gzH0eVbJZYVzF-ivAp7O2rU.roa (hash: 0hau0OArhlXEWJAb5CUvyK22h+wU1rPbDc4uf9VrqFg=)
                          9: Kj0CSZRO7Ttjx8zTQ7TY2lYWk6U.roa (hash: 5ijTFRrYY4N4pS9N+fgT1g/tsE4VuTayoctiYwfJwSw=)
                          10: M7Qnaao-wDlPyDUa21pW7viJ6uU.roa (hash: Pb3KKeU2RFaohJ/loiF0Yw7/oOqNkzJemldZbia5xys=)
                          11: NYIUKgptziTmjTuzB89rR5OoJ3w.roa (hash: vBhk29CF4pjp5Kwvmdk02ywPzzfme1nc1O7+7goRrqs=)
                          12: Q8CsEAtSTanzJY3I7fvSE-uMeuU.roa (hash: AbxzldFhMYObOkio0+jbvaPCEAk722DareoqH/SdcdU=)
                          13: T2NfzMdsMpViaAkLEjvuKknHJcA.roa (hash: o9QhHh2ECEBAp63dR2QCY67xVjrjcR7RnvJzXzoRqNQ=)
                          14: TZaomzmIodYFdWS4xPASiRih7SU.roa (hash: DGb2GTBIONw507iw5JiwGCh82nK9eqmR5vddiYtWS24=)
                          15: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=)
                          16: VSAqL3uYvPnHYbEbZZ_xRkDkbLs.roa (hash: PJJ/NludIQbq1BPXLL1xXP43tupoRdcznnHVwxJEOeU=)
                          17: Z4qJ0AuvFG9LwCUujh1SFAyCFEQ.roa (hash: L/2723303TsKIyZTz4LxjhNc7XDzNUykt0wbQqKmi1I=)
                          18: aVgebze3DGF-KEsMnZC5Ko2CIfY.roa (hash: NfZpKGjWtpW8R47mtlOQxNS8rkEPFNCDlcl++B9KFvk=)
                          19: g2mq5fXw0aZ88BSIIPCaVM6cI9s.roa (hash: HTPkfWurE/QkJy0L1mUBje2pSgdAEd5QgAQCEntV908=)
                          20: hvrECtRtxVPUHDXzjKdAlcyRjog.roa (hash: d5snX7+Hc4RUYD6A+fmRwRD4YilkH7XfRNO8PBtC+DY=)
                          21: iPahdVFjnIMLFab7e1hz9AD8mnQ.roa (hash: X5DNApyaL3xMnN7g/7ZqxS0aZOIXDBxHJJjMjs9/8GE=)
                          22: sfD_I9hBRYkOn_cay96ab4iJ7OI.roa (hash: ulc2pO09BnmdKiTvj11ZGcEPXuzLVftL+Jw2RoVDtsk=)
                          23: w5ldQ0CjL0tGIL7RdlldMWQrpOA.roa (hash: QwbB2Dm20UEpXkRwmnRCF3k99p0EBKuROeuhoBVi3/8=)
                          24: wnan_W7zCPprToqepPHW7EUykg0.roa (hash: eqswj0sa1030vJf6t6fs8wRbb8GrMkLO8GUWPgVpPBQ=)
                          25: x6TaUDjx_Xkt_2Lw0GlWR57EAlc.roa (hash: m5z3Yg3lZo67vrQykV72uJNnGiIVgvzyPCgBuqRvX2A=)
                          26: xKKgMBYggYrOzddWnjoXfABzYtI.roa (hash: CRfn67QEd4oVTEk3kHUBSolPZ3Du9hm6IXw4Z34egdI=)
                          27: zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa (hash: ddUTwFfUFZpRc1ExRHE36LurAQIjxRiZ+75kFQEiqQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:da:d0:1d:06:7b:75:6a:c4:e6:0f:87:72:71:0b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
        Validity
            Not Before: Sep 23 20:00:18 2026 GMT
