Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File:                     4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier:          BlCia6Lx1IWiDTVGX5Tg6g8yneSrL2Exo6DLa5RkF4A=
Subject key identifier:   D3:0F:91:4E:3B:52:77:57:20:BF:B4:AD:AF:CB:FB:A7:97:D5:AA:26
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer:       /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial:       01A0CCD9BFA64705C3DCB737DDE784A4C96A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 06:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 06:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 06:00:17 +0000
Files and hashes:         1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: 86Lcnw/EFfIqaIsys+P4snq8C5G2bohR74q8y0jjJWw=)
                          2: FvV4UNNN1I3u5_f_mw8uvFShvcA.roa (hash: qoCza9pR6RXvspT8eRTV0uWK0mL3e+fmf3gOpC7a0Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:d9:bf:a6:47:05:c3:dc:b7:37:dd:e7:84:a4:c9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
        Validity
            Not Before: Sep 23 06:00:17 2026 GMT
            Not After : Sep 24 06:00:17 2026 GMT
        Subject: CN=d30f914e3b52775720bfb4adafcbfba797d5aa26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:b4:2f:87:97:e0:f6:1c:25:1f:64:3f:6c:
                    08:30:5d:e4:15:33:8c:f9:b7:a1:05:7f:95:39:12:
                    72:dd:d1:4c:ac:04:39:c5:f2:b2:f9:df:67:3b:20:
                    47:6f:64:54:8b:bc:16:b6:97:1f:94:4d:55:c7:ef:
                    10:c3:22:11:bb:14:69:f7:51:da:a7:2c:0b:a4:84:
                    29:d2:d4:91:2f:8a:88:ee:e4:9e:77:95:47:d6:57:
                    22:bd:8e:80:60:61:bf:05:6a:37:3d:4b:cb:e7:5a:
                    d9:13:2a:b6:9a:f9:a1:02:c8:d0:4b:e9:7f:8f:a8:
                    0f:24:f4:ed:e9:73:c6:99:6c:b5:00:45:32:af:93:
                    60:5e:23:39:c7:a4:b7:24:8d:e5:4c:20:b3:ae:46:
                    eb:c2:c7:49:f0:91:05:1a:39:aa:93:6f:c4:da:e5:
                    42:a5:9d:92:ec:9d:61:00:0c:6a:1f:98:90:8f:c5:
                    15:61:67:0f:17:fc:b4:82:17:78:4a:db:c2:09:0a:
                    1d:d0:85:21:60:5e:38:50:c7:9c:e7:59:a5:40:65:
                    56:7a:42:07:39:12:a3:05:3f:80:0b:79:2c:61:df:
                    9e:75:4f:43:83:03:93:5c:07:0f:17:ba:2f:fd:49:
                    1e:1f:6a:86:a2:cc:a3:3b:e2:c0:37:a2:4e:9c:55:
                    c5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0F:91:4E:3B:52:77:57:20:BF:B4:AD:AF:CB:FB:A7:97:D5:AA:26
            X509v3 Authority Key Identifier:
                keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:97:7c:f1:a0:08:57:bf:f5:b3:d1:89:1d:98:0f:1d:ce:bf:
         9c:f2:f9:77:ed:fb:b9:7a:6d:3e:0c:fc:b6:bc:6d:1d:b5:fe:
         3a:05:f9:09:4b:fc:12:df:8c:30:f2:63:0c:9c:33:95:4f:08:
         c2:0c:3b:b7:c6:d2:f2:8c:68:f1:8c:eb:ed:17:68:5a:1c:b7:
         3e:c0:4c:68:7e:b8:9b:f6:39:b7:d6:32:23:79:6e:35:3c:9f:
         8e:8b:fe:ac:b4:df:bb:62:f4:74:55:96:5a:98:35:6b:bf:32:
         ab:f0:27:25:c3:bb:22:7c:64:96:b4:f6:ec:65:48:9e:3e:24:
         e9:6e:04:b6:54:1b:1a:4e:52:c1:8f:f3:47:f6:cc:51:f2:2e:
         ca:6c:2d:09:a5:3d:24:98:cf:6f:55:e7:d8:b5:f9:8f:1d:7e:
         10:9c:6c:d5:44:24:c4:b5:8d:18:80:09:c1:33:13:69:d2:72:
         13:87:83:58:d0:a0:77:8c:07:c8:5b:bd:2f:d3:3b:c6:b1:a2:
         49:30:0f:4c:b3:d0:71:13:5e:ad:08:c6:4a:38:8d:b1:a9:ac:
         99:a7:ce:2f:d1:95:1d:52:c9:55:bc:3c:be:44:b5:17:86:bd:
         b9:43:f4:ae:16:ad:0b:54:84:4f:4d:55:5d:08:83:24:b1:fe:
         87:9f:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:53:55 2026 by rpki-client