Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
File:                     Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft (raw, json)
Hash identifier:          Po14b8mx6iqgltUgISkzKmThb4qL20tatqhekbmE6Xc=
Subject key identifier:   8E:1B:2A:E5:5D:8F:15:C1:A6:81:FA:78:B4:10:08:4F:1D:41:EE:CE
Authority key identifier: 26:4E:01:D4:FD:90:26:36:81:E9:CB:D6:78:3E:C8:B0:A6:1E:6E:BE
Certificate issuer:       /CN=264e01d4fd90263681e9cbd6783ec8b0a61e6ebe
Certificate serial:       019FAC75A04000A5AD31CC656F9EA882D475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:17 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:17 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:17 +0000
Files and hashes:         1: Jk4B1P2QJjaB6cvWeD7IsKYebr4.crl (hash: 8/mlLJvfCfxLROpuIi9hULqI/0kJ51j3lRUeW1pHGF0=)
                          2: gvef48JXo1j7ZIIHvaaFbWy4pN8.roa (hash: 60oMLYPg6N0/DunwA9zatVT67Q2Jj0J5vjnOjDO2jPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:a0:40:00:a5:ad:31:cc:65:6f:9e:a8:82:d4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=264e01d4fd90263681e9cbd6783ec8b0a61e6ebe
        Validity
            Not Before: Jul 29 06:00:17 2026 GMT
            Not After : Jul 30 06:00:17 2026 GMT
        Subject: CN=8e1b2ae55d8f15c1a681fa78b410084f1d41eece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:67:7f:c4:1b:59:ec:5a:e9:bf:c1:98:61:
                    1c:47:50:34:3a:34:ec:f0:38:ac:74:74:03:73:5c:
                    fe:ba:f1:19:34:7c:03:cc:0a:f8:6e:40:15:0a:d2:
                    9e:06:88:60:b4:04:b9:25:dc:ce:39:59:8c:7c:ee:
                    9a:47:58:1a:8a:a7:dc:f3:b4:31:28:30:97:7e:34:
                    2b:86:4c:90:7b:c4:05:4c:00:ae:5b:30:1a:e9:de:
                    3a:b0:9d:d4:a3:44:e0:71:48:18:f9:de:23:b9:64:
                    62:d0:a6:07:52:85:cd:fe:d3:a1:b7:90:40:13:41:
                    e3:d4:26:93:d7:c2:11:c7:10:57:c4:67:5c:30:40:
                    62:77:a0:c5:a9:51:0a:0b:d4:11:fc:64:ac:bc:ac:
                    5b:9a:b1:b3:64:30:12:19:93:3c:14:b4:99:c6:0c:
                    49:ca:04:82:ec:0e:63:72:ab:62:b7:cb:ca:de:bf:
                    47:e7:2d:46:ce:13:32:02:b1:0d:ac:68:37:9a:4d:
                    b2:37:0e:2c:25:6c:c3:16:cc:e3:e7:df:dc:5f:0d:
                    9f:0f:e9:7f:96:d8:d6:05:f1:50:a4:34:c2:e0:c5:
                    18:0d:f3:50:f7:99:c9:2b:87:79:86:f3:0c:31:2d:
                    36:cc:36:a5:aa:b7:24:90:7e:66:39:44:74:ac:54:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1B:2A:E5:5D:8F:15:C1:A6:81:FA:78:B4:10:08:4F:1D:41:EE:CE
            X509v3 Authority Key Identifier:
