Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
File:                     4te3649H5Sd5Ev8FjP7X2Jn8abk.mft (raw, json)
Hash identifier:          rPxmpIsItFMWWP4gw9Ux08LeUS9FjXhl3Rin0F/S8Uo=
Subject key identifier:   5E:3E:2D:F0:EF:42:94:FD:2B:96:30:03:6B:C8:6E:FE:94:D9:D9:92
Authority key identifier: E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
Certificate issuer:       /CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Certificate serial:       01A0D012279AA2CC8E0048C6F58809586015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
Manifest number:          19FB
Signing time:             Wed 23 Sep 2026 21:00:45 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:45 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:45 +0000
Files and hashes:         1: 4te3649H5Sd5Ev8FjP7X2Jn8abk.crl (hash: yIZkd2s1oIITOywJY3s5FsWrgUssLZmq4gu4N198ziI=)
                          2: yPdEnBlETthfb3n2w6_5p1naims.roa (hash: FMus24cOQ5H8kqoUzdVY1kxUQ7CnaxtzdvTHW/XwsqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:27:9a:a2:cc:8e:00:48:c6:f5:88:09:58:60:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
        Validity
            Not Before: Sep 23 21:00:45 2026 GMT
            Not After : Sep 24 21:00:45 2026 GMT
        Subject: CN=5e3e2df0ef4294fd2b9630036bc86efe94d9d992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4c:e0:52:e5:04:b9:c2:fa:88:e5:ee:a8:51:
                    2d:d0:eb:42:0e:aa:de:af:df:56:dd:8f:f3:06:aa:
                    b6:7a:fc:a2:af:0a:cc:50:6d:05:6c:68:aa:fc:70:
                    5f:bc:d0:51:34:df:00:9a:93:2d:2b:eb:d9:da:01:
                    c5:b6:66:8c:82:ad:c2:65:ff:35:9f:a6:0e:a4:20:
                    73:da:8a:9f:84:b2:55:10:5b:15:e9:e5:80:a3:39:
                    e0:7b:7e:cc:af:32:46:3a:81:b7:da:e0:45:5c:5f:
                    54:7d:c4:ef:29:e1:e9:11:90:6e:b5:39:ba:5b:5a:
                    f6:4f:89:e4:f4:02:05:b0:c1:73:58:d8:0f:20:9f:
                    79:7e:66:b6:b9:00:bc:ad:53:c9:b3:a3:0e:29:14:
                    b3:a6:09:94:2d:d0:3b:4d:a6:9e:7b:99:75:85:f6:
                    72:af:c6:91:d7:5d:c0:e1:1a:60:c0:38:df:15:f1:
                    82:6c:fa:4f:81:a9:8e:22:0d:6a:06:ff:67:37:64:
                    4c:2f:6b:11:92:c7:e0:e1:fe:ab:ec:b0:dc:47:3a:
                    b8:5c:f0:b6:5d:80:3e:00:d6:0d:76:cc:9c:d9:7e:
                    36:63:0b:4d:b5:32:f3:d6:a0:5c:11:3a:16:61:48:
                    26:16:46:0f:bd:db:13:16:8a:23:c6:2d:03:03:eb:
                    5e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3E:2D:F0:EF:42:94:FD:2B:96:30:03:6B:C8:6E:FE:94:D9:D9:92
            X509v3 Authority Key Identifier:
                keyid:E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:44:1f:17:39:4b:a1:dc:2f:c9:c0:64:b2:8e:94:40:7b:23:
         46:0b:0d:12:35:03:8b:7c:ad:9c:b0:f2:4e:a4:3f:a3:51:ba:
         7d:f3:99:46:8e:0d:5d:38:fa:a2:fd:92:82:c2:4e:3a:b7:9a:
         62:c8:5c:b8:d2:59:ff:03:7f:c4:35:ef:73:6e:7b:16:03:d6:
         8b:ee:f1:44:37:98:22:52:cf:f1:f4:21:40:53:de:83:03:6c:
         ce:43:0c:c0:8d:20:5a:21:72:2a:ea:d6:27:25:0a:f4:5f:cd:
         c0:1e:26:26:bc:68:ca:08:de:2e:b0:82:05:e1:d3:da:dc:14:
         21:ef:98:59:36:5a:50:d6:99:da:81:95:c7:bc:12:9f:d0:83:
         58:9e:49:9b:c9:a9:ed:b9:ff:b9:37:19:b5:55:0e:53:87:b6:
         d5:ea:bc:d6:51:22:44:41:6c:2a:7e:50:de:15:e3:19:0f:05:
         12:ed:b0:bd:ba:30:24:9c:57:2c:5b:e6:d3:ee:b4:b6:67:a5:
         a8:61:6e:df:76:e4:4d:41:f5:08:74:45:35:8e:5f:48:f6:68:
         21:f3:17:a4:f4:77:d6:4e:d2:c0:19:95:9e:ec:4e:6d:1f:fe:
         92:64:ad:5a:5d:5c:f5:36:d8:a7:36:54:cc:fe:ce:c6:8b:55:
         25:ab:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:32:54 2026 by rpki-client