Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
File:                     4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft (raw, json)
Hash identifier:          GGAGI3DYRwOxr3EAFeNyWv9HhuxifHsje+LfAdNnVM0=
Subject key identifier:   92:93:ED:D9:F8:7A:40:CF:B0:56:17:FF:CE:4D:F8:FC:01:A2:73:B7
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Certificate issuer:       /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial:       019F8F7F796EBD88CFD203C65AB8D0D2CD6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
Manifest number:          1294
Signing time:             Thu 23 Jul 2026 15:02:03 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:03 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:03 +0000
Files and hashes:         1: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl (hash: WDh+Be93b2p4AuzU2Y8LJKS9v4xqdD/Cvj94qSgFNYc=)
                          2: DN7ZfyoDKyJXUkj1EC6pJ1I4DkQ.roa (hash: bY5wbQ98GBM8x3W74YxZg+qztKUip/POgTeTbjHHMZI=)
                          3: p6fcvhDFcw8Oq1fwe3BO8PpHz3U.roa (hash: 9OCWuqN8cdwaFpWbH6S/GLnMMyvjYjVk46dDsDdpR/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:79:6e:bd:88:cf:d2:03:c6:5a:b8:d0:d2:cd:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
        Validity
            Not Before: Jul 23 15:02:03 2026 GMT
            Not After : Jul 24 15:02:03 2026 GMT
        Subject: CN=9293edd9f87a40cfb05617ffce4df8fc01a273b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:98:96:d5:ec:12:9e:e3:de:59:c4:30:f9:
                    61:7a:68:6f:64:6b:a0:97:ac:f0:3d:47:fc:2f:bd:
                    26:b1:30:49:03:8d:79:ee:6c:9f:56:50:72:4c:7a:
                    a4:61:64:88:83:a4:f7:cf:67:9f:6e:d6:f0:4c:c2:
                    cf:b7:08:34:d3:71:66:9e:82:60:58:97:dc:aa:6a:
                    74:de:09:54:9e:9e:43:18:31:8e:0c:7f:27:3e:af:
                    69:20:8b:9e:0b:c9:30:0e:66:f4:88:e2:bc:f7:3d:
                    2f:5a:8f:36:11:96:e0:78:82:6d:f7:47:d9:c8:8c:
                    21:0e:78:f8:e7:50:ab:7d:a9:b8:b6:7a:73:78:21:
                    0d:2e:e0:37:20:05:f3:19:f3:a2:66:c6:2e:3e:aa:
                    5f:e7:22:7c:28:17:79:0d:8d:f7:ca:1e:20:18:3b:
                    00:9f:26:74:a0:dd:24:e9:50:5c:dc:1e:ca:4c:6b:
                    34:1c:35:ba:84:a8:f5:22:9f:69:65:c3:cd:b1:ad:
                    21:0b:65:e3:45:7f:bb:e1:eb:a9:92:55:55:1e:bc:
                    25:f8:a4:6b:9b:2c:46:b9:9b:6f:5d:b9:92:23:61:
                    c2:69:b7:31:24:2b:40:27:76:46:e3:a5:4a:26:25:
                    29:9e:45:97:ba:54:04:7f:bc:7c:33:af:6c:da:12:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:93:ED:D9:F8:7A:40:CF:B0:56:17:FF:CE:4D:F8:FC:01:A2:73:B7
            X509v3 Authority Key Identifier:
                keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:cc:bc:ed:ee:a8:1a:2e:cd:39:9d:13:c0:2d:07:d7:76:7f:
         d3:f8:e4:64:91:67:de:58:3f:7d:88:c5:f8:42:c2:51:07:26:
         5d:a2:e6:dc:ce:d9:3d:49:bf:b6:c9:25:e5:b6:74:19:37:91:
         ae:d8:3a:b7:41:55:55:d6:63:01:8a:03:80:d7:ba:05:d4:06:
         3f:61:09:24:f8:27:f8:fc:64:55:c7:b0:c0:d5:fc:81:de:17:
         86:db:ab:d8:9c:5d:5f:69:4d:1d:a0:7b:34:31:ca:d9:06:f1:
         d5:5a:00:3e:26:49:08:65:9f:a2:76:f9:36:bc:29:19:63:37:
         01:5c:d7:af:95:ae:a5:5e:07:9c:58:6a:3c:a0:cd:b2:57:39:
         66:ad:f3:41:02:bd:75:c7:6f:26:1c:36:d6:59:82:7e:ce:64:
         94:76:fd:fa:76:1b:ef:59:70:11:e7:72:1d:54:ec:ec:d4:fe:
         9e:3f:79:61:aa:d9:a5:78:3b:35:ba:b3:5a:24:b0:16:59:98:
         3c:20:2b:8a:2e:72:34:74:d0:c6:1c:7a:2f:8a:27:9c:54:bc:
         b5:78:2c:0f:97:95:f0:0a:a8:da:81:ae:93:54:ce:85:c2:b0:
         54:32:bb:70:0f:50:fe:0b:f5:c9:12:82:61:74:5f:5e:cf:9c:
         2d:02:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:04 2026 by rpki-client