Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File:                     4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier:          YOtKT5W0Vejm2b1Gg7LI5NfrLG4i5F3GKv0DL8Ux7Qg=
Subject key identifier:   EB:BA:46:B4:CD:5F:12:72:B2:61:49:03:6E:DE:29:A3:98:36:F3:BB
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer:       /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial:       019F9090E5348AF1FE339A3348630842F701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number:          19CE
Signing time:             Thu 23 Jul 2026 20:00:42 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:42 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:42 +0000
Files and hashes:         1: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (hash: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8=)
                          2: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: +fQNfP1BS/clu8CL/bKuL7svWdg1wu5i+4S8ffp51CA=)
                          3: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (hash: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg=)
                          4: CiXzPWmke5n548-SbTCFdFEYvdY.roa (hash: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc=)
                          5: VbudqHUU3wej-Ky_SGgd-IL1oU8.roa (hash: PP3CaUPvJ8zLIQWtRlM90SR43ub+3rRJI44xSidlZHg=)
                          6: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (hash: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0=)
                          7: e99HCBjQgcssRPkCDiUE7eAcY_w.roa (hash: IYb3xBr9j8PdXiJfn/hO3V8a/I7VRwJ3UbeucKB0LsU=)
                          8: t20IKoUV8idtpCE6ygNMZGStJOA.roa (hash: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI=)
                          9: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (hash: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:e5:34:8a:f1:fe:33:9a:33:48:63:08:42:f7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
        Validity
            Not Before: Jul 23 20:00:42 2026 GMT
            Not After : Jul 24 20:00:42 2026 GMT
        Subject: CN=ebba46b4cd5f1272b26149036ede29a39836f3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:b3:66:ef:10:13:73:a9:77:1a:33:29:33:
                    fb:a8:37:10:22:e2:9f:b6:fb:03:f6:66:3c:54:1c:
                    73:c4:33:d5:f3:35:52:b9:4e:f7:0b:ec:7b:04:dd:
                    1b:1b:05:90:11:3d:f1:d5:d8:52:d4:c2:d9:a1:82:
                    79:bd:d4:c6:90:62:44:68:76:86:e9:b3:5f:e5:f7:
                    16:8e:44:e9:80:3c:72:ee:32:43:51:3c:cb:12:aa:
                    cf:9c:26:1b:94:5e:de:6e:f0:3f:00:6a:81:17:7b:
                    f4:7e:67:83:29:de:a2:45:4b:56:07:c4:bf:89:a6:
                    39:23:3d:e5:db:5a:e7:54:c4:3c:34:21:bc:af:2d:
                    98:08:39:95:09:d3:c1:a1:28:d4:c8:07:5b:ee:cc:
                    f3:a1:d2:f5:4b:79:ea:96:86:91:f3:55:dc:74:b0:
                    41:ec:92:5d:83:11:12:c9:b4:d5:c9:34:37:42:e7:
                    c7:0c:83:66:3f:4b:ad:f9:74:01:cd:f7:3d:fa:3b:
                    43:e5:41:94:37:ce:3d:41:a1:0c:27:c5:bd:5b:31:
                    6d:ec:de:c1:56:6d:48:7a:2f:fd:3d:95:e8:51:07:
                    e0:7a:58:36:06:39:b3:2d:59:79:41:ef:b5:e3:2c:
                    60:6a:fb:52:e6:fe:17:e8:75:17:99:8c:b9:ad:87:
                    5b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BA:46:B4:CD:5F:12:72:B2:61:49:03:6E:DE:29:A3:98:36:F3:BB
            X509v3 Authority Key Identifier:
                keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9a:65:76:61:3d:f4:15:d6:2a:79:ee:75:16:88:86:e2:f0:
         a5:09:76:27:db:86:89:4b:64:3f:e8:47:ea:38:3d:c6:79:48:
         dd:73:b5:63:84:f9:48:87:e3:fc:c5:04:f8:cb:79:39:aa:aa:
         ab:d7:2b:07:ad:6e:3a:34:fa:dc:a7:4a:d7:1a:b7:43:26:72:
         39:6d:5d:99:6b:f9:69:16:93:89:4a:cc:31:76:91:5f:df:a5:
         e0:a5:74:60:ad:8f:c7:9c:e0:61:f4:f2:91:8f:67:92:08:3b:
         1e:40:9c:66:e3:88:33:06:93:2c:f5:e5:0d:82:85:c7:b3:91:
         d0:9a:b7:d3:a3:61:93:2b:32:8f:b1:af:43:9b:cf:cd:94:e4:
         45:40:6f:63:d0:68:40:db:ee:34:78:22:92:2b:b9:63:7a:e1:
         68:17:22:c4:52:2c:94:8a:54:7a:83:df:d9:fc:81:e0:e5:92:
         4e:7c:06:70:fe:7b:65:99:45:f9:97:fa:9b:df:e1:c7:e6:23:
         ab:40:f7:ef:11:53:c3:13:3a:10:c2:df:f8:d9:8a:ba:63:51:
         12:2b:72:ef:db:10:b4:1d:61:ea:57:9a:b8:4a:60:a6:22:80:
         13:a1:32:b1:57:97:9a:6c:62:ec:75:f2:f3:f2:94:91:76:2f:
         d1:9e:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:10 2026 by rpki-client