Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File:                     4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier:          JSiAeVJ9L4zUqR1qloWDgpqSIsmETHRKIlVrspvfdSQ=
Subject key identifier:   F5:A1:C7:23:C4:1B:9A:44:D6:66:8B:7F:35:44:25:F8:39:BB:AC:B6
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer:       /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial:       019FA9ABDAECA748EC39D3FD28717E0D655E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number:          16E1
Signing time:             Tue 28 Jul 2026 17:00:39 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:39 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:39 +0000
Files and hashes:         1: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: XEkSYf6p66eb3A88e1eUUwTVf8/CyMeo2YKDB10hFSM=)
                          2: BdqGs3R6xCnjEwShLrflyZwaVp0.roa (hash: RR88JIqbu0K/mTZcvwGkA42FVlGztgnaWCqdDikFkjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:da:ec:a7:48:ec:39:d3:fd:28:71:7e:0d:65:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
        Validity
            Not Before: Jul 28 17:00:39 2026 GMT
            Not After : Jul 29 17:00:39 2026 GMT
        Subject: CN=f5a1c723c41b9a44d6668b7f354425f839bbacb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:e4:71:c2:de:48:1d:d2:39:de:c6:ae:b3:
                    ac:f5:c9:c7:0b:db:3f:b6:40:fa:8e:97:9b:dd:20:
                    d5:88:cf:27:ae:46:f5:31:01:6a:6b:07:dd:ff:63:
                    c4:89:4b:07:7d:69:23:60:1b:27:34:cd:e4:96:16:
                    99:bd:9c:a6:65:e0:b5:97:cf:e3:2e:74:78:b7:f7:
                    c0:e0:08:1a:59:3e:5e:6d:54:e1:f1:a2:fe:c5:30:
                    76:5b:52:67:e5:09:69:5d:24:f7:04:71:70:d9:5e:
                    bc:a5:3d:d6:d9:81:c5:6a:1b:ea:ef:61:a6:c2:70:
                    6a:bf:22:15:14:ca:9b:33:07:ba:92:8a:23:c0:77:
                    3f:c9:a8:a4:56:a9:f3:4d:23:c5:10:27:44:ba:d5:
                    9e:de:b5:79:f8:d9:a2:11:53:0d:9a:1c:1d:e8:7c:
                    6a:19:ff:e8:dc:fe:2e:63:00:52:ff:a6:c1:23:66:
                    cf:31:0c:5b:0a:1c:c2:29:95:b3:94:a3:72:ef:61:
                    17:b1:7d:16:14:c1:65:b0:d5:f7:e1:ed:5d:11:17:
                    27:2e:0c:03:df:4c:2c:02:2d:85:39:75:1a:a2:09:
                    55:5b:79:a8:c6:bd:44:8e:30:61:e2:1c:55:71:a4:
                    b4:fe:fe:41:0b:d3:cd:e8:50:ab:e6:d5:32:c8:82:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A1:C7:23:C4:1B:9A:44:D6:66:8B:7F:35:44:25:F8:39:BB:AC:B6
            X509v3 Authority Key Identifier:
                keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:65:02:e0:a2:66:c4:47:ea:12:45:08:b9:90:73:6f:80:81:
         ba:f0:00:65:0d:a1:be:ae:ff:d2:54:1d:57:87:00:fc:2f:a9:
         93:77:75:0a:a7:a6:e9:86:28:41:15:58:f6:38:da:ac:68:98:
         18:77:ff:f8:bd:96:49:9d:f5:88:93:dd:c8:2a:35:20:ea:34:
         1b:8b:6c:ac:9c:bc:32:fc:36:6c:f4:40:7b:bd:60:42:cf:6f:
         77:69:6f:d9:c3:c1:e3:b6:9f:ad:2f:18:b3:02:99:65:70:f6:
         35:1e:6b:47:6f:04:69:4c:d1:ef:5c:93:22:24:85:cc:7a:2f:
         6c:63:96:76:80:5a:b8:50:84:b0:cd:94:8f:1b:b5:9f:6a:d4:
         f2:eb:de:45:93:cc:72:c8:04:5f:76:0b:b0:d5:4f:e3:b6:26:
         d9:47:90:48:dc:6e:1f:9c:97:49:76:80:1a:ea:ce:35:bb:b4:
         32:8f:c0:97:e1:f2:73:ca:01:6c:1e:f1:b2:93:dc:63:a7:b0:
         2a:79:de:f3:66:d7:72:0f:78:10:4d:2e:67:ce:df:dd:32:ef:
         86:cf:52:ca:66:08:aa:dc:ca:2f:42:2c:58:3c:9b:0b:8d:d7:
         de:d6:40:90:01:fb:b5:fd:23:4f:71:e7:d9:00:18:cf:bd:1f:
         fd:b8:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:42 2026 by rpki-client