Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
File:                     4MW7PaU0Nb9B4X997EfUSE5_MSk.mft (raw, json)
Hash identifier:          xK6BPrn5b+F4guuvJkfpZ2VR+2ElQy7AX4ExEuqhXFE=
Subject key identifier:   F7:58:1E:68:7B:18:64:14:53:99:99:F1:27:5F:AF:63:E7:96:85:D6
Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
Certificate issuer:       /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Certificate serial:       01A0C3325235C7087082B29D5E9E21BD9FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
Manifest number:          0438
Signing time:             Mon 21 Sep 2026 09:00:49 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:49 +0000
Manifest next update:     Tue 22 Sep 2026 09:00:49 +0000
Files and hashes:         1: 4MW7PaU0Nb9B4X997EfUSE5_MSk.crl (hash: YHSso8LYMtCFbIKO1UOF02Z6w+Dy5Ga25YIDu6XriAI=)
                          2: 6CkXD84pke9k3M4G741F2bkK36U.roa (hash: W5UgpdGLKX1sz4JtCaw9TLFL+VAMoIT+vGJMM59xCmY=)
                          3: 7JRXJdqq0quI6VLheZDVHGBGYz4.roa (hash: zht/JvnIioKlRWL/1Q3IwXr569wZITbnh/lEFG9dvRk=)
                          4: 9u2DZc6_t39AXh0hNQyl49GQcrA.roa (hash: upTRBVGB5NItiTNl9OAPzE1F31sUOeznk1tVJmk+yGA=)
                          5: VNLKS-pNZk5YJ26vbOoNAKp2U2w.roa (hash: NTY/vgG8CnozUkg7LalMOYtygnJJQiS7TOtc3cYLXpI=)
                          6: V_DOpxjH45tDyDf2JO-E1sgKD8Q.roa (hash: lsMz+HQ7XHSEiHNSB1ohEZiIbIRvWMkvHqxBmL/BKQ0=)
                          7: c499SClGT78nET-X2E0c8h8vbyk.roa (hash: SN37KokWRjTT0I6SPcf2aRg5XCtwSTLTj9XuCaF5do8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:32:52:35:c7:08:70:82:b2:9d:5e:9e:21:bd:9f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
        Validity
            Not Before: Sep 21 09:00:49 2026 GMT
            Not After : Sep 22 09:00:49 2026 GMT
        Subject: CN=f7581e687b186414539999f1275faf63e79685d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:46:9d:85:ff:f4:84:87:cb:82:05:5d:70:
                    cd:ac:85:b2:7d:97:d9:22:e8:d8:a4:e8:d1:18:2e:
                    90:04:e6:99:db:7f:37:f6:ec:85:8d:42:d9:97:60:
                    74:c2:f3:68:46:d3:fa:c5:e3:ec:27:d7:de:0b:2f:
                    fc:ae:2b:9f:d6:0e:52:de:f9:55:f5:2e:b9:82:28:
                    31:4a:c8:f3:4c:82:fc:e4:15:b1:85:76:9e:b8:95:
                    2e:cf:0b:e5:7d:59:89:47:f6:c7:99:f4:5c:d2:07:
                    27:a0:97:e8:a9:e8:06:18:dd:e1:70:a8:fb:b9:5e:
                    46:ea:03:bf:74:88:0a:04:73:cf:d1:5e:48:45:0c:
                    c2:db:46:cf:51:da:73:08:9f:39:79:88:21:c1:80:
                    65:bb:ed:e4:79:35:26:b0:54:83:55:45:57:e0:43:
                    85:e1:fb:85:ae:aa:a1:ad:db:78:aa:0b:d6:a5:9f:
                    db:45:b2:7e:c8:8c:34:a4:96:2d:bb:52:e3:71:e2:
                    9c:22:72:f7:85:ef:e8:bc:bc:3d:52:62:a0:a9:09:
                    a7:34:45:23:24:2b:7d:41:d7:b0:c1:09:f2:e1:74:
                    d1:59:a1:5e:6d:77:52:b5:97:0b:48:12:24:9b:11:
                    e3:62:4c:75:95:00:71:78:73:91:73:66:c6:d6:e1:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:58:1E:68:7B:18:64:14:53:99:99:F1:27:5F:AF:63:E7:96:85:D6
            X509v3 Authority Key Identifier:
                keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:1e:fa:5c:4c:3b:5f:0d:2b:df:85:80:d9:20:2e:98:d1:
         4b:1b:3d:1c:62:bc:c4:ae:90:0d:37:81:76:d9:dc:97:c4:b4:
         17:c8:9d:c7:dd:7f:a5:3b:33:67:35:ca:c2:9c:75:5a:39:81:
         08:fb:20:05:31:d8:b3:ab:02:20:0f:0f:4c:9b:62:19:d6:3b:
         c1:73:a9:c4:f2:b5:b5:99:af:01:57:23:db:31:8f:f3:d8:b1:
         9f:a4:42:d5:e6:31:6b:02:c6:cd:e1:45:8c:5d:a9:eb:89:f6:
         bb:bc:0e:20:5b:c9:d7:62:b3:c4:1c:38:c8:11:f5:1a:06:a4:
         2e:23:83:1a:11:d1:76:e8:ca:61:b4:14:14:a1:a3:e8:1d:b4:
         96:79:7f:d4:0b:47:f9:c1:7d:97:c6:bf:90:2c:5b:ed:e5:c6:
         b5:99:f2:48:db:ed:a2:39:25:b5:2b:48:fb:bc:8f:72:a7:cb:
         45:7f:db:20:10:0b:e4:8d:a2:93:c9:91:50:e8:e7:4f:50:f8:
         b3:5e:cc:2b:3a:28:30:a5:e3:8d:aa:c5:d0:4f:4a:5a:72:57:
         6e:9e:74:79:8a:b9:6a:3d:ad:69:5a:c2:51:de:4b:1a:f8:b0:
         6e:12:6b:2e:e5:e4:22:9c:56:e6:20:e3:e4:f4:17:9d:90:70:
         4b:d4:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:48:00 2026 by rpki-client