Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
File:                     4vX689OhJusn2TfR3mjgcumaJvI.mft (raw, json)
Hash identifier:          yKFx5YHQ8+WnJpItHiYg/biT43MJ+bT05pbG/ZYmDEo=
Subject key identifier:   B8:02:5E:44:5A:5C:7C:89:E7:33:94:A1:01:15:AC:63:33:01:6B:C0
Authority key identifier: E2:F5:FA:F3:D3:A1:26:EB:27:D9:37:D1:DE:68:E0:72:E9:9A:26:F2
Certificate issuer:       /CN=e2f5faf3d3a126eb27d937d1de68e072e99a26f2
Certificate serial:       019FAA8841C758DCC2EF9998E809F0A20EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4vX689OhJusn2TfR3mjgcumaJvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 21:01:24 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:24 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:24 +0000
Files and hashes:         1: 4vX689OhJusn2TfR3mjgcumaJvI.crl (hash: ADJUVfgv9q0Fzk3AmPoVzEyGC2WRdrxrwurgkL2WFnY=)
                          2: JzQE4CrMRXQKVLS9q97TLQOr_Nc.roa (hash: E1WJtSiavBJi5tmLgKdSSq+WxQ67uQ350SN9jNFg9xI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4vX689OhJusn2TfR3mjgcumaJvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:41:c7:58:dc:c2:ef:99:98:e8:09:f0:a2:0e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2f5faf3d3a126eb27d937d1de68e072e99a26f2
        Validity
            Not Before: Jul 28 21:01:24 2026 GMT
            Not After : Jul 29 21:01:24 2026 GMT
        Subject: CN=b8025e445a5c7c89e73394a10115ac6333016bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:98:31:86:bf:69:0d:24:6b:11:fd:79:d4:
                    f7:7e:6a:af:2d:97:e6:f3:ae:ef:32:c5:ba:b4:10:
                    f2:60:56:b7:5e:ca:f1:c4:41:08:f6:8b:03:92:94:
                    6c:ff:18:d7:e8:00:df:a1:fa:11:7c:aa:70:46:a0:
                    d9:07:42:b8:e5:8d:f5:58:29:bd:64:31:8a:9f:54:
                    38:70:c7:df:c5:92:13:ab:59:1d:41:af:93:9e:9e:
                    c8:1d:78:17:db:44:c2:44:34:c1:c9:bd:7e:36:51:
                    7f:36:17:6d:04:cd:fc:bf:f7:ba:6c:0c:40:7b:08:
                    b5:52:47:ef:8c:0d:c4:cd:78:c7:59:26:44:69:a4:
                    db:db:24:d4:ba:c1:51:0d:95:12:fa:35:6a:f6:57:
                    d5:b0:a3:e0:fa:a8:4a:98:9e:df:f8:2e:2b:1f:6a:
                    d6:f1:20:eb:34:f9:3a:bd:e3:2a:71:22:06:18:d9:
                    f9:d7:7c:64:61:05:88:2b:a6:50:63:61:d8:73:aa:
                    a7:2c:dd:52:d6:01:ca:86:2e:9e:a8:68:cb:6c:ea:
                    6f:b5:88:4f:c8:dc:ad:81:31:60:43:74:ea:10:80:
                    ae:05:55:e8:71:e0:b6:23:b0:52:0e:6e:9d:cc:b5:
                    d9:73:68:2b:5a:03:42:8c:c9:0a:d6:27:64:e0:d9:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:02:5E:44:5A:5C:7C:89:E7:33:94:A1:01:15:AC:63:33:01:6B:C0
            X509v3 Authority Key Identifier:
                keyid:E2:F5:FA:F3:D3:A1:26:EB:27:D9:37:D1:DE:68:E0:72:E9:9A:26:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4vX689OhJusn2TfR3mjgcumaJvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b1:ac:a4:2b:67:f6:66:e9:ae:4c:02:83:a8:3e:9b:fc:0c:
         6f:b6:0b:b7:02:bc:28:6b:ff:b3:7e:e9:50:88:eb:54:17:71:
         2e:f1:a7:cd:29:5c:48:0e:ab:b0:c3:67:0e:d2:2c:3e:96:0c:
         84:5c:46:7a:e2:71:e7:a4:30:f5:e3:01:ee:cc:f2:0b:b6:a5:
         d6:c4:4e:28:ef:f2:b1:d0:6c:2e:55:c5:f0:b1:35:bf:83:a6:
         ff:6f:07:1f:fa:a5:99:36:87:51:b2:c8:6f:7f:a4:86:e4:6b:
         62:77:a6:0a:71:b8:ce:57:49:8d:4d:4b:c5:a8:56:f2:a5:43:
         08:fd:bf:85:c3:15:de:98:4b:61:2b:cd:b0:a7:02:1b:ed:ed:
         bf:29:e4:34:5b:fb:b2:fe:0d:22:04:ba:67:82:2a:af:4a:aa:
         13:df:aa:7c:ee:84:bd:ef:23:b4:55:25:20:b9:d4:93:40:9f:
         1d:eb:4f:ab:b0:59:e0:02:db:28:3c:14:00:0e:03:0f:bc:e7:
         bd:60:4e:d1:08:f2:31:43:93:5d:4d:a8:87:15:c3:a3:42:a3:
         e0:12:aa:62:db:16:56:8c:74:26:97:d4:bd:e6:6b:9a:9e:1f:
         48:64:76:65:aa:54:ad:76:d3:a3:81:7f:6f:9c:19:50:25:65:
         ab:78:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:15 2026 by rpki-client