Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File:                     4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier:          bQy5hSC2UoIU5/CEc7v8yYr3gzEx2a8sgCsdBGVATC0=
Subject key identifier:   E0:36:C5:F9:D2:9F:89:3C:64:FE:A3:0E:5F:9A:FA:F6:A4:45:F3:FD
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer:       /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial:       01A0EC2E707BBC54ADABD37051D1EA299138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number:          1611
Signing time:             Tue 29 Sep 2026 08:01:01 +0000
Manifest this update:     Tue 29 Sep 2026 08:01:01 +0000
Manifest next update:     Wed 30 Sep 2026 08:01:01 +0000
Files and hashes:         1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: q9/AvxDSswoCnAhAEZDOhz3t7T5yClkMuzCISjJ2hcQ=)
                          2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:2e:70:7b:bc:54:ad:ab:d3:70:51:d1:ea:29:91:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
        Validity
            Not Before: Sep 29 08:01:01 2026 GMT
            Not After : Sep 30 08:01:01 2026 GMT
        Subject: CN=e036c5f9d29f893c64fea30e5f9afaf6a445f3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:6e:e9:32:1c:5c:01:72:8c:14:ba:7f:a5:
                    d7:9b:d5:33:e5:37:02:f9:23:79:bf:2a:8b:e7:0a:
                    19:d2:7b:46:14:fd:ac:5b:a2:26:46:81:33:e3:ed:
                    af:9e:0d:6b:f3:95:dc:be:d8:d4:2b:d5:3e:e8:95:
                    0f:fc:b8:f7:33:5e:ba:32:c3:eb:82:f3:2a:a7:73:
                    8b:cb:f9:a1:06:c0:b8:c6:2d:2e:31:bc:ea:b9:b0:
                    77:33:60:54:52:93:38:08:1e:c2:c3:70:28:be:2f:
                    a1:db:22:44:4f:6a:5e:ae:a7:69:7b:cc:ff:2e:8b:
                    a1:3c:7d:b6:59:a4:c4:ca:54:cb:72:ce:6d:28:88:
                    13:ec:9d:80:09:74:e6:d9:4a:63:3a:2c:e7:f6:79:
                    fc:f3:e3:8d:79:86:ba:0e:5b:c6:2e:90:42:4c:5d:
                    1f:38:b8:23:7f:ce:94:a6:6b:46:56:a5:af:48:99:
                    fe:27:e6:eb:41:4c:3c:38:e5:e6:68:6b:f8:d3:af:
                    04:83:46:dd:a8:1c:09:67:21:aa:3a:a5:56:24:b6:
                    55:ea:50:4c:7a:68:55:91:d0:60:0c:96:76:3f:00:
                    76:31:9b:f2:2e:e0:5c:9c:2a:11:cd:85:09:5a:15:
                    f4:f4:fc:2c:db:78:d7:50:ac:c9:e2:d0:06:0a:76:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:36:C5:F9:D2:9F:89:3C:64:FE:A3:0E:5F:9A:FA:F6:A4:45:F3:FD
            X509v3 Authority Key Identifier:
                keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:31:25:a8:91:ef:46:b0:b7:c9:b8:a0:37:36:71:2e:86:85:
         90:cc:20:da:5b:5e:81:89:ff:8c:71:2f:62:67:6f:55:4f:52:
         84:ec:22:62:3a:7a:0f:bc:7c:a9:28:28:e9:6a:81:12:c2:f6:
         c9:23:12:f0:40:92:50:bb:df:58:d1:c1:d8:0f:46:03:5d:f7:
         7e:13:bc:b5:9e:c2:bc:fd:d7:13:7f:f6:6a:c7:fd:37:95:a6:
         e2:bc:d0:c2:2a:be:9f:fe:a4:3a:0c:f8:e9:e3:2e:0b:27:79:
         95:f5:fe:39:cc:a2:7a:68:2c:9b:ed:ab:32:01:9f:46:50:5e:
         2c:5a:4a:fa:ef:aa:37:70:40:8f:1d:9b:bb:8b:9d:e4:31:b6:
         4e:cf:fa:1c:c4:b7:85:42:ac:72:77:b9:1a:8c:bc:31:40:94:
         7a:f9:79:8f:cd:0e:61:74:79:97:7c:fb:79:b2:fb:03:5b:36:
         5e:b9:c1:6a:92:99:a8:2a:19:ee:6e:f4:15:57:6a:8e:2a:7d:
         2b:dd:8a:0b:e9:bc:b7:e5:22:d7:cc:46:f9:3e:3f:40:4e:6d:
         b9:db:25:f7:77:7a:de:81:79:64:16:d8:1a:29:ac:4f:b6:03:
         ba:b5:73:6b:e9:de:4e:f6:12:23:d8:ab:3c:b1:ff:a3:44:4c:
         85:04:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:58:31 2026 by rpki-client