Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File:                     4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier:          LDN/VSqx8kAodGb0efCTPZMEv4Q0metc2fsg9DDPKL4=
Subject key identifier:   11:99:70:1A:71:F2:68:D0:38:62:0D:F6:41:F9:EF:57:75:BA:03:F3
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer:       /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial:       019D9A748E0B183568DD253F5F33B576E5E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number:          1459
Signing time:             Fri 17 Apr 2026 08:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:22 +0000
Files and hashes:         1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: dv7SEfCVN/vf447PwqZT5a4ATIydyPp44faAgO/aQ1c=)
                          2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:8e:0b:18:35:68:dd:25:3f:5f:33:b5:76:e5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
        Validity
            Not Before: Apr 17 08:00:22 2026 GMT
            Not After : Apr 18 08:00:22 2026 GMT
        Subject: CN=1199701a71f268d038620df641f9ef5775ba03f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:5c:5f:84:f6:bd:a4:db:ce:7d:4a:d5:e7:
                    d2:78:32:21:e2:a0:f0:cb:44:2d:11:d6:c7:38:f9:
                    db:ba:22:7c:68:4d:d6:73:ce:1c:b8:5b:0b:63:ca:
                    84:38:22:73:94:67:89:cc:0c:25:f5:0f:52:8d:06:
                    26:f6:ba:36:6d:81:8b:83:7b:63:1d:6c:2c:d0:ed:
                    1e:51:a1:12:c2:47:87:dd:99:88:76:95:79:86:58:
                    14:ae:6e:a1:3d:80:17:17:30:a4:dd:89:46:b4:7e:
                    56:2b:49:84:96:3a:98:02:c7:50:cf:6b:81:61:ac:
                    07:ea:fd:c2:7d:d0:5c:6d:52:15:a1:8a:f0:fb:8d:
                    51:d9:bc:3d:af:ed:ed:1c:fe:02:6e:50:76:24:46:
                    f3:bc:f7:d5:52:a0:80:a4:f0:26:4f:8d:a9:8f:b9:
                    e9:e6:c7:10:5c:02:b5:69:6b:ca:6a:d4:88:a0:32:
                    5c:93:ba:df:ec:6e:87:55:21:7d:46:42:25:39:d9:
                    7d:f1:6e:71:4e:9e:7c:bb:05:bc:60:09:8a:68:a0:
                    56:92:ae:76:dc:b7:19:c7:15:00:21:a7:8b:39:ff:
                    06:af:e7:bb:79:66:0d:88:74:75:19:0c:ca:3a:7e:
                    7c:d1:d8:2a:61:00:f0:3e:65:a3:41:51:64:79:20:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:99:70:1A:71:F2:68:D0:38:62:0D:F6:41:F9:EF:57:75:BA:03:F3
            X509v3 Authority Key Identifier:
                keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ad:fa:71:69:47:3a:67:49:b8:02:46:9f:08:52:b3:d3:fc:
         38:0d:89:cc:91:12:79:6e:05:e4:03:b8:1c:a2:fc:ee:38:2d:
         50:71:ea:a4:20:d4:f5:59:da:c1:36:0c:aa:2c:3a:51:89:e8:
         68:e4:32:7b:01:af:e0:a3:32:84:53:ec:37:ae:6d:76:68:0c:
         8f:bc:59:a0:85:aa:13:df:20:31:2f:fa:d3:88:dc:82:22:60:
         40:37:6e:26:75:e7:01:88:dd:e4:a4:30:b6:87:26:f7:87:09:
         a8:03:6e:f5:50:0d:ce:bd:ad:1b:22:02:4e:41:e3:47:a1:61:
         e5:75:20:40:00:58:d2:ff:0d:5d:f2:ec:e0:59:54:8e:0e:31:
         fb:75:d0:42:78:c2:5f:8d:05:e4:21:4b:1a:b6:6e:db:43:63:
         29:2c:74:34:dd:1a:2c:ea:1c:ef:58:5d:a3:54:85:2a:77:58:
         f8:bf:ad:8e:ac:e3:b9:f4:5a:29:52:b7:35:b9:f8:71:00:64:
         a9:49:5e:46:2a:d7:31:c9:87:89:33:8e:b7:3e:3c:0c:30:98:
         6d:f9:28:5f:63:ae:29:59:61:73:72:a3:e9:13:9b:76:eb:61:
         c7:b3:fb:2a:e6:b6:e8:16:67:ad:23:35:4a:cf:ed:3e:c9:86:
         74:34:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:10 2026 by rpki-client