Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File:                     1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier:          oQmzSFB0c3avzhrdbPqgov6Rza42g8Sov8GzAYgjhd0=
Subject key identifier:   EA:6C:4A:65:1F:32:06:68:36:EC:DE:B0:6E:F4:62:9B:99:A6:EC:D4
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer:       /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial:       019F91A44CDC2780FF8B07D214E0E45C1EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number:          094D
Signing time:             Fri 24 Jul 2026 01:01:31 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:31 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:31 +0000
Files and hashes:         1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: qnLUSVqNUgeY4dVJW79xonwJYqtf6UJQAmTEdU1swWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:4c:dc:27:80:ff:8b:07:d2:14:e0:e4:5c:1e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
        Validity
            Not Before: Jul 24 01:01:31 2026 GMT
            Not After : Jul 25 01:01:31 2026 GMT
        Subject: CN=ea6c4a651f32066836ecdeb06ef4629b99a6ecd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:f7:27:ca:fd:f9:58:f7:9f:d9:0d:28:21:
                    05:60:61:a4:b4:20:83:d6:7f:3c:2f:37:31:83:50:
                    3d:df:d6:27:54:17:cf:e9:62:20:f8:0f:88:af:b8:
                    cf:d7:59:5b:fb:64:fe:46:c6:5e:4d:4c:3a:69:43:
                    94:47:3d:af:46:87:5d:8f:59:19:e2:f2:4a:be:18:
                    10:25:0d:bd:a7:b8:54:f0:23:41:93:ed:77:36:c0:
                    5e:c8:54:80:d7:65:a9:f9:1f:0a:ef:22:99:7d:a7:
                    68:8d:9d:ac:bb:b2:39:7b:e2:2b:ea:3b:f1:d3:cc:
                    5c:4f:11:81:4f:fb:1e:60:b0:91:74:ac:13:61:0e:
                    c1:cb:c7:6b:1b:80:0c:50:90:73:cc:db:06:26:4a:
                    11:16:a4:24:05:2d:7a:88:3a:14:8a:af:e1:76:84:
                    83:97:c7:d8:be:e6:62:ca:10:48:71:f4:01:4e:32:
                    fb:09:25:52:dd:ca:10:07:9d:f7:a9:b7:37:63:e0:
                    06:37:83:d2:06:20:33:9e:2b:a8:5f:fd:af:07:ce:
                    c0:e5:2b:a2:28:3e:14:fa:b3:b9:9e:c6:5d:2c:ed:
                    e7:00:73:1c:87:36:ce:8c:7e:70:6f:93:a6:d2:9b:
                    97:79:34:83:ec:b9:37:6f:d0:0d:48:52:ba:45:f2:
                    f6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6C:4A:65:1F:32:06:68:36:EC:DE:B0:6E:F4:62:9B:99:A6:EC:D4
            X509v3 Authority Key Identifier:
                keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:97:2c:13:2c:34:f2:9d:c1:15:27:ea:dd:89:40:be:6e:48:
         d2:f6:4a:06:32:20:ba:84:c2:7d:82:e1:78:e8:71:b1:7f:93:
         fc:76:c5:40:1d:5d:dd:66:a4:2c:1d:c7:d8:92:8c:d6:66:dd:
         a7:de:9c:12:0a:f9:95:7f:0c:17:a1:d3:c1:8c:fd:3c:77:4b:
         e6:9a:89:26:98:32:93:36:57:46:a3:40:b4:fa:7c:f8:8b:80:
         16:e4:41:90:e6:b9:72:3d:5d:1a:83:0a:65:28:db:56:c3:38:
         cd:dd:b7:91:b0:d7:e5:e2:64:cf:f9:3a:c9:3e:f4:bf:72:75:
         2a:94:14:3f:65:a3:07:8f:60:0c:fa:57:00:dc:2a:d1:39:de:
         d6:e6:cf:37:90:a8:30:ca:eb:48:39:36:69:c8:c5:0f:c9:2e:
         1a:36:9c:f7:51:20:67:45:f1:4c:2d:37:36:f7:37:80:5e:ff:
         6e:19:bb:f9:66:76:ba:e4:9e:96:f6:96:b7:31:dc:83:d1:a6:
         78:9d:62:fa:f1:e6:46:ac:d7:0a:5e:9b:bb:d2:eb:c0:e4:96:
         9f:5b:da:91:3f:ec:71:13:8d:8c:65:4d:2a:62:69:2b:c9:30:
         70:e9:d9:f7:2f:c3:1d:17:d0:75:a5:d4:19:eb:6c:f1:4e:cf:
         7a:a2:3f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:17 2026 by rpki-client