Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File:                     4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier:          cP+93g6h6u7g069I2xfoMtcRsj3rbeAOP+yWOBWSqyA=
Subject key identifier:   38:B6:F1:59:30:E8:2A:2C:F2:D3:25:F1:54:41:76:A8:D8:D0:3A:6A
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer:       /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial:       019F905A8FB91B05B68780F20403E17EED90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number:          0925
Signing time:             Thu 23 Jul 2026 19:01:21 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:21 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:21 +0000
Files and hashes:         1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: upS92f1L18s5ymh7R3X10kouHPKBMkpoaoA4mjze9Q8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:8f:b9:1b:05:b6:87:80:f2:04:03:e1:7e:ed:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
        Validity
            Not Before: Jul 23 19:01:21 2026 GMT
            Not After : Jul 24 19:01:21 2026 GMT
        Subject: CN=38b6f15930e82a2cf2d325f1544176a8d8d03a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b8:f6:47:6e:2e:2a:13:f4:d4:47:bb:de:0c:
                    2a:c2:de:65:76:43:2e:0f:cb:9f:e5:c6:c0:d0:7c:
                    d1:0b:de:3f:34:9b:23:dc:bf:d0:a1:9d:49:15:0f:
                    f2:87:c0:70:ef:a1:b8:ea:7a:4d:ec:f0:99:93:02:
                    db:af:04:2e:3d:a1:db:2f:f4:e5:dd:a6:c6:df:74:
                    fb:0a:ab:56:e5:97:4b:eb:6d:3a:02:a7:e6:6f:f7:
                    0a:3c:a1:f5:55:fc:20:d3:88:73:57:d2:c3:98:e5:
                    4a:9b:81:65:20:15:d8:ae:ba:5f:1d:10:62:4b:e2:
                    77:71:f5:16:91:6b:51:9e:b9:6c:48:28:cc:55:da:
                    9d:a5:9a:95:b9:c0:af:69:94:86:b8:48:31:28:38:
                    27:ab:8d:42:d2:cd:25:67:03:05:c8:3f:d6:82:0a:
                    a0:97:fa:52:c0:15:74:72:a3:52:4f:c7:03:58:96:
                    8b:1c:b7:54:77:14:97:c3:0c:a4:3e:6d:64:9d:e7:
                    2d:a2:73:87:7a:b6:94:44:ab:4b:c5:ef:82:02:6e:
                    b0:72:42:33:2d:f0:27:46:c4:92:5b:53:30:74:6f:
                    d4:67:cb:28:26:e1:8c:b2:78:50:3e:e3:32:61:9d:
                    3b:1d:8f:fe:4f:59:bb:e6:b8:61:16:df:a7:00:01:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B6:F1:59:30:E8:2A:2C:F2:D3:25:F1:54:41:76:A8:D8:D0:3A:6A
            X509v3 Authority Key Identifier:
                keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a8:b8:97:9f:c7:7b:e1:0f:87:c8:c5:9f:b8:7d:7a:64:c7:
         20:d7:a6:8e:a4:73:f8:ee:55:5c:c6:08:c3:91:c8:9d:91:36:
         2f:30:14:d2:70:c8:6a:a7:6d:17:d0:38:e5:b6:7b:e7:7d:87:
         93:d3:9d:d0:c6:b7:5a:2c:54:c0:62:f8:a3:19:b2:5a:6e:e8:
         c5:16:89:2c:de:97:6b:a2:2d:ef:b4:0f:24:d9:e5:97:2b:63:
         d6:6c:c3:f8:0e:e0:61:aa:cf:66:7c:94:a0:5b:32:97:3c:10:
         9d:25:e7:60:74:42:b8:8b:ff:6d:bf:5f:09:33:df:c4:61:d2:
         38:b8:6b:18:f0:06:85:7b:02:b4:ee:1a:f5:a2:26:b6:a4:cf:
         a6:bd:8f:bd:43:56:74:a6:2d:b7:46:12:8c:71:85:6b:41:4b:
         0a:21:40:2c:96:e6:a8:c9:e7:0e:42:ab:19:5d:de:5e:09:ac:
         f0:27:21:8e:c6:58:64:25:6d:03:d1:9d:01:a1:10:4c:15:1a:
         f2:0f:6a:af:2b:4a:f5:c6:99:8a:7d:7c:0b:44:ac:c6:29:03:
         0a:a4:3e:29:57:bf:99:93:dd:11:6b:a5:3f:5e:5b:51:1b:cc:
         41:9a:94:c9:b2:c5:fd:0d:df:ec:73:34:e5:06:19:e7:ac:35:
         2f:ac:c1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:24 2026 by rpki-client