Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File:                     4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier:          sPGPcx/tjEveFTgKCjOiDTOVaPl2eF1NjtGNK1ybCDY=
Subject key identifier:   12:3C:8D:3E:86:1C:A1:4E:11:A4:FC:8F:F7:46:ED:32:D3:1F:AE:82
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer:       /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial:       019F90C7A412B7EAF3A0709E22297EE2225E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number:          1958
Signing time:             Thu 23 Jul 2026 21:00:30 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:30 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:30 +0000
Files and hashes:         1: 2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa (hash: xcDU75sza534zn4A1SLY0N4eKvAgRsSzSIlzRIhia7Y=)
                          2: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: 9ISJBRqME9XNPIS9styRaZC7Ht2zCpsC2TJXjtL6x5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:a4:12:b7:ea:f3:a0:70:9e:22:29:7e:e2:22:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
        Validity
            Not Before: Jul 23 21:00:30 2026 GMT
            Not After : Jul 24 21:00:30 2026 GMT
        Subject: CN=123c8d3e861ca14e11a4fc8ff746ed32d31fae82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:d9:64:8a:2c:21:a5:e7:a4:e5:14:7c:11:
                    27:83:ea:6e:7c:cc:9a:e6:80:cb:10:0e:e6:7f:43:
                    ef:77:8a:0a:fd:6b:5f:91:08:16:b8:be:be:65:dc:
                    e3:4e:ee:40:39:16:c7:23:d5:ab:aa:f6:57:1f:b8:
                    eb:a5:58:5f:c8:65:13:1f:26:f9:95:2e:6c:d8:70:
                    aa:20:c9:ce:88:bb:1b:57:b6:16:7d:48:4a:ee:03:
                    83:ab:40:a0:fc:ac:9e:fa:b5:d5:5c:36:ff:79:b5:
                    e8:cd:0a:e7:66:af:60:42:2a:dc:49:76:08:80:31:
                    a1:5c:5c:8f:80:dd:16:9f:f9:57:01:2d:c3:08:78:
                    b4:33:c9:43:a7:e2:f8:e2:b4:8a:d8:a0:44:32:f1:
                    db:0a:73:91:be:97:e0:83:a3:98:03:da:c0:6e:dc:
                    15:b5:b7:43:52:6d:2c:a3:4e:f5:23:05:bf:a8:2d:
                    ec:e9:80:34:cd:69:ee:ed:bc:2b:1d:84:9f:24:80:
                    38:9f:04:dd:72:05:db:8a:05:f2:78:bc:04:9e:b3:
                    07:23:10:66:94:91:23:78:06:c7:83:af:95:b7:b8:
                    a0:3c:9c:1e:df:ff:af:78:b1:a1:9b:67:dc:45:d1:
                    4e:c5:c1:29:9a:2a:a2:a0:50:31:cf:7d:4e:d4:9b:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3C:8D:3E:86:1C:A1:4E:11:A4:FC:8F:F7:46:ED:32:D3:1F:AE:82
            X509v3 Authority Key Identifier:
                keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:2a:6f:37:34:c3:16:35:d3:9e:99:c2:92:15:44:fb:9f:
         a8:73:ee:03:d7:51:f1:97:8f:4b:82:81:b6:52:1e:3a:48:3c:
         a4:66:69:21:5b:cb:df:f0:df:cd:7d:b2:85:94:8f:a9:9e:7f:
         2f:fc:04:db:d9:6c:e4:d3:57:3f:4c:12:c7:44:5a:a1:83:85:
         ea:06:78:96:f1:03:27:aa:fb:39:41:37:36:4c:3f:c4:df:38:
         3a:6d:13:e0:11:56:e1:4f:c3:71:e7:86:30:f2:e1:d1:b2:f7:
         9a:9f:a6:9f:1c:5c:a2:c2:62:cb:7d:74:f7:30:f2:53:a4:fe:
         4d:36:29:0d:c8:38:26:9f:97:3b:2c:b2:01:8f:24:00:ab:b4:
         bf:5d:d6:83:80:4b:62:29:58:3a:09:dc:f8:3d:26:f9:d0:2b:
         3e:97:4b:77:c5:1a:d3:bd:2f:99:c9:41:0f:c8:df:ce:77:09:
         d5:8f:a0:34:fb:35:0b:88:fb:80:0c:e8:7a:54:d9:e1:64:de:
         f0:18:50:a3:5c:01:43:cd:e0:b9:59:c4:30:4f:b8:e9:f0:e3:
         e8:46:60:05:08:f3:1d:1c:4f:40:2f:6d:f7:46:97:09:7d:7d:
         9e:d9:5c:42:6d:0f:1d:4f:6b:a1:13:6c:ff:b9:ee:6a:0f:b8:
         5d:76:69:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:50 2026 by rpki-client