Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
File:                     4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft (raw, json)
Hash identifier:          Q9HrT9QMzNQGPei0DrdWvPCpIYo8Z9EZ9/LodnbDpbI=
Subject key identifier:   E8:21:48:FB:D8:75:67:D1:BA:D2:B4:B0:09:E6:08:69:E1:B2:63:80
Authority key identifier: E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03
Certificate issuer:       /CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
Certificate serial:       01A0D8A80DAE6EF5C10BAD1A489D691FD328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
Manifest number:          17AB
Signing time:             Fri 25 Sep 2026 13:01:27 +0000
Manifest this update:     Fri 25 Sep 2026 13:01:27 +0000
Manifest next update:     Sat 26 Sep 2026 13:01:27 +0000
Files and hashes:         1: 4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl (hash: 9qWZuhkGdZ7eZ7aIIDSFkne8MNnCunKNYkJf1GruV8A=)
                          2: 8OYdUjrlp_CiIecRp3Rh15sihI4.roa (hash: u8J8QYG/m1scGBBJx74Dh3l5h4W60dwIobWX8cGTUE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:a8:0d:ae:6e:f5:c1:0b:ad:1a:48:9d:69:1f:d3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
        Validity
            Not Before: Sep 25 13:01:27 2026 GMT
            Not After : Sep 26 13:01:27 2026 GMT
        Subject: CN=e82148fbd87567d1bad2b4b009e60869e1b26380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:2e:6c:8a:db:f3:59:d4:85:0b:61:f1:bc:
                    2b:7f:74:f2:12:70:d6:02:5d:bc:c2:dc:99:4d:83:
                    56:42:ce:f8:2d:e8:55:7a:0b:88:ce:42:06:1c:2f:
                    d3:c3:64:ab:d6:e3:13:53:00:23:45:98:a6:69:d8:
                    82:2c:16:da:9f:a6:e7:f1:70:6d:a5:2a:3c:02:d9:
                    72:7a:73:98:c1:04:bb:ec:de:39:4e:99:a0:fc:4b:
                    cc:98:d2:e8:59:cb:9e:3c:0b:d8:f9:d5:43:91:da:
                    30:72:fb:8e:ba:d3:55:e6:c2:1f:bf:a7:6f:78:85:
                    cb:f8:6b:4e:7f:97:5d:30:f7:14:d8:cc:64:c8:6f:
                    49:b7:6c:fe:29:52:af:d2:d2:bf:e3:21:c7:65:fc:
                    a7:c9:ed:26:dd:eb:d4:5e:7c:ea:f6:9c:f6:67:62:
                    34:08:37:7a:6b:e1:b6:76:39:64:60:88:04:b3:25:
                    7f:49:f2:07:ce:03:65:b6:c3:5b:27:bf:6a:3a:64:
                    85:00:3b:cc:11:57:cb:c2:28:d6:d9:70:59:b0:72:
                    85:46:64:86:8a:8f:e8:85:1e:4d:1a:23:b8:9d:0f:
                    71:ea:13:95:1e:73:e3:b6:08:d8:a5:4d:09:e5:5c:
                    06:52:57:aa:41:07:7b:65:4e:a4:11:cb:ff:60:df:
                    57:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:21:48:FB:D8:75:67:D1:BA:D2:B4:B0:09:E6:08:69:E1:B2:63:80
            X509v3 Authority Key Identifier:
                keyid:E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5d:b7:a7:8c:f7:14:6a:40:ed:61:05:23:82:7f:a9:b4:4c:
         6a:e4:b4:a2:30:50:06:bc:50:63:98:1c:9e:04:5e:b5:d0:32:
         17:bf:7f:11:0c:40:40:d7:c0:0e:7b:6d:24:4a:cb:5c:00:a8:
         b0:4a:6b:dd:36:57:c9:ea:96:4d:cb:6f:15:dd:10:55:4d:50:
         c7:8c:d6:39:a3:99:81:d5:d8:ca:50:39:61:42:0d:b3:b3:da:
         4b:b8:45:57:1e:85:95:17:92:f5:67:a7:b6:22:65:75:af:c4:
         bb:f4:f5:2c:42:ca:17:5b:9f:51:91:95:58:6a:7b:af:8c:d8:
         5d:e9:c9:a3:fe:8b:40:2c:f3:b7:f4:28:48:d9:87:be:22:0e:
         3c:42:df:92:8e:d1:c7:3c:ec:40:32:f9:19:09:2c:e8:9d:fd:
         17:58:22:5f:20:f4:84:10:ce:4e:89:92:cb:35:a0:bc:dd:00:
         e0:11:4c:11:bd:c6:e8:9c:07:2b:12:fe:a9:14:e0:a8:44:42:
         c9:48:bc:85:94:fe:67:2c:85:de:3e:88:35:cb:ac:15:b5:6c:
         11:51:fd:37:8a:b4:9b:48:bc:6d:5f:0e:85:5f:13:12:46:e6:
         85:92:5a:f1:9b:26:bb:2d:65:50:ad:c6:3d:3a:af:fa:db:c6:
         e2:fa:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:32:34 2026 by rpki-client