Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File:                     4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier:          Vu2rVyqct8vZeWzP6VQodkHnP5KSaojaQFQzpK5mqGQ=
Subject key identifier:   32:4E:F8:D8:EF:AE:09:F5:DF:36:E8:01:74:76:0E:3A:66:B1:F7:25
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       01A0CEFF28DF1143334D004F83161D0DCE44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number:          132C
Signing time:             Wed 23 Sep 2026 16:00:23 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:23 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:23 +0000
Files and hashes:         1: 1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa (hash: p8zMORBp4EwLrEV0pwePL8HYOl4fQLM1ray936MhnIo=)
                          2: 3gKR0cK9QoxfvHnSIiqY4bcG8ww.roa (hash: ZcGaXU4YPznoibhlbyhjzKqhwZf4BJJECm4SI2hoD/U=)
                          3: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: kYE6nUhBXwnFlaq2e+p5mlN3lB8zGHwd6dRTi6drvw8=)
                          4: 8tAmUasl9shJmzVr02QyR9gf1yg.roa (hash: 56dLPJcjlB89ljFKBrlBrzN9saKBJC9XHbbe4kgHJpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:28:df:11:43:33:4d:00:4f:83:16:1d:0d:ce:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: Sep 23 16:00:23 2026 GMT
            Not After : Sep 24 16:00:23 2026 GMT
        Subject: CN=324ef8d8efae09f5df36e80174760e3a66b1f725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:51:cd:9e:e2:e2:9c:d3:16:14:9c:36:5b:5f:
                    26:40:ef:ee:db:27:c8:66:d7:08:b1:bc:5f:0e:ac:
                    f1:d1:5a:7e:5d:ef:a5:53:09:ae:f7:17:15:03:67:
                    4c:2f:ce:60:87:19:99:da:9e:c1:b2:f4:f4:98:84:
                    a8:eb:cf:b5:a6:76:2e:48:dc:1b:f5:0e:b9:30:a1:
                    e5:54:fd:cd:36:03:b2:63:83:96:0b:5b:87:08:57:
                    3a:fd:0e:6f:36:1a:cd:aa:3e:6b:53:21:c7:3f:d9:
                    a9:61:53:c9:f0:89:db:ff:29:54:f1:b1:9b:49:70:
                    60:97:80:5f:b7:7e:68:bc:02:93:b6:de:45:be:47:
                    bd:f8:a9:e6:e2:15:00:1c:85:15:3f:f1:4e:df:e3:
                    31:9f:09:8f:bf:2e:4d:4d:39:df:f5:ea:b3:93:5d:
                    3e:5b:1c:6f:00:ed:be:13:15:3e:e5:cc:fa:78:3e:
                    ce:6f:18:d0:dc:cb:76:e9:3f:9a:0a:33:0d:d5:32:
                    9b:3a:6a:8d:e8:fb:2f:b6:18:80:fa:f5:98:76:d4:
                    93:da:62:7d:b1:9b:e0:81:16:49:e6:cd:78:85:a5:
                    3c:a6:47:2b:fd:f3:22:3c:d6:25:2f:1f:86:99:a7:
                    a1:e3:d5:17:a7:b0:38:1c:73:6f:f4:3e:ef:72:dd:
                    fe:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4E:F8:D8:EF:AE:09:F5:DF:36:E8:01:74:76:0E:3A:66:B1:F7:25
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:12:ca:4f:e2:74:19:4c:13:91:83:ff:50:8e:8f:5c:34:05:
         7d:10:0c:1b:d6:df:88:05:1c:ff:97:c4:f1:58:1c:17:c1:cd:
         f1:c5:5a:52:e0:05:d2:e7:07:37:f0:56:c6:a9:b7:ae:c7:5f:
         34:4a:30:94:0f:8c:e6:ac:8b:31:1d:02:3c:d8:e4:81:fb:51:
         43:c2:bd:1a:6c:46:19:45:d4:62:26:83:d6:8b:98:31:30:16:
         64:20:a5:92:67:98:40:20:7a:71:03:93:a0:80:12:f0:f7:86:
         0d:f9:8a:d6:c6:50:dc:3d:2a:e5:7d:7d:90:80:a3:76:fc:da:
         48:0b:f1:9d:e9:2d:07:87:e1:16:61:f0:5a:45:a6:28:90:99:
         1c:f6:94:9b:2f:14:43:5e:c5:14:eb:db:57:bb:cd:c8:ea:a2:
         ef:90:43:40:cb:c7:fe:fa:c2:a8:e8:fc:6e:3c:ae:7a:16:20:
         71:70:0d:c8:8d:3f:32:dd:ef:38:39:92:f8:6b:a2:8f:5a:79:
         9b:38:39:64:67:43:df:f9:c3:ce:a7:40:72:0b:c5:a5:fd:4a:
         34:6e:6b:22:91:73:d2:0b:7b:f9:4f:bd:bd:39:4c:98:36:eb:
         7e:75:81:bf:0d:ca:29:56:98:04:c9:4d:e7:0a:b7:e9:07:bb:
         97:be:fe:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:03:50 2026 by rpki-client