Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File:                     4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier:          eVvevAmxs3kkoLQ2sl4WESLVTQrw9vUGuAo5bQkr9ds=
Subject key identifier:   B0:13:76:08:A5:01:10:87:51:D4:0E:C8:90:58:A0:86:CD:41:5B:96
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer:       /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial:       01A0C8FD3CB13CC9BFC795A5642DD10AFF47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number:          073D
Signing time:             Tue 22 Sep 2026 12:00:34 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:34 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:34 +0000
Files and hashes:         1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: LzFbo37cFXoJVO+71upVMpJ2V9QzJL2kyAgwGjg44bo=)
                          2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:3c:b1:3c:c9:bf:c7:95:a5:64:2d:d1:0a:ff:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
        Validity
            Not Before: Sep 22 12:00:34 2026 GMT
            Not After : Sep 23 12:00:34 2026 GMT
        Subject: CN=b0137608a501108751d40ec89058a086cd415b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:10:bc:80:a6:10:6a:27:49:3d:72:88:ed:
                    cc:49:78:13:4d:ed:02:e3:0d:08:04:a8:b7:74:16:
                    42:91:de:62:c1:42:6f:1e:e9:d6:d0:44:3f:59:28:
                    68:29:e6:67:a3:61:11:82:7b:e2:7b:46:47:7e:e4:
                    68:7f:08:1a:ff:c5:ba:9f:32:f6:0f:76:33:ba:d9:
                    21:80:09:10:c1:ae:89:da:31:a1:b4:e8:da:c4:86:
                    08:80:ba:19:ec:c3:61:9d:ed:0c:d0:fb:d3:55:b2:
                    cc:c3:b0:8d:15:5c:7c:3d:93:30:42:5d:39:93:50:
                    4f:f4:0f:6c:03:d4:74:08:81:4c:3d:e6:65:dc:9d:
                    03:97:37:e6:a8:bc:59:98:0a:c5:9a:b9:7d:3b:c6:
                    9e:3b:60:f3:6d:0e:24:8d:7a:5c:d0:79:37:33:f2:
                    1e:8b:79:b5:fe:4f:0e:42:de:f2:38:08:67:77:9a:
                    18:95:05:ec:70:bc:6f:6e:54:71:09:61:cb:21:91:
                    9d:53:5d:e4:2e:77:79:fa:bd:ef:14:e6:3d:1d:b1:
                    9f:6f:76:ba:3f:79:43:6d:8d:58:24:49:92:ae:79:
                    fb:d6:c1:b9:f4:2a:64:72:c1:5c:12:c5:0c:35:34:
                    e8:aa:d1:e5:50:5d:7c:7a:a1:81:92:eb:86:9b:51:
                    b8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:13:76:08:A5:01:10:87:51:D4:0E:C8:90:58:A0:86:CD:41:5B:96
            X509v3 Authority Key Identifier:
                keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0d:5b:69:fc:13:98:d2:65:6a:a8:0e:94:74:95:db:9d:36:
         e9:6f:de:de:a3:43:83:e3:c8:0a:d0:5b:50:3d:11:c8:a6:51:
         48:eb:92:81:2d:aa:84:d4:55:8e:8c:9f:ba:31:a8:f3:8f:f9:
         34:fa:b1:ec:3f:a8:8e:0c:9a:41:3b:28:ec:45:0f:81:13:2b:
         d6:1a:3c:e7:f7:7d:0e:9c:5a:bd:6d:6e:43:67:0f:c9:b6:c2:
         3c:df:1b:bf:5c:fc:1b:e1:d5:13:86:1c:ca:31:73:c7:6c:0e:
         dc:b0:b2:23:ad:94:1a:82:e2:a5:a9:91:f9:f2:22:af:88:2d:
         4b:15:f2:c4:27:61:f7:20:5c:89:5f:1b:e9:46:94:d1:33:62:
         4e:e7:1e:95:43:8f:dd:97:52:dd:9b:90:dc:7d:ed:d8:a8:d0:
         67:b0:42:6d:8d:05:a5:8f:6f:29:ec:9a:75:4a:ce:c1:8a:8b:
         c0:50:79:28:c2:e8:2b:43:1f:ee:d1:37:86:80:1c:6f:1b:b2:
         37:b8:6e:c9:e7:9b:55:d4:fc:76:8b:c7:05:84:de:fc:ce:92:
         fa:46:4e:15:cd:17:7e:0d:b4:e2:01:a0:8c:2b:a1:1f:2b:e6:
         b5:ae:8f:62:ae:4b:ac:36:20:32:ab:c8:27:61:38:fb:43:46:
         a1:a3:51:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/TyxPMm/x5WlZC3RCv9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTIxZjg1ZjliZjE3YzAyMDk4N2VhMTMyMGQzZDYzYzU1
YWU0ODkwHhcNMjYwOTIyMTIwMDM0WhcNMjYwOTIzMTIwMDM0WjAzMTEwLwYDVQQD
EyhiMDEzNzYwOGE1MDExMDg3NTFkNDBlYzg5MDU4YTA4NmNkNDE1Yjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYQQvICmEGonST1yiO3MSXgTTe0C
4w0IBKi3dBZCkd5iwUJvHunW0EQ/WShoKeZno2ERgnvie0ZHfuRofwga/8W6nzL2
D3YzutkhgAkQwa6J2jGhtOjaxIYIgLoZ7MNhne0M0PvTVbLMw7CNFVx8PZMwQl05
k1BP9A9sA9R0CIFMPeZl3J0DlzfmqLxZmArFmrl9O8aeO2DzbQ4kjXpc0Hk3M/Ie
i3m1/k8OQt7yOAhnd5oYlQXscLxvblRxCWHLIZGdU13kLnd5+r3vFOY9HbGfb3a6
P3lDbY1YJEmSrnn71sG59CpkcsFcEsUMNTToqtHlUF18eqGBkuuGm1G43wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLATdgilARCHUdQOyJBYoIbNQVuWMB8GA1UdIwQY
MBaAFOGiH4X5vxfAIJh+oTINPWPFWuSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFJZmhmbV9GOEFnbUg2aE1nMDlZOFZhNUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81MzIwOGQtNmMzMS00ZTEyLWFhMjUt
ODYyNjg0ZWNlYjQ2LzEvNGFJZmhmbV9GOEFnbUg2aE1nMDlZOFZhNUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81MzIwOGQtNmMzMS00ZTEyLWFhMjUtODYyNjg0ZWNlYjQ2
LzEvNGFJZmhmbV9GOEFnbUg2aE1nMDlZOFZhNUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFw1bafwT
mNJlaqgOlHSV25026W/e3qNDg+PICtBbUD0RyKZRSOuSgS2qhNRVjoyfujGo84/5
NPqx7D+ojgyaQTso7EUPgRMr1ho85/d9DpxavW1uQ2cPybbCPN8bv1z8G+HVE4Yc
yjFzx2wO3LCyI62UGoLipamR+fIir4gtSxXyxCdh9yBciV8b6UaU0TNiTucelUOP
3ZdS3ZuQ3H3t2KjQZ7BCbY0FpY9vKeyadUrOwYqLwFB5KMLoK0Mf7tE3hoAcbxuy
N7huyeebVdT8dovHBYTe/M6S+kZOFc0Xfg204gGgjCuhHyvmta6PYq5LrDYgMqvI
J2E4+0NGoaNRPw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:17:41 2026 by rpki-client