Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File:                     g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier:          w22vsv7gPmiyIIv8FYSrYY3N3rTB2bL4XdBMDTvCCps=
Subject key identifier:   AF:7D:09:B5:9D:E4:37:A5:A5:62:67:5A:A0:7E:D8:D5:99:43:27:C1
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer:       /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial:       019FACAD53E896233E4587FB18E8AAC92E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number:          11E4
Signing time:             Wed 29 Jul 2026 07:01:08 +0000
Manifest this update:     Wed 29 Jul 2026 07:01:08 +0000
Manifest next update:     Thu 30 Jul 2026 07:01:08 +0000
Files and hashes:         1: FiY50YnA9bU0VuqY_xB52WjpoQU.roa (hash: HLxKWl8h4/WN5MAo6nKsQwk0EYZk/ybbMsE7JxuTVx4=)
                          2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: f0qHsXInvysqWGnkewFqFq6tz7r6xnJ+5JtCkM0qjw4=)
                          3: gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa (hash: KkGcwa9MsEC5A+egSiEpb4oola97UKCGunqwzbxcwVw=)
                          4: q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa (hash: pJZycJNT80sKDVuDlXh5Ajg519IZ1fSYiagFEg9PFpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:53:e8:96:23:3e:45:87:fb:18:e8:aa:c9:2e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
        Validity
            Not Before: Jul 29 07:01:08 2026 GMT
            Not After : Jul 30 07:01:08 2026 GMT
        Subject: CN=af7d09b59de437a5a562675aa07ed8d5994327c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:91:0b:9d:62:ac:7a:8c:47:ab:48:d1:ef:5d:
                    c8:ca:4a:0a:da:3d:70:d4:1c:96:fe:29:57:3c:49:
                    fe:4a:5e:30:4d:44:40:37:07:ac:7f:89:f3:50:00:
                    f2:a7:e7:eb:7e:47:3b:d4:b3:b2:3a:1a:43:c7:27:
                    0a:b2:51:64:7b:a4:23:a1:79:85:f9:6d:89:de:df:
                    a8:da:82:cd:4c:35:af:a7:44:1e:f0:e1:16:e4:8b:
                    30:ef:c6:44:95:f1:e9:e7:cd:3b:a7:fb:88:7d:fc:
                    4a:26:88:0e:5f:b4:f8:ab:78:70:61:5c:30:2d:94:
                    7f:9a:b4:08:3a:0a:b2:8d:a3:b7:e5:68:6b:75:26:
                    a1:16:e4:be:85:3a:f0:33:73:9e:27:d4:7f:9c:58:
                    14:ca:27:c6:30:ea:27:dc:41:e5:6c:ca:eb:d7:9f:
                    c5:4d:0b:42:64:1d:49:83:e2:57:0c:79:f4:3c:b1:
                    8a:43:26:38:48:c4:08:30:fc:ce:9a:c8:8b:87:0c:
                    c0:10:87:eb:aa:3b:b2:aa:fc:d1:af:e5:40:d0:35:
                    fa:e7:3f:55:12:3c:2c:3a:a3:c5:5f:cc:f1:ff:fb:
                    c7:c7:6c:dc:18:d4:96:43:02:3b:f0:a9:68:36:94:
                    0f:a6:00:30:ec:db:2c:43:e3:36:89:64:15:f2:bb:
                    c0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7D:09:B5:9D:E4:37:A5:A5:62:67:5A:A0:7E:D8:D5:99:43:27:C1
            X509v3 Authority Key Identifier:
                keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:af:91:e3:a7:49:6e:7b:01:6f:67:b6:83:90:8c:b4:b2:3d:
         94:67:09:53:88:c9:2a:fe:c6:ea:ac:2d:2d:48:11:d8:33:e5:
         e0:ae:9e:27:93:c6:17:e0:76:de:ac:52:34:c2:f1:c7:4b:96:
         52:08:00:e2:ca:20:61:24:74:12:b0:9f:83:6a:23:89:bb:67:
         a9:53:00:c5:ff:cb:45:f2:40:16:7f:c7:58:25:8f:e6:22:85:
         b5:8a:0d:8d:70:6e:a6:16:25:f0:06:df:b1:07:d7:62:16:00:
         e8:04:d7:37:ec:c8:2b:40:8b:41:3c:29:a3:31:4d:f3:08:2e:
         16:e3:d1:32:5b:43:0f:15:fb:3c:af:a7:54:8b:9c:f2:14:92:
         c0:0f:95:4a:db:21:c4:de:1a:9b:1a:25:45:4c:9c:f2:07:1c:
         fe:26:52:74:f2:21:d7:b4:93:11:0f:7e:40:f2:9e:2c:58:4a:
         d1:12:9d:60:49:3e:b2:80:7d:2c:85:24:75:18:25:d1:45:72:
         33:b8:39:c3:a0:d3:99:b1:98:94:73:7e:7e:3d:ae:e1:98:41:
         b5:16:4f:70:c9:62:c3:f9:22:cb:d1:23:73:7c:04:4f:c2:7d:
         3d:7a:02:57:0b:7b:7b:0e:92:39:59:0a:b5:ed:68:3e:2b:74:
         14:3d:96:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:32 2026 by rpki-client