Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File:                     4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier:          HWAYwankmvbrvYa0INoFK9VoVYSKUcFXrVrfiwRTPkk=
Subject key identifier:   87:87:A6:3A:FC:6F:B4:59:E7:91:BF:99:BC:D3:ED:7A:55:68:EB:F6
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer:       /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial:       019FA975769AAC0F7D33294EF2E660E0C3A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number:          0932
Signing time:             Tue 28 Jul 2026 16:01:15 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:15 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:15 +0000
Files and hashes:         1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: 7+hWbXmKhLU7oQQzLPOLm5SWo35YVeGka0VKOd1OsV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:76:9a:ac:0f:7d:33:29:4e:f2:e6:60:e0:c3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
        Validity
            Not Before: Jul 28 16:01:15 2026 GMT
            Not After : Jul 29 16:01:15 2026 GMT
        Subject: CN=8787a63afc6fb459e791bf99bcd3ed7a5568ebf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3a:b1:36:a9:97:17:07:29:d1:4a:c8:bd:9c:
                    e8:e7:91:ae:50:c2:a2:80:e4:37:80:f8:76:ea:46:
                    5a:d4:81:b3:ee:32:b7:83:c0:8a:4a:00:30:43:60:
                    2c:bb:23:ae:4e:94:db:da:48:14:ed:3f:bf:82:ec:
                    86:00:56:e7:eb:16:81:aa:1e:50:6f:4d:a6:e8:04:
                    32:04:f5:87:10:d2:cd:df:6a:bc:ce:e2:f5:df:4f:
                    37:6c:ae:07:f5:db:4c:a9:95:86:8d:40:6c:fa:77:
                    38:a3:a4:52:17:5b:3b:0f:72:b1:83:10:ec:e4:6f:
                    ec:3f:bf:98:ff:c6:01:7d:c2:54:fe:71:c7:19:ec:
                    9d:28:61:78:61:de:22:b8:52:ce:c5:15:88:4e:7a:
                    b5:f4:40:5f:6b:36:db:2a:5c:ef:a0:9d:a5:1c:e7:
                    49:68:bd:ae:e8:7f:2a:69:62:5a:67:c6:73:0b:1f:
                    c7:52:54:84:0e:09:f3:bb:8c:32:71:a5:e9:9b:e0:
                    e6:2b:8e:7a:4a:7d:7d:59:83:1c:43:90:90:a0:6b:
                    5e:ec:f6:73:67:37:e4:f5:2d:a9:81:06:32:97:ac:
                    b0:c2:50:5c:da:aa:64:fc:59:29:e5:3d:e0:35:f6:
                    f7:99:6e:58:57:1f:78:eb:78:13:e9:19:3d:d4:b2:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:87:A6:3A:FC:6F:B4:59:E7:91:BF:99:BC:D3:ED:7A:55:68:EB:F6
            X509v3 Authority Key Identifier:
                keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:c4:18:5b:20:94:5e:82:dd:0a:04:1e:97:54:8f:65:91:
         fe:81:e7:13:4b:f9:2c:b0:e6:26:01:b5:5d:f5:e7:cf:95:6c:
         0a:01:77:b9:11:3b:08:6c:d0:04:27:54:71:5e:fa:11:84:9a:
         56:44:c5:d7:4c:87:43:a4:ff:cd:68:ca:6d:8d:8c:e6:6e:dd:
         f7:31:3c:64:6f:e5:01:ce:35:83:6a:5a:ea:1a:5d:18:d5:4c:
         29:3c:08:58:16:13:95:57:1a:f2:9f:fc:93:8c:96:e2:fe:a8:
         d8:b2:b4:2d:49:86:b3:b1:58:4c:43:aa:a1:19:31:db:0d:b1:
         70:6c:29:33:90:71:25:69:dd:15:ee:2f:13:55:c6:fc:82:08:
         3c:72:cf:76:19:b0:a0:d9:d3:b2:2c:20:79:4a:3a:49:d0:e9:
         91:c7:68:d4:9e:d5:75:82:6a:55:07:39:d4:ef:b9:2d:a0:af:
         02:6c:5a:ae:91:93:18:eb:ce:8a:d8:f7:77:3a:30:60:6d:f6:
         c2:b3:c3:c9:6f:18:d5:61:1e:2a:2c:c2:0d:d6:15:f5:c7:8b:
         94:25:58:f8:d5:83:e9:fd:96:dd:3c:e2:9c:49:95:64:f5:64:
         9e:04:c2:dc:52:df:21:d2:c3:49:54:7f:40:b5:76:ce:17:c1:
         17:a2:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:48 2026 by rpki-client