Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
File:                     4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft (raw, json)
Hash identifier:          uqlzTzunojSYeXme6mgIETI4yx6uQMchp2IH4LfQ0kE=
Subject key identifier:   C7:8D:B2:0D:04:FB:85:6A:99:D4:D1:C1:6C:EC:30:5D:16:85:F1:5C
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Certificate issuer:       /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial:       019E1CB55FDE2476CF1C55B048715E067759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
Manifest number:          17D9
Signing time:             Tue 12 May 2026 15:01:49 +0000
Manifest this update:     Tue 12 May 2026 15:01:49 +0000
Manifest next update:     Wed 13 May 2026 15:01:49 +0000
Files and hashes:         1: 4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl (hash: x5UFqy8ghmBu+SAVyH0mCRug7LwV16nVgo6GoOfjdOI=)
                          2: 9ECy6xMC0QhH_pOivg-rQM4g-LY.roa (hash: zvlC8cgCNjvHx+kjOIl69ehjpjFO8D76qsG5Uxnt+E0=)
                          3: RpaCjdRSa-ZXBxWyWy2b1QJvShE.roa (hash: Je7gOL1A4cNI+FOPPNsoCM8EDxPKoSVwHmNzkdP57i8=)
                          4: _1m8AbFgCaUHu45103GtcnU-Bsk.roa (hash: XDKSo1Roj7NESH25VDoYxt2TEtXl/ulkf6Ak7JsGDiQ=)
                          5: iXTTTS-nkmqjatbhOVM0CNWv4xs.roa (hash: mekB3Ob2oSZO7b98NYgMQKBlF4RIFyldyH/8tcheBuM=)
                          6: jBQ6iqUVJNuGNHuEQTjudB5sG6c.roa (hash: 5vRltqBxLQBblzxtE89pQTvupEcZThWKDrWuNr0JFrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:5f:de:24:76:cf:1c:55:b0:48:71:5e:06:77:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
        Validity
            Not Before: May 12 15:01:49 2026 GMT
            Not After : May 13 15:01:49 2026 GMT
        Subject: CN=c78db20d04fb856a99d4d1c16cec305d1685f15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:fa:47:c2:85:31:eb:5f:bd:27:bb:70:c2:
                    db:a5:57:30:01:ca:98:a6:d0:0e:2a:a6:f0:ac:4a:
                    3a:fa:de:ac:fd:5a:36:a5:ca:31:ce:4d:56:e6:57:
                    c1:a0:07:68:73:09:d6:50:8c:77:c4:32:be:f5:07:
                    96:db:9d:b8:e5:4b:38:1f:7a:59:cd:37:46:de:83:
                    1e:a0:b3:5b:63:f7:4a:91:41:b0:c4:b9:1b:0a:c9:
                    18:a4:e2:b2:7c:6c:60:dd:44:e7:8f:b6:b4:01:9a:
                    66:3f:d3:9a:44:51:dd:c4:4b:00:21:a9:11:44:d6:
                    ed:19:6f:0c:d1:1d:8d:80:d4:09:4d:2b:03:2b:80:
                    87:54:fa:10:3f:25:e4:8c:2f:78:3a:2b:24:ca:83:
                    15:58:f7:ec:8a:7a:f6:1f:22:e9:87:1d:92:86:30:
                    02:22:73:15:e2:ce:7f:c1:6a:5e:f9:04:f9:7b:d7:
                    51:54:26:7a:da:06:5b:c6:14:44:ec:ce:e3:42:cf:
                    63:b6:a6:09:5c:8b:bd:9c:eb:da:49:7e:31:76:1a:
                    e0:5c:0d:c3:2f:0a:c3:70:b6:0b:73:88:88:a5:32:
                    a3:b0:d8:ca:00:03:e9:f6:50:65:23:0d:25:77:f2:
                    50:18:6f:a1:77:45:e0:31:e3:75:93:1c:6b:a3:c5:
                    e7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8D:B2:0D:04:FB:85:6A:99:D4:D1:C1:6C:EC:30:5D:16:85:F1:5C
            X509v3 Authority Key Identifier:
                keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:82:d9:58:8d:48:b6:59:4c:2e:70:59:9a:3d:15:54:21:17:
         a8:42:7c:ae:44:4c:e7:86:20:91:6e:1d:d3:0d:f8:04:fb:10:
         50:cc:a6:7b:8b:43:c4:18:72:b8:78:1e:a7:28:74:44:45:18:
         32:ae:73:be:69:53:ac:3a:90:e0:b0:f9:b8:6a:41:8b:5d:40:
         2f:e4:62:43:ea:73:53:cf:69:dd:a3:b2:1a:97:27:eb:ad:9f:
         e6:5d:84:14:3c:9d:44:bf:e3:44:e3:11:8c:84:27:ef:8f:f0:
         a2:4e:36:7e:46:62:9b:34:3c:c0:2b:c8:99:56:4c:20:63:3c:
         1e:98:59:87:e5:41:32:75:4b:78:c1:0f:0d:19:77:1b:eb:de:
         18:11:a9:c8:57:f9:73:ea:95:57:77:07:71:0b:09:16:4a:cc:
         e0:f3:de:50:08:74:a0:a6:f4:83:3a:52:cf:ec:4e:6b:84:a4:
         a9:da:b0:d4:58:1c:70:2c:6c:69:4c:df:c9:aa:8e:c1:b0:b2:
         fc:fe:db:82:f7:0f:ff:3e:89:d8:38:61:3a:c7:44:39:e9:f2:
         a9:a2:cd:02:0c:e5:85:d0:a6:2f:69:58:3e:f4:6b:3d:4e:51:
         26:05:c7:fe:d6:ca:9d:dc:1b:f2:41:dc:3f:0e:5d:89:92:c2:
         74:2f:42:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:29 2026 by rpki-client