                keyid:26:4E:01:D4:FD:90:26:36:81:E9:CB:D6:78:3E:C8:B0:A6:1E:6E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:0f:ec:ba:6a:8a:b3:41:73:24:de:27:66:91:9a:af:a8:30:
         fa:95:ba:3c:0b:0c:ef:1e:b3:17:82:9c:ea:75:4f:f7:16:8b:
         89:e5:a6:1e:4e:f2:de:8e:6e:d8:ba:c7:07:c4:98:cf:07:fd:
         a8:ce:54:02:63:7e:66:21:51:d2:e7:9f:34:26:c3:0a:7d:ab:
         43:8a:31:83:6d:e4:b6:9b:f5:7b:57:83:e7:64:24:08:af:24:
         1a:5e:e8:b0:be:c8:c5:f2:a4:eb:ac:bb:2f:03:51:64:98:42:
         d9:aa:ac:fd:ce:98:9b:15:2d:11:99:32:ad:0e:23:8e:47:89:
         d5:d0:c6:5f:82:ef:f2:60:08:ce:8e:18:28:23:69:07:ff:f6:
         bc:e8:95:10:c0:5d:b7:3c:0a:40:ab:0f:67:90:2c:69:5b:30:
         6c:d7:83:3d:b8:f4:d1:37:a7:88:34:3f:08:64:09:44:c9:23:
         b0:06:37:1a:94:9f:ec:df:16:c0:66:4b:26:c2:63:f0:18:fb:
         51:d0:20:81:86:79:ff:39:f8:a9:fa:92:41:6d:2b:2a:75:d6:
         8f:ea:42:a5:36:78:34:fe:d6:cd:d0:dc:8c:2c:6a:a3:bd:8f:
         98:56:8b:59:8f:76:ca:17:d8:cc:16:3b:7a:4f:36:cb:8a:dc:
         6d:da:d4:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdaBAAKWtMcxlb56ogtR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NGUwMWQ0ZmQ5MDI2MzY4MWU5Y2JkNjc4M2VjOGIwYTYx
ZTZlYmUwHhcNMjYwNzI5MDYwMDE3WhcNMjYwNzMwMDYwMDE3WjAzMTEwLwYDVQQD
Eyg4ZTFiMmFlNTVkOGYxNWMxYTY4MWZhNzhiNDEwMDg0ZjFkNDFlZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN9nf8QbWexa6b/BmGEcR1A0OjTs
8DisdHQDc1z+uvEZNHwDzAr4bkAVCtKeBohgtAS5JdzOOVmMfO6aR1gaiqfc87Qx
KDCXfjQrhkyQe8QFTACuWzAa6d46sJ3Uo0TgcUgY+d4juWRi0KYHUoXN/tOht5BA
E0Hj1CaT18IRxxBXxGdcMEBid6DFqVEKC9QR/GSsvKxbmrGzZDASGZM8FLSZxgxJ
ygSC7A5jcqtit8vK3r9H5y1GzhMyArENrGg3mk2yNw4sJWzDFszj59/cXw2fD+l/
ltjWBfFQpDTC4MUYDfNQ95nJK4d5hvMMMS02zDalqrckkH5mOUR0rFTsLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4bKuVdjxXBpoH6eLQQCE8dQe7OMB8GA1UdIwQY
MBaAFCZOAdT9kCY2genL1ng+yLCmHm6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSms0QjFQMlFKamFCNmN2V2VEN0lzS1llYnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS81ZWJjNWQtODY4My00YzM3LWEwNTAt
MjBlZjQyYzliYzM4LzEvSms0QjFQMlFKamFCNmN2V2VEN0lzS1llYnI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS81ZWJjNWQtODY4My00YzM3LWEwNTAtMjBlZjQyYzliYzM4
LzEvSms0QjFQMlFKamFCNmN2V2VEN0lzS1llYnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsw/sumqK
s0FzJN4nZpGar6gw+pW6PAsM7x6zF4Kc6nVP9xaLieWmHk7y3o5u2LrHB8SYzwf9
qM5UAmN+ZiFR0uefNCbDCn2rQ4oxg23ktpv1e1eD52QkCK8kGl7osL7IxfKk66y7
LwNRZJhC2aqs/c6YmxUtEZkyrQ4jjkeJ1dDGX4Lv8mAIzo4YKCNpB//2vOiVEMBd
tzwKQKsPZ5AsaVswbNeDPbj00TeniDQ/CGQJRMkjsAY3GpSf7N8WwGZLJsJj8Bj7
UdAggYZ5/zn4qfqSQW0rKnXWj+pCpTZ4NP7WzdDcjCxqo72PmFaLWY92yhfYzBY7
ek82y4rcbdrU7A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:52:27 2026 by rpki-client