            Not After : Sep 24 20:00:18 2026 GMT
        Subject: CN=48e6572e155bc1c53194e30d2efa9327a93f50a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:0f:e8:be:54:36:bb:8d:51:d1:ac:ee:a9:
                    1a:fc:5f:d0:6d:67:78:8f:ed:80:02:7d:3c:ef:a0:
                    27:03:aa:ef:65:0c:51:0e:1a:d6:20:bd:f3:2d:51:
                    5c:5d:3c:ab:dc:0b:ab:d2:df:02:36:dd:86:f7:76:
                    8a:c3:17:2d:b0:fe:d5:67:69:de:98:04:d7:0b:f0:
                    01:d0:4e:e6:ae:0f:54:4c:04:c5:09:e1:8b:d0:70:
                    ab:8f:ff:9c:ed:f4:8d:84:f4:05:84:7d:e0:d9:50:
                    82:59:99:af:11:41:38:fd:4a:63:c1:36:76:6c:47:
                    d0:c5:b2:03:b8:dd:1b:50:4e:0b:5d:ff:fb:cd:c8:
                    c2:bf:7f:c4:54:cb:04:9b:84:ac:8f:2b:00:51:b5:
                    fa:83:f7:fd:82:83:8d:02:2d:69:df:06:c7:ff:94:
                    c2:bb:db:81:d9:7b:84:96:4f:a2:b5:df:1d:b5:fc:
                    ac:2f:39:8e:40:dc:d3:02:df:12:a6:4a:8b:b0:c9:
                    4c:14:dc:3b:fe:3c:79:e9:b0:bf:bc:18:bc:75:22:
                    48:b3:3d:89:4a:20:d0:37:80:72:11:e0:d2:b8:35:
                    ad:35:3d:25:c6:93:ee:a9:25:52:8c:05:49:0c:48:
                    8d:31:e6:be:2d:ff:ea:4a:ec:d9:1e:48:c2:e6:6e:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E6:57:2E:15:5B:C1:C5:31:94:E3:0D:2E:FA:93:27:A9:3F:50:A5
            X509v3 Authority Key Identifier:
                keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:dc:94:b3:7c:b4:a2:8b:de:9e:a0:b8:33:71:66:03:20:30:
         17:b5:3c:8f:83:82:23:29:0e:d9:cc:ee:31:06:bc:07:27:ac:
         56:ba:d6:b3:73:6a:dd:66:f2:21:65:7c:13:b9:ea:89:af:b2:
         b6:49:46:f7:e4:54:76:32:e1:f5:42:aa:51:ee:3f:1a:df:43:
         29:45:2c:e8:0b:88:a8:f6:00:98:53:57:1f:02:55:69:54:c4:
         02:c7:e0:d0:40:4a:94:0d:c2:c7:e6:24:21:60:5b:6c:f1:da:
         c6:e1:2f:eb:6a:22:e2:95:4f:6e:6a:75:e1:c6:35:29:f3:8b:
         11:e3:67:12:99:e9:df:9f:aa:78:53:62:7e:59:91:4f:5d:81:
         a0:1e:fd:97:99:28:72:8e:7a:3b:67:d5:e7:f0:a6:20:12:c7:
         f4:56:14:ea:25:37:55:af:72:7d:83:11:a9:1f:47:43:c2:b6:
         dc:08:26:e7:83:f0:55:b1:fd:07:94:77:ef:da:f3:53:8b:20:
         25:af:04:06:3c:21:d1:90:c1:72:a1:8c:fd:2c:d9:6b:92:ea:
         72:49:a3:1f:28:fa:bc:0a:98:f4:e9:31:2e:4d:82:fd:36:23:
         2a:bb:01:e3:74:3f:b7:0d:f2:2a:17:dc:f3:e5:c1:52:80:d2:
         19:05:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:34:40 2026 by rpki-client