Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File:                     4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier:          QV4sZMHugu5vNgFInN3k9f6GIbqCqm4yIzF0KP6kJbo=
Subject key identifier:   F4:8F:B2:23:ED:F2:53:54:C6:3B:C6:7A:47:DB:10:3A:FC:7D:62:64
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer:       /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial:       01A0EA400124BD1B434B733A0F3494C0FDA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number:          1610
Signing time:             Mon 28 Sep 2026 23:00:58 +0000
Manifest this update:     Mon 28 Sep 2026 23:00:58 +0000
Manifest next update:     Tue 29 Sep 2026 23:00:58 +0000
Files and hashes:         1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: ixBShvlATF1DLaIuIDur/6glpyBMIq2HD1fPwI9Fl9g=)
                          2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:40:01:24:bd:1b:43:4b:73:3a:0f:34:94:c0:fd:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
        Validity
            Not Before: Sep 28 23:00:58 2026 GMT
            Not After : Sep 29 23:00:58 2026 GMT
        Subject: CN=f48fb223edf25354c63bc67a47db103afc7d6264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:31:62:88:d7:fa:8a:68:b1:2e:1b:e6:57:
                    95:d9:b6:e6:4b:ee:c4:17:a1:1c:4f:9e:c6:d9:04:
                    7c:a5:4f:0c:a0:4f:30:de:51:46:81:a8:9e:0d:3f:
                    93:6b:3b:14:25:e7:3b:03:93:fd:09:a3:66:3a:c9:
                    cc:31:7b:bf:9f:e1:44:e9:b9:5a:b7:2c:ba:75:5e:
                    31:c1:fa:4c:76:81:8e:99:d1:4e:c4:0e:43:b8:0e:
                    40:ce:00:19:cd:3d:1b:65:0b:17:12:76:6b:2f:83:
                    f4:d9:37:51:a4:66:02:0f:f6:24:9d:2b:5d:cf:1a:
                    8d:88:32:28:74:76:93:36:b0:ec:78:a8:99:7e:8b:
                    34:31:7f:1e:d0:9e:74:a7:6f:e8:1e:94:ce:ec:d2:
                    32:73:1b:8e:b9:5b:3d:3c:cb:41:0f:b8:2a:af:ab:
                    e5:26:82:d6:15:d8:4f:5b:c1:b5:80:ec:df:f1:76:
                    2e:6e:95:0d:15:e2:b1:af:f3:77:b4:bf:1d:fc:57:
                    1a:d0:08:88:16:66:38:1f:af:dd:99:02:d6:8a:d7:
                    fb:0b:17:ae:57:4d:4a:cc:17:f2:13:24:e8:76:d4:
                    99:6e:ab:ad:6a:e6:8e:61:1c:ee:24:a9:a8:59:5d:
                    b4:c7:f2:ce:1d:28:d9:4f:28:a6:9a:ca:9f:cb:ed:
                    9c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8F:B2:23:ED:F2:53:54:C6:3B:C6:7A:47:DB:10:3A:FC:7D:62:64
            X509v3 Authority Key Identifier:
                keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9c:13:7c:08:8a:f5:7d:62:e6:4c:dc:b2:cf:c4:0c:c8:d9:
         ee:1f:09:d9:e2:33:91:2e:5b:a5:10:65:29:86:e5:11:ac:6a:
         10:1d:93:4e:43:d7:b5:69:4c:54:f9:14:e7:ca:bf:cb:cc:09:
         53:2b:7f:32:1b:7e:6b:93:eb:b0:76:4d:80:cf:42:a6:54:14:
         12:5a:09:0c:82:b3:08:c5:79:aa:af:89:c8:ec:dd:53:fb:94:
         e4:d6:48:44:ec:13:38:47:48:25:65:ae:7d:c7:45:89:a3:a7:
         1d:28:1a:d4:b0:d5:a5:97:17:58:c3:f7:40:32:66:32:78:fe:
         b9:9a:01:ee:63:a3:c6:5c:01:95:cd:f3:1e:21:63:ab:45:d7:
         02:4f:ad:b0:5c:76:fd:03:18:d0:e0:9f:0a:bf:fa:53:4a:29:
         f7:03:a3:61:6b:ea:46:6e:09:a9:45:cf:e6:69:ca:9d:ab:4a:
         98:99:34:06:b6:4c:0b:db:dd:d9:c3:e8:ab:de:8c:f3:1f:b4:
         44:fd:4f:b5:2b:cb:ad:b6:98:f0:c4:b8:4e:e1:b9:f9:56:3f:
         ca:18:65:06:39:3c:fb:ec:0f:5d:de:59:d4:04:2b:73:82:a7:
         4c:72:04:a3:de:e1:36:f9:9f:8d:85:0a:f1:54:fd:ce:1e:01:
         61:45:a5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:59:39 2026 by rpki-client