Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
File:                     Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft (raw, json)
Hash identifier:          4S/6zmAWcl/Ef457LTYDl1osXRCZlyyf0HYXCAN3qFs=
Subject key identifier:   9C:B4:72:71:E0:2A:3F:E5:6D:F2:11:2C:AE:B5:58:2E:26:2F:74:96
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Certificate issuer:       /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial:       019FAC76F5AB2C52305BD48A31962F7F66ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:44 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:44 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:44 +0000
Files and hashes:         1: B4CslqeFh_G7kj31dFxVS_tQHdk.roa (hash: MrHNRAPoEgRUnj3uJCShn3/l5/jArte2wDeGYtIzlP0=)
                          2: IIzVxtmDhdZdhpAbkL-ndC6CsU4.roa (hash: CQ228xdqWMGw11CGwR9Uzvgy1Q7ztTnBAHC18ATjAq4=)
                          3: NzEbjZMTTNc2f7hUh_DfDiEmK50.roa (hash: LA2UVOwQLl1GFakMw+qYipgL+jCj7BhKjZLnryCHmW0=)
                          4: Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl (hash: 6G41prRo3Y/A2HRmMqFeffeCC24fVIWcB4VqD4k1h38=)
                          5: SwlwWC6qeIOhSte4Utz7PdUgqHg.roa (hash: yli4qoeWd8be0mGTI1Qdhmlvgjg03i5HcPN89QNf6ro=)
                          6: YV9r1QeLQLzsNDA1e3nBSw4JJKg.roa (hash: DakRO0YaXIPdaZGDlB/0rhFuDBB490F3NKmIPT2J1GQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:f5:ab:2c:52:30:5b:d4:8a:31:96:2f:7f:66:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
        Validity
            Not Before: Jul 29 06:01:44 2026 GMT
            Not After : Jul 30 06:01:44 2026 GMT
        Subject: CN=9cb47271e02a3fe56df2112caeb5582e262f7496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:1b:12:ef:08:1f:0a:63:34:27:68:ba:a9:
                    c2:df:cc:22:8f:75:f1:4a:6d:2b:b5:7d:35:d1:14:
                    c3:f4:02:4b:26:c3:8f:42:9b:e1:46:ce:0d:e6:88:
                    d6:51:ca:2e:61:a0:49:08:ea:6a:76:da:43:d9:82:
                    88:00:ef:07:1b:d0:8d:87:0d:dc:1c:33:da:fd:dd:
                    45:27:6f:40:4e:3b:a0:60:4e:53:a6:f9:3c:38:e4:
                    6e:d8:63:50:1d:aa:63:e5:b5:3f:40:20:c7:95:7c:
                    b3:c5:a2:b3:43:88:0c:d2:b6:7d:e6:82:b9:c8:c4:
                    7f:a0:b9:43:dc:ce:64:18:84:6d:b1:54:f2:ff:49:
                    78:0e:31:6b:2c:27:3d:ee:fd:d8:13:d0:4b:00:bc:
                    da:cb:5b:f4:46:27:17:41:86:92:ef:92:35:7b:81:
                    05:42:ac:33:b1:d4:fd:98:72:31:d9:07:71:6e:c0:
                    23:14:e4:21:c0:24:82:f8:71:90:2e:28:4b:08:08:
                    bb:0f:34:fa:be:16:24:e2:5d:92:04:5b:4b:d5:87:
                    3d:84:04:35:c4:7c:bd:e8:25:82:c4:a8:67:c7:54:
                    38:38:e2:2f:eb:11:50:ed:a8:6c:bd:65:89:f9:a3:
                    4d:d5:d4:f9:4b:8d:0d:80:fe:1b:dc:e5:c0:23:21:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B4:72:71:E0:2A:3F:E5:6D:F2:11:2C:AE:B5:58:2E:26:2F:74:96
            X509v3 Authority Key Identifier:
                keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2b:80:ef:de:f0:4e:52:fc:dc:50:6c:fc:bc:36:48:dd:a0:
         d2:ce:6b:08:c6:97:51:6a:00:17:dc:30:a7:7e:6c:69:86:c5:
         5f:1d:99:54:f6:74:fa:39:6b:c1:2e:c8:73:74:94:e1:5f:68:
         69:4c:7f:d0:e1:f4:29:40:1e:0e:9f:a4:37:d8:39:75:44:c4:
         3d:72:b5:48:8e:40:a7:63:86:9a:fc:78:04:76:90:d9:3c:58:
         db:23:c4:a5:38:ca:5e:6a:20:6e:2b:8d:2e:17:94:1b:d5:de:
         b2:d1:98:54:a0:b8:7d:a0:77:b4:c7:15:30:81:04:9f:67:81:
         cc:75:00:a0:39:10:06:3d:4a:48:cd:19:1a:e1:f8:81:1e:22:
         4a:2f:b7:1e:1b:a3:63:3a:b9:64:32:d2:f2:39:a9:2a:1c:53:
         74:b1:cd:91:40:08:b4:4b:7d:c4:58:fe:d7:7b:c3:9f:20:e0:
         71:e4:a4:d2:b5:08:0a:38:35:30:3c:b6:32:8d:0a:a5:02:58:
         5b:3f:e5:06:ef:4f:24:50:72:8b:58:5b:03:af:af:bb:00:b8:
         f4:a1:a2:5f:dc:50:6a:db:cb:9a:a9:fd:a3:52:ca:8a:a5:c4:
         36:33:44:01:f9:0f:04:1f:4f:82:8e:b6:b8:68:51:c0:9b:57:
         15:fb:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:36 2026 by rpki-client