Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.mft
File:                     RhTuNEGQGX9UPnHNb05PDidRXV0.mft (raw, json)
Hash identifier:          OeHZ1hlHrAjWBhDedxLGaJ5KM+xKsqyGAsifH5VZFiE=
Subject key identifier:   46:1F:4B:74:68:58:AD:66:8E:B3:0B:96:6E:B4:78:04:FF:38:4E:DD
Authority key identifier: 46:14:EE:34:41:90:19:7F:54:3E:71:CD:6F:4E:4F:0E:27:51:5D:5D
Certificate issuer:       /CN=4614ee344190197f543e71cd6f4e4f0e27515d5d
Certificate serial:       019FA89A67207D15C716A2E6E1E411A82F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:58 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:58 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:58 +0000
Files and hashes:         1: 1-RS3CAUjad02YIbiVU1F5-819y0.asa (hash: 1BubvCrQ2zsMtupe0NwYXlBK8aNp/ATG1ilUxTldYBs=)
                          2: 3Xi5tv4f9ZTp-NVxa7r82OrMxQ8.asa (hash: tgVHdTeJUIAlqKv0GSTC5YQUxy31ezVId2JQeEf5oTc=)
                          3: RhTuNEGQGX9UPnHNb05PDidRXV0.crl (hash: r3Izm6Uspwzar6oe3ET6YIHgLn8Bt7/OJldpwRX5C8c=)
                          4: UbteF0EGCdi6gfORL30dQO-_S4U.roa (hash: ackfEEjxOVy94oJBRuk+2oKVVk+t5G4fWLvdaqS5jFw=)
                          5: Vl8uczSnLZvnr4hJxmOltHRV27k.roa (hash: HxK/vDt6JA/Pn8tCf3kJJHpGggMAkjgi5391zitvHTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:67:20:7d:15:c7:16:a2:e6:e1:e4:11:a8:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4614ee344190197f543e71cd6f4e4f0e27515d5d
        Validity
            Not Before: Jul 28 12:01:58 2026 GMT
            Not After : Jul 29 12:01:58 2026 GMT
        Subject: CN=461f4b746858ad668eb30b966eb47804ff384edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:a3:7e:b1:47:2e:a9:dd:0b:53:4c:a3:2f:
                    d4:1f:31:e4:2a:61:da:86:a0:70:a6:ec:9e:46:d6:
                    ec:15:c6:49:82:4f:b7:d2:40:34:1d:85:f1:b3:a6:
                    7b:2e:72:36:a3:2a:5f:d6:f1:0a:bc:f4:84:3f:b6:
                    7d:8a:9e:8b:af:77:fe:d4:fa:77:0c:ae:ce:5d:3a:
                    4f:df:2c:32:5e:02:a5:99:2d:2e:15:f1:6a:f5:e5:
                    fc:f0:d4:f7:15:91:fa:45:4f:72:05:3f:f1:56:6c:
                    e7:2a:f4:82:00:53:a4:51:75:17:46:45:f4:c7:45:
                    3a:0d:cd:69:87:21:ac:9a:3e:f7:27:01:d2:31:43:
                    86:a5:7d:cd:2f:18:b4:d2:3a:bf:2b:cd:61:1d:09:
                    36:88:93:e5:e1:36:23:3b:d5:d3:64:f8:de:f9:31:
                    3c:12:59:9b:9a:40:97:e3:36:01:8a:cd:85:13:5c:
                    76:5c:8a:84:d2:8f:13:e7:85:80:c9:80:9d:a8:88:
                    02:ce:87:8f:5c:7b:9d:54:c8:f0:7d:41:1e:07:1e:
                    96:0f:87:7e:ab:1e:e0:01:cf:7b:62:1e:bb:d7:77:
                    9b:f5:cf:89:6a:1a:23:12:91:2a:a2:55:db:04:d3:
                    28:51:d4:29:40:35:93:c2:30:e6:ff:66:34:82:10:
                    dd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1F:4B:74:68:58:AD:66:8E:B3:0B:96:6E:B4:78:04:FF:38:4E:DD
            X509v3 Authority Key Identifier:
                keyid:46:14:EE:34:41:90:19:7F:54:3E:71:CD:6F:4E:4F:0E:27:51:5D:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:70:8f:00:dd:16:4e:a8:a2:fc:29:25:57:6f:f3:a0:f0:a4:
         d7:02:aa:0b:9d:81:7c:30:e6:5e:67:3d:7a:46:4a:99:2c:10:
         0e:fd:cf:e8:33:17:22:81:a1:c5:43:8e:2d:b5:e4:b3:0c:4a:
         26:ba:f7:33:b1:59:32:13:c7:63:bc:23:19:29:e2:b8:05:3f:
         bb:9e:c6:0b:76:0d:61:5e:a9:bb:ed:57:ce:31:98:db:cb:ff:
         0a:2d:bd:71:57:db:60:bc:8a:18:b8:e5:eb:c8:8d:2e:78:6d:
         ff:bd:c9:4a:6c:82:c5:08:14:8b:68:ac:82:ed:e4:ff:7d:a7:
         6d:e9:b9:34:8a:7b:63:55:ac:ed:de:14:ed:55:b8:8d:c8:7a:
         cf:33:7e:6b:9a:85:24:8d:d4:8b:b9:f4:c1:bc:c7:a3:91:5e:
         bb:2b:e1:dc:62:6b:03:4f:ec:fc:94:75:5f:4a:f8:33:f7:88:
         ff:5d:fa:f6:a5:d3:de:71:9f:c5:27:c9:2d:aa:e1:24:71:9d:
         1d:3c:e6:a1:83:fc:8f:0b:01:5e:d3:cc:5a:87:65:8b:0a:d7:
         2f:66:15:98:6e:65:24:dc:a2:ce:3e:84:7f:2f:fc:86:88:3d:
         6e:56:e9:61:ed:49:3a:db:d7:6e:eb:68:a0:94:af:5f:bb:56:
         b6:cf:c9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:47 2026 by rpki-client