Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File:                     4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier:          u/Wee36HCga5PJ4lfnvDJCwWYaKYC3ncptkdadity4g=
Subject key identifier:   4E:A3:DC:4E:3E:17:98:99:A9:83:C2:EC:FB:7B:9E:1D:37:8C:BF:D0
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer:       /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial:       019EBEB65F896C66FC7BF1DDC1FC1DE7AC85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number:          0ADE
Signing time:             Sat 13 Jun 2026 02:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:23 +0000
Files and hashes:         1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: odz1c4QOAEE4ZF+99DG8slnW88CVqHNX+/UE1YU8o/k=)
                          2: YWMzYYdq1V4GAPZh68WrmEyhVfI.roa (hash: L4cChRKUEEfDnkwJCOfQ9K/LTDSkENg728c4ezgiFqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:5f:89:6c:66:fc:7b:f1:dd:c1:fc:1d:e7:ac:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
        Validity
            Not Before: Jun 13 02:01:23 2026 GMT
            Not After : Jun 14 02:01:23 2026 GMT
        Subject: CN=4ea3dc4e3e179899a983c2ecfb7b9e1d378cbfd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:31:d2:89:65:69:9d:e1:5c:27:78:34:44:
                    f3:e3:b2:1b:72:d1:9f:7f:e1:88:a2:f8:12:78:d4:
                    38:04:c8:23:9c:f4:91:d1:f7:af:05:c6:6a:b7:1e:
                    b9:85:95:ed:40:66:c9:83:fd:f7:04:87:3f:4f:03:
                    d4:e6:bc:4d:b0:ad:db:27:1d:e6:8e:aa:c8:95:99:
                    94:ef:aa:d4:db:74:51:df:ee:8e:6e:ed:4e:8c:a8:
                    a7:06:2f:19:f2:12:71:dc:ed:51:b8:d3:fd:b2:7f:
                    f8:94:b0:10:32:77:5a:96:a3:a0:8b:d3:3d:d1:aa:
                    c4:d2:52:7d:f7:2f:d3:66:b5:e8:4b:e2:69:ee:cf:
                    9e:67:6f:b6:5d:1d:f6:58:36:85:e7:9a:31:76:9d:
                    6d:ef:27:2f:f8:0c:d4:09:7b:6f:80:78:fd:3d:13:
                    28:2f:6f:cd:96:34:2c:84:80:db:ef:36:12:a4:83:
                    92:9d:c8:6b:ea:d2:71:7f:b8:12:24:0f:40:7b:48:
                    2e:ac:32:c0:3e:70:34:2f:6f:0c:42:4d:fb:7e:80:
                    02:8b:9e:10:90:9f:af:11:a4:a8:4c:0d:80:02:c3:
                    b7:30:04:47:e8:8b:f1:83:88:56:c0:8d:47:d7:ef:
                    d6:a3:d3:4a:47:fd:4c:f1:ba:f4:3d:4b:ba:55:fe:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A3:DC:4E:3E:17:98:99:A9:83:C2:EC:FB:7B:9E:1D:37:8C:BF:D0
            X509v3 Authority Key Identifier:
                keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f4:7a:ae:fe:d6:f2:76:a4:75:c3:55:cb:77:cf:a7:0b:2f:
         9d:36:92:17:9b:47:7e:81:32:a0:00:fb:c2:75:8c:7a:42:a3:
         a1:32:9a:40:fa:81:df:a7:13:97:7a:8e:55:c5:18:66:b5:98:
         fe:62:38:d3:1e:9c:7a:39:99:bb:86:62:b8:c5:ed:3d:76:cb:
         94:90:98:85:e8:4e:de:56:72:ad:07:99:47:34:27:8d:06:38:
         73:6f:c1:2d:6a:27:e1:46:28:a7:62:72:02:71:13:e3:0e:43:
         01:8e:00:ec:ed:4a:22:5f:b0:92:3b:8c:4c:c4:7b:61:1f:c8:
         50:2b:1e:f7:a7:7b:58:a4:9b:fe:15:0b:05:8f:92:a6:c6:d5:
         e2:eb:3f:89:db:4c:59:5e:26:42:07:3d:36:32:37:a7:b1:97:
         21:d9:58:fa:fb:d1:12:1b:8a:84:19:4d:2b:bb:3b:2a:a6:c2:
         33:2e:df:c2:07:82:da:ab:dc:83:1c:ed:88:4c:07:f1:b8:26:
         44:c1:3c:06:f0:47:b4:a3:07:70:ff:9b:82:30:62:50:7c:85:
         3f:9f:7d:60:e2:7c:a6:8f:65:8f:15:14:2f:ec:b7:c2:8b:22:
         e0:13:80:e1:00:da:d8:a6:84:9f:19:82:81:1f:55:56:53:29:
         fd:00:32:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:19 2026 by rpki-client