Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File:                     4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier:          vwU50s7JWAka6zaC+av+HSiFHLzkapHWQZYRquMS8Oc=
Subject key identifier:   4F:50:0C:6C:91:FC:C9:D2:D1:C3:28:E5:CC:C3:41:EB:97:DC:EB:3E
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer:       /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial:       019D2A048420E29EFE39E36B71CC37839F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number:          0E86
Signing time:             Thu 26 Mar 2026 12:00:32 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:32 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:32 +0000
Files and hashes:         1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: CDcKqgzHTpnxcKGsAOR+VxSb3rmhQPjsDJNW8X8pz+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:84:20:e2:9e:fe:39:e3:6b:71:cc:37:83:9f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
        Validity
            Not Before: Mar 26 12:00:32 2026 GMT
            Not After : Mar 27 12:00:32 2026 GMT
        Subject: CN=4f500c6c91fcc9d2d1c328e5ccc341eb97dceb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:88:ba:ac:9c:a6:9c:e2:39:7f:20:db:57:
                    df:b7:90:cf:fb:2f:a6:30:e6:a8:32:90:71:ce:6f:
                    ae:2f:46:54:a8:08:2c:4c:ba:f1:89:ba:4f:e1:ca:
                    03:6e:6d:24:c5:68:ef:14:94:f6:b0:6b:fd:9a:7b:
                    f8:5a:f3:bb:e7:a5:39:8e:22:e5:a8:70:e3:eb:d9:
                    14:1c:0f:c1:9a:88:31:9c:ff:d3:18:7b:c6:fe:a0:
                    87:da:6d:7b:24:55:20:6f:45:36:ee:0b:9b:75:d1:
                    0c:9b:d4:3d:a6:3b:14:ec:e5:10:b4:20:07:c9:b1:
                    2c:2a:c2:47:b5:5c:27:49:8e:d1:1f:a8:c3:e7:29:
                    21:b8:07:79:71:b4:c9:c4:bc:f3:45:30:70:3e:13:
                    bd:b9:2a:19:32:10:ba:d8:8f:7b:88:19:78:33:57:
                    bb:f8:5b:df:9f:9e:95:0f:3e:eb:39:a7:26:f1:27:
                    77:e3:54:5c:64:e5:46:5a:7e:01:6b:b7:45:1b:97:
                    7e:df:86:39:5c:65:8f:5f:30:90:24:e0:5b:d8:82:
                    94:86:e9:6c:df:4c:2f:a5:9a:45:f2:b2:4c:69:1b:
                    2e:81:51:a8:98:7f:d7:56:8d:d3:3e:ca:55:0f:e4:
                    c0:7b:bf:18:7c:04:bd:5c:5a:c5:40:1b:6d:33:32:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:50:0C:6C:91:FC:C9:D2:D1:C3:28:E5:CC:C3:41:EB:97:DC:EB:3E
            X509v3 Authority Key Identifier:
                keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c4:fa:c0:ca:3d:c6:8e:ad:54:9c:9c:c9:1a:68:86:45:6e:
         f8:b2:87:c7:02:c0:69:5e:b7:09:72:f3:dd:e4:1e:34:f2:1a:
         d1:f0:d4:cb:08:b0:48:e0:6e:85:53:58:a5:7e:43:f4:77:7b:
         92:37:54:1b:74:9d:fb:78:07:38:06:44:66:39:61:25:33:1f:
         06:3e:0a:52:ff:45:5f:bd:1f:2a:25:00:be:fc:81:6f:37:33:
         bc:4e:f6:8a:ce:68:61:0b:9c:15:04:66:e7:07:80:e5:17:1e:
         73:e4:b5:52:5b:12:1e:3b:98:15:a8:28:bf:a8:e5:ec:de:69:
         33:46:f6:f5:4e:90:64:cd:4f:a9:d8:60:9b:01:9d:6c:b8:8d:
         93:43:5e:c4:5b:6a:30:39:9f:c8:e1:92:ef:1c:8b:20:5a:7d:
         71:39:f9:7c:75:01:1a:29:c4:3d:b6:2c:8f:af:bd:c9:3c:f0:
         dd:ca:8e:cc:0e:37:82:ab:16:24:2e:f5:b9:a0:03:5d:7d:a6:
         a8:74:d1:73:85:c3:8a:8a:59:bc:83:6a:64:54:15:7f:4c:fc:
         84:2a:1b:9b:f5:6c:f0:44:a3:7d:4d:3c:a0:9e:f7:d7:0b:4d:
         c1:a0:42:04:cf:c4:31:ac:74:3a:48:67:4b:81:5f:ee:5f:3f:
         e7:ad:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:03 2026 by rpki-client