Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File:                     4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier:          T817NzwDP/0hl3zD6/IVrXJxMtbHNeX3rHhEsyakyhE=
Subject key identifier:   7C:2C:0F:88:76:0A:78:A4:2E:78:95:5D:25:AA:E6:54:22:64:B3:AF
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer:       /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial:       01A0DC1754FA3E7E2470508E264127AA9028
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number:          1108
Signing time:             Sat 26 Sep 2026 05:01:51 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:51 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:51 +0000
Files and hashes:         1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: cMbznYg5wkK3bKe38cb+4KWeEcGM5Fc50V13eCvIwSI=)
                          2: DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa (hash: ie8rWldwV9B67n5/EffGRxDtlu39UUHKQ/tSe/j67xQ=)
                          3: OD1vu1xvYZtuVSOWeWsoiRek5JE.roa (hash: wh893NwS229KIBxcphoahE5rVlzAGosMJTAhq3iAiRg=)
                          4: kpJpjf8DEZUzbeocou67-xPbGzs.roa (hash: 6kfdp9N3WAjBikoQRDTNTZ1g1ptesnrFillaOS+4UCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:54:fa:3e:7e:24:70:50:8e:26:41:27:aa:90:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
        Validity
            Not Before: Sep 26 05:01:51 2026 GMT
            Not After : Sep 27 05:01:51 2026 GMT
        Subject: CN=7c2c0f88760a78a42e78955d25aae6542264b3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:77:f2:4a:44:19:97:3e:3b:e7:ae:e7:44:
                    5c:c6:93:15:48:ae:c1:8e:c7:36:24:a5:a2:ea:0f:
                    70:75:c4:59:a5:5c:c5:15:61:13:e6:15:b4:86:2b:
                    6e:99:8d:46:6d:a3:36:ed:68:90:ed:a9:23:ff:50:
                    d9:47:ef:04:fb:80:5f:52:a4:1c:74:34:7a:1c:38:
                    b0:63:24:01:bb:b5:77:18:4f:87:5a:8e:a5:a9:d5:
                    b7:73:bd:21:ee:00:66:56:9a:ea:6f:f8:40:d4:d5:
                    f5:c3:4a:e1:a0:94:61:a9:eb:dd:28:c7:10:85:f2:
                    bf:45:88:1c:a6:76:e8:ef:db:a2:75:00:55:02:b9:
                    db:59:b7:c8:e0:56:98:bb:3c:33:97:60:2d:94:4e:
                    15:72:fa:3d:30:74:56:ef:5b:5c:11:80:4a:f1:10:
                    ee:98:31:f3:e0:ee:28:26:5c:3d:05:b6:29:f4:dc:
                    65:36:fb:a7:f6:a9:55:ac:ce:f3:4c:5e:4d:24:76:
                    18:ca:bf:08:73:ae:ff:3d:c9:4d:ac:fc:46:40:ce:
                    e3:2e:76:89:2d:05:76:04:b7:fe:ac:f1:2d:34:d6:
                    cd:cd:cd:25:1c:a6:81:5d:94:b7:2c:16:65:6f:6a:
                    7f:02:7c:ff:d8:d5:ae:72:e6:4f:41:be:bd:38:0a:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2C:0F:88:76:0A:78:A4:2E:78:95:5D:25:AA:E6:54:22:64:B3:AF
            X509v3 Authority Key Identifier:
                keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1a:34:0d:0a:1c:e7:88:02:5f:86:06:26:6d:5c:df:b4:b0:
         07:7e:a1:6a:ab:0f:e8:4e:71:b7:a1:4d:a3:21:aa:8f:dc:a1:
         77:2a:13:39:21:a7:f8:da:4f:e5:64:cd:6d:9e:b3:db:eb:0e:
         a1:d6:07:5b:24:92:92:81:e3:9e:12:52:3b:11:53:2c:8e:dd:
         f0:0c:9a:07:15:04:bd:68:7d:9c:ef:48:38:a5:3f:4b:4b:2c:
         3d:54:05:95:0c:4f:08:75:a3:4c:a9:01:84:09:4b:15:5c:6b:
         9a:7d:3e:21:1e:e9:cb:69:e3:c3:09:e9:8f:e7:5a:21:72:8d:
         90:6a:81:39:23:48:cf:39:36:d7:f3:4b:17:76:75:d6:8d:55:
         42:83:9b:57:60:6e:ca:74:80:79:24:a0:0b:f3:11:1f:bb:f1:
         e7:45:26:30:bf:51:48:1c:b9:9b:a3:e7:7d:69:51:9f:ad:21:
         df:e6:c4:a6:f2:9a:b8:9b:57:be:4f:9a:a9:f0:01:3d:10:06:
         47:c8:00:38:99:7a:53:31:43:77:08:e3:be:45:b2:2d:ee:ab:
         39:8e:e7:70:d6:e7:a6:db:f2:9e:08:a8:35:85:4a:a9:dd:42:
         41:b1:3d:ff:11:cc:db:f3:a0:d0:a1:22:29:db:61:03:9f:e4:
         2d:c6:08:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcF1T6Pn4kcFCOJkEnqpAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNjhlMzZiYTU3N2VkNDdlNjkyODcyOTY5MTk5MWU0ZTdm
MjM1ZGEwHhcNMjYwOTI2MDUwMTUxWhcNMjYwOTI3MDUwMTUxWjAzMTEwLwYDVQQD
Eyg3YzJjMGY4ODc2MGE3OGE0MmU3ODk1NWQyNWFhZTY1NDIyNjRiM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7J38kpEGZc+O+eu50RcxpMVSK7B
jsc2JKWi6g9wdcRZpVzFFWET5hW0hitumY1GbaM27WiQ7akj/1DZR+8E+4BfUqQc
dDR6HDiwYyQBu7V3GE+HWo6lqdW3c70h7gBmVprqb/hA1NX1w0rhoJRhqevdKMcQ
hfK/RYgcpnbo79uidQBVArnbWbfI4FaYuzwzl2AtlE4Vcvo9MHRW71tcEYBK8RDu
mDHz4O4oJlw9BbYp9NxlNvun9qlVrM7zTF5NJHYYyr8Ic67/PclNrPxGQM7jLnaJ
LQV2BLf+rPEtNNbNzc0lHKaBXZS3LBZlb2p/Anz/2NWucuZPQb69OAoSQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwsD4h2CnikLniVXSWq5lQiZLOvMB8GA1UdIwQY
MBaAFOFo42uld+1H5pKHKWkZkeTn8jXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85YTI5N2QtY2VlNS00YzkzLWIyNTgt
Y2I0YmFiZTlkYzhmLzEvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny85YTI5N2QtY2VlNS00YzkzLWIyNTgtY2I0YmFiZTlkYzhm
LzEvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBo0DQoc
54gCX4YGJm1c37SwB36haqsP6E5xt6FNoyGqj9yhdyoTOSGn+NpP5WTNbZ6z2+sO
odYHWySSkoHjnhJSOxFTLI7d8AyaBxUEvWh9nO9IOKU/S0ssPVQFlQxPCHWjTKkB
hAlLFVxrmn0+IR7py2njwwnpj+daIXKNkGqBOSNIzzk21/NLF3Z11o1VQoObV2Bu
ynSAeSSgC/MRH7vx50UmML9RSBy5m6PnfWlRn60h3+bEpvKauJtXvk+aqfABPRAG
R8gAOJl6UzFDdwjjvkWyLe6rOY7ncNbnptvyngioNYVKqd1CQbE9/xHM2/Og0KEi
KdthA5/kLcYImg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:09:47 2026 by rpki-client