Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
File:                     4chbPfGRu7SHTyElY_U2-CPqQzI.mft (raw, json)
Hash identifier:          oZsUU22FBidDGQyb3pxHef8fO6HDXpgMEhaYoAy92eU=
Subject key identifier:   BA:DA:3B:B8:B5:84:44:A9:7F:6D:AA:A0:78:67:82:A1:45:9A:A4:5F
Authority key identifier: E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32
Certificate issuer:       /CN=e1c85b3df191bbb4874f212563f536f823ea4332
Certificate serial:       019FA82B010693E3B1307DAA6B9133710062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
Manifest number:          0140
Signing time:             Tue 28 Jul 2026 10:00:18 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:18 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:18 +0000
Files and hashes:         1: 4chbPfGRu7SHTyElY_U2-CPqQzI.crl (hash: I/973WuC+LukWhJYphOXJSaBLoG9EFC3O5JRbHN+ASo=)
                          2: HGJATmPx_lb-up56PA9sws4LXzM.roa (hash: rP4ippAFPKo3N/gSznr5pBHOOcDkPGB3VJz0DMBiGGk=)
                          3: ZKlPGz4kI_uOgsyApeExYa33cEk.asa (hash: gHtpE0/vy2kYs9vRGqmcozAsLFQTnGOPyUQhZ0q23wc=)
                          4: vR8-TTbXfVDHZdgSnOr8TDlwnBk.roa (hash: jMzlWmBuharjGRH2L1aGRJN/4ce3UkOwdCSnIziX6x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:01:06:93:e3:b1:30:7d:aa:6b:91:33:71:00:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c85b3df191bbb4874f212563f536f823ea4332
        Validity
            Not Before: Jul 28 10:00:18 2026 GMT
            Not After : Jul 29 10:00:18 2026 GMT
        Subject: CN=bada3bb8b58444a97f6daaa0786782a1459aa45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:65:8f:8d:5b:a9:2e:01:f9:60:d4:8b:10:f4:
                    22:4e:0b:1e:a4:f0:2f:3a:78:a4:86:09:09:cf:c6:
                    75:61:bb:a3:ce:39:aa:2d:7e:56:d0:53:9f:6a:25:
                    bc:0b:91:e3:80:86:03:89:76:aa:2f:b2:c5:6f:18:
                    dc:69:67:bf:64:57:b4:2a:9b:8e:c6:48:4c:f2:07:
                    9b:36:f9:9b:fe:c8:e1:b2:09:d6:d5:6e:2c:38:b2:
                    43:4a:c4:88:9d:17:9c:c5:a2:ad:28:62:79:7a:b9:
                    27:0a:ed:01:56:5c:a2:98:be:2e:fc:6f:62:23:5b:
                    d6:2f:88:09:ff:50:a0:84:c1:7b:b8:1c:35:74:55:
                    e8:81:8f:5a:a6:33:22:41:4c:f1:9f:45:e0:4c:55:
                    fb:1f:ec:8e:c4:ec:65:72:23:69:22:12:c0:f8:7a:
                    40:b0:99:d8:e5:59:81:b4:d2:18:bc:3c:4c:9e:26:
                    89:48:aa:b6:5b:54:12:69:ce:bd:ed:5d:18:09:cc:
                    fa:bc:39:eb:a1:47:39:2c:79:16:69:e6:f1:2f:7d:
                    fa:95:4b:93:a5:fc:c0:4c:10:28:e3:31:f0:28:34:
                    dc:56:df:07:66:d1:7b:9c:24:55:7b:65:fd:35:49:
                    75:a9:34:41:d6:6c:4d:4b:37:11:6e:a5:4e:97:4b:
                    f4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DA:3B:B8:B5:84:44:A9:7F:6D:AA:A0:78:67:82:A1:45:9A:A4:5F
            X509v3 Authority Key Identifier:
                keyid:E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c7:38:30:e3:ec:82:19:60:15:82:81:e2:d6:ad:da:96:cf:
         ef:75:68:0e:5c:29:09:f5:4f:1d:eb:ec:66:2d:ae:03:cc:c3:
         d0:7a:50:35:22:4e:95:07:80:ed:10:97:85:39:dc:b2:ab:c3:
         1e:8b:91:4f:66:ff:88:b0:16:d3:aa:37:92:9a:09:91:f5:1f:
         bd:ef:b2:ce:49:6f:43:58:18:b9:c0:16:30:44:ec:06:86:5b:
         7b:90:34:6c:27:48:82:18:63:63:57:67:74:26:10:59:ce:e9:
         0d:d9:15:54:f0:30:39:ce:39:df:ad:45:f2:6b:fe:73:18:83:
         ac:61:5d:3d:76:a7:a7:d7:b0:f6:11:a3:93:3d:39:eb:66:ec:
         48:65:b0:01:5f:31:dd:22:c4:e7:5a:65:12:2f:dc:89:d6:f4:
         65:17:1f:50:04:a7:74:47:3e:13:05:63:62:b8:0b:50:ce:ec:
         01:d5:05:79:69:12:0e:e1:2f:5a:0c:df:14:da:e0:b3:23:6a:
         b6:ec:f0:5b:c6:a4:d3:08:4b:d9:0a:31:14:ec:df:ff:dc:ac:
         80:03:55:6e:c9:ca:fb:b5:c0:ba:a5:36:0e:a7:b9:ce:06:77:
         17:5c:2a:e3:01:01:e0:cf:be:94:81:7c:4d:6d:4a:22:11:3f:
         7e:8f:1c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:51:19 2026 by rpki-client