Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
File:                     4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft (raw, json)
Hash identifier:          EA1UA7Jl8KFcPAhpIQIu3cNFRc9+Z258sWUaIno1f2A=
Subject key identifier:   A7:2A:F5:45:E8:CA:B1:BD:4E:A4:99:E0:EB:74:42:BA:52:8F:10:43
Authority key identifier: E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03
Certificate issuer:       /CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
Certificate serial:       019D9A3F13075FDD45050DC813955BD22E1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
Manifest number:          15FD
Signing time:             Fri 17 Apr 2026 07:01:58 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:58 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:58 +0000
Files and hashes:         1: 4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl (hash: 781zCOizFIG428FHEgRYNPlYAo3ilsoMkRF9FSiXxv8=)
                          2: 8OYdUjrlp_CiIecRp3Rh15sihI4.roa (hash: u8J8QYG/m1scGBBJx74Dh3l5h4W60dwIobWX8cGTUE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3f:13:07:5f:dd:45:05:0d:c8:13:95:5b:d2:2e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
        Validity
            Not Before: Apr 17 07:01:58 2026 GMT
            Not After : Apr 18 07:01:58 2026 GMT
        Subject: CN=a72af545e8cab1bd4ea499e0eb7442ba528f1043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:3c:62:8b:b1:5e:b4:5e:57:5d:99:12:16:
                    2f:9e:e4:43:b3:ad:31:6d:f8:cd:9e:75:81:5d:ea:
                    af:73:72:de:da:41:8d:ab:53:35:f8:9c:f1:ff:54:
                    18:0f:35:b0:ee:30:6b:d4:e5:7e:7c:4e:d7:ef:4f:
                    21:0a:d2:19:3b:e7:b5:b1:3b:b0:14:b8:e3:4c:a6:
                    1a:48:51:e8:d7:be:04:28:d4:75:84:44:52:4a:9f:
                    a8:b2:26:fb:86:83:42:9e:f9:9d:ae:b5:c5:59:fd:
                    08:51:0a:5b:f3:89:59:b1:ec:a2:29:f4:ce:06:3a:
                    5c:03:1b:03:15:57:99:fb:6a:c6:30:67:20:55:38:
                    9d:eb:48:a0:22:ad:04:20:7e:7a:6d:91:fc:94:31:
                    42:fd:83:12:99:2e:5a:eb:a2:87:27:f6:87:53:f9:
                    16:14:dc:71:30:1f:d7:5f:96:32:4e:4a:43:1a:b7:
                    03:50:f2:dd:68:b7:a6:69:8e:58:a6:48:c7:d8:24:
                    fe:23:ba:25:19:d8:9f:c2:84:f5:3a:1d:52:79:2a:
                    f9:4c:96:47:bd:d1:02:9d:13:86:63:b9:f1:31:23:
                    96:2c:0a:7e:db:ce:31:eb:98:9f:97:05:d2:79:80:
                    ce:cb:a2:75:31:35:86:ca:b2:b4:2f:1a:7e:4f:eb:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2A:F5:45:E8:CA:B1:BD:4E:A4:99:E0:EB:74:42:BA:52:8F:10:43
            X509v3 Authority Key Identifier:
                keyid:E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d4:d7:05:5e:a4:93:c9:99:9e:0c:19:40:78:92:68:55:d1:
         52:58:f6:e8:3e:c2:d4:c3:7b:36:19:3b:47:dd:f9:35:77:0a:
         bd:69:48:ca:56:74:d5:70:4f:07:b8:4d:fd:b2:7d:01:33:5a:
         31:dd:7e:82:73:65:84:64:79:bd:f2:65:c5:3c:80:a9:89:de:
         10:1e:99:d2:0e:f1:38:d6:35:05:56:99:ed:2c:dd:d0:40:cb:
         dd:a7:12:f4:a1:cc:d6:a4:50:60:90:49:b4:5b:d9:57:3d:ef:
         ec:fe:9e:88:ef:00:78:c8:d0:25:29:04:86:4d:bb:ca:b5:66:
         4a:1b:0b:be:a8:5c:c5:fb:e8:63:52:76:7f:cb:3c:39:94:1b:
         ff:d4:8b:11:4a:b6:95:cc:ce:33:fa:a9:99:02:c5:71:49:5d:
         31:6c:bb:41:52:13:ed:35:c0:2f:4f:5c:ed:57:51:44:19:d6:
         4b:99:d8:b4:59:cc:8e:26:8c:7b:f8:b5:c8:8d:64:61:54:05:
         e3:15:7a:0d:f6:ff:44:be:fc:c8:b0:b7:c5:fe:26:97:38:87:
         50:4c:db:98:00:d5:5d:d8:cf:23:fa:24:29:07:0c:92:ab:a9:
         4e:89:be:ec:b4:d5:7a:f7:f9:04:5b:f4:90:5d:5a:59:87:d2:
         81:42:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:55 2026 by rpki-client