Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File:                     4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier:          rcZq+2g8cWNEEG7Nmce7pD6vUtWuoq3YjTkv50m8Cdw=
Subject key identifier:   3D:21:9D:66:A5:1F:F2:00:86:2B:8D:80:F8:6E:B2:CB:34:D7:73:66
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer:       /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial:       019EBFFF7BC7E1F20D3664FFF811D154AD90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number:          1404
Signing time:             Sat 13 Jun 2026 08:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:51 +0000
Files and hashes:         1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: j74zhYjcpMDbrlt35JMajKkz8n5HInJxY0cqU580o/Q=)
                          2: B4XqtMRju7ct1VHWSys1ZmsVDvA.roa (hash: dT4gZYld/5NxZfQ/re1cqoiLPKYDPvy18QhmjeiLxrE=)
                          3: JdAcrT3uln-8JiCxgK6oIqzKTOA.roa (hash: dIb2jT3iWQNSuT3k4NrPPXV/I/Z0OOjAmtCYJBKtyMs=)
                          4: RsA_UVwxWQ-J9JIZmxgOKVrijeU.roa (hash: JBuYTD0WubZn6moVgquEFt/qvUgskccLt/1IQgz3zQw=)
                          5: _biLnM_coqEwA_A8eVlJQZHQt48.roa (hash: 5mMri1uaYw577nOuv+pbuYsKwcFaxTbTyFZQFkO22x0=)
                          6: cvu881wX1J1NkelwvHsakF8V-nk.roa (hash: 3p0KxNsFZi7KD2HoriAn/X0d7O0pV7iqm6G3fj1N+gg=)
                          7: xvx_URL_iIWOu_kwa4kcKqXxSiw.roa (hash: uzt29LotiQEdFTIzPwMsgOnQ8XXc4rrzo8Lphlxq3XY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:7b:c7:e1:f2:0d:36:64:ff:f8:11:d1:54:ad:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
        Validity
            Not Before: Jun 13 08:00:51 2026 GMT
            Not After : Jun 14 08:00:51 2026 GMT
        Subject: CN=3d219d66a51ff200862b8d80f86eb2cb34d77366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ad:e2:f8:90:17:95:b7:cb:fb:8e:71:4d:6e:
                    d9:4a:e8:1e:73:03:a5:d3:13:9c:a9:76:d9:f8:3b:
                    cb:99:ef:0f:d8:f8:20:34:b9:0f:31:2a:39:29:18:
                    97:ad:bb:18:bb:b3:0d:3f:74:c7:9f:ec:60:e5:21:
                    69:a4:6d:45:5e:32:c9:07:3f:60:07:30:e4:1c:48:
                    8c:f7:c2:ff:81:e1:5b:e4:29:77:b5:af:7c:ef:79:
                    14:2e:6b:50:f6:52:e5:4a:75:a9:13:40:b7:76:af:
                    dd:31:e1:0a:5b:5f:76:8c:9d:4d:0b:34:29:8b:3e:
                    31:90:a1:41:f6:9d:85:19:18:99:79:1f:1a:de:a4:
                    c9:cc:54:82:ab:84:9f:2a:f4:e3:62:ce:d4:ab:89:
                    de:11:08:34:8f:eb:66:48:05:d6:5b:94:ca:83:c6:
                    ac:9c:2d:54:8b:2c:7d:d0:f9:9d:04:23:90:59:2b:
                    95:d5:cc:55:af:41:98:63:ff:ca:ba:ba:a0:2f:d0:
                    96:bb:a9:26:91:98:42:b0:e4:43:ca:0e:72:9f:0a:
                    e3:c6:bd:cf:2e:ea:8a:8d:e7:ab:8b:8b:f0:46:95:
                    0c:a0:61:75:a6:0c:30:f7:bb:c8:35:31:80:31:77:
                    7f:1a:41:06:2d:02:3d:e5:54:73:cc:f6:ef:d6:8c:
                    ec:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:21:9D:66:A5:1F:F2:00:86:2B:8D:80:F8:6E:B2:CB:34:D7:73:66
            X509v3 Authority Key Identifier:
                keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:24:1b:cc:fb:3b:ff:f1:eb:96:73:d2:dc:30:ad:c5:a0:2d:
         ed:08:bc:db:c7:89:eb:06:78:7d:ab:e3:42:6e:f1:31:27:1d:
         61:6d:aa:e5:6d:49:aa:c3:9d:fb:7b:c8:b4:82:a6:a7:85:a8:
         1e:d4:07:48:47:c1:00:bb:4a:90:c8:6a:1b:04:91:d7:7d:de:
         69:14:7e:bb:71:67:87:1e:28:d5:0a:19:69:bd:b8:90:f3:1c:
         1c:95:64:e8:c1:85:a4:ae:92:f3:88:0d:a7:80:ad:80:a8:44:
         0c:e4:70:d3:9a:c2:c3:82:45:f9:57:d7:9a:20:85:d5:a5:99:
         40:46:db:ee:82:24:22:58:be:9b:2b:36:70:8d:8b:8b:50:8f:
         72:f5:cc:b7:24:a2:7c:de:98:53:a1:26:ca:1a:ef:04:1c:88:
         39:64:cb:aa:e5:f9:86:31:a9:3d:86:87:ff:59:1d:78:f9:8e:
         d8:09:88:f2:03:73:88:63:9c:53:5f:9b:18:ba:43:81:0a:ae:
         6d:83:9c:ec:a9:2d:d7:65:a5:1b:a8:51:f0:26:bf:1f:fc:a4:
         e8:c8:ff:f3:0c:78:86:37:15:0c:2a:77:4b:12:d7:92:ca:18:
         5e:3e:9c:5f:bb:88:38:8d:4c:d5:6a:0e:66:12:ba:2c:43:61:
         8f:a5:fd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:30:31 2026 by rpki-client