Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File:                     4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier:          IsgQ058AOC5Nnp6XGy5GuxFGX1HHe0XgtVjCSOE4Q6c=
Subject key identifier:   A7:2F:92:78:CD:FC:41:8D:73:30:CB:D4:BB:60:5D:68:BA:BA:AB:8E
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer:       /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial:       01A0CE913E955B309949EF98B727112480FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number:          1A6A
Signing time:             Wed 23 Sep 2026 14:00:20 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:20 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:20 +0000
Files and hashes:         1: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: w/PiNZymh2U+xFxiWD5wueDrn8Ck09q4j8LdWhJxMS0=)
                          2: fe1imW15nJcWqPFUEtzxex8TfJY.roa (hash: 7SyOd5vhLLHK1X5KDoXQcbr6Cl3ba3LVf0tf6U/sBZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:3e:95:5b:30:99:49:ef:98:b7:27:11:24:80:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
        Validity
            Not Before: Sep 23 14:00:20 2026 GMT
            Not After : Sep 24 14:00:20 2026 GMT
        Subject: CN=a72f9278cdfc418d7330cbd4bb605d68babaab8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:f5:8c:bd:90:17:08:0d:21:93:0c:22:41:
                    64:86:1f:49:5d:e4:0b:cb:d0:34:9a:f6:e3:c8:4e:
                    f6:ec:e9:75:a6:05:c5:63:95:e2:25:2c:a6:79:87:
                    a9:30:b5:ba:a9:e9:49:ac:29:1b:8b:38:5f:6b:e5:
                    e4:93:0c:97:65:c4:c5:15:93:d2:2b:03:ee:37:f8:
                    5f:69:f5:77:ee:cf:5e:da:82:d0:21:29:b1:1b:63:
                    55:f3:24:0a:9f:e9:f1:4b:a8:d7:c1:a4:41:5e:39:
                    f9:eb:7d:91:e2:f4:65:13:b1:dd:de:35:cd:6e:8f:
                    c3:c1:31:9a:db:99:de:fc:9a:a5:d9:0f:27:69:24:
                    41:34:d7:00:24:91:48:3a:5a:e3:a7:7c:a5:e9:5d:
                    bd:0b:0b:72:c5:cd:7e:be:f0:08:0b:7d:3e:be:3a:
                    7a:1c:4d:01:7b:3e:13:ea:bd:11:2a:5b:f5:fb:41:
                    b0:89:ad:fd:1e:18:0b:9d:aa:92:9c:fa:40:38:11:
                    1b:b7:1b:d0:4d:e8:72:a3:58:c0:01:1c:ae:15:ac:
                    86:2e:7d:c5:30:df:6d:4d:c2:81:6e:c7:9b:00:f4:
                    ea:3f:19:af:a7:b7:72:7b:c4:b5:0e:90:4a:a4:30:
                    1d:94:9b:f6:49:da:15:78:b9:1c:12:4a:51:c2:67:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2F:92:78:CD:FC:41:8D:73:30:CB:D4:BB:60:5D:68:BA:BA:AB:8E
            X509v3 Authority Key Identifier:
                keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:97:e0:3f:ce:f1:5a:70:f2:4c:c6:15:8d:d0:13:bc:91:78:
         85:27:43:b9:74:95:a6:b0:fb:42:fb:d6:0f:4b:3c:20:f6:66:
         1f:a2:f5:36:41:b5:2d:32:bc:5f:5e:1e:53:26:9b:c7:5f:a8:
         0c:25:0b:be:4c:0b:c4:06:78:c1:8e:1a:0b:bc:ed:88:57:bf:
         4f:f9:0f:2f:14:a0:a7:b3:1e:bb:6b:1e:2b:10:ee:0b:cc:af:
         a6:a6:9c:db:2e:b5:53:18:7a:61:59:cb:7b:a7:22:79:22:c9:
         a5:71:66:2e:29:b9:f2:24:da:d4:8a:b8:4d:84:c5:5d:5a:43:
         77:b5:5e:c1:ba:19:04:1e:9f:da:1c:24:a6:46:4f:09:7d:89:
         19:2b:25:2d:ac:d8:3e:d2:53:3b:61:c5:a6:32:89:7f:d4:a0:
         4f:71:a3:c4:4f:07:be:37:71:97:54:c6:14:76:7d:c4:6f:64:
         7e:11:03:40:c6:a6:21:7b:69:05:e7:f1:51:53:38:c8:91:53:
         e6:f4:94:3d:e4:a7:17:03:93:f8:4b:f0:02:22:f4:df:a2:8e:
         d7:5b:da:74:ff:cb:93:da:6a:ee:5f:fc:4d:15:1a:6b:ff:68:
         22:71:e6:4b:5b:e9:ad:9a:4a:1f:3a:df:1b:32:36:2b:40:fe:
         21:09:ba:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:55:59 2026 by rpki-client