Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
File:                     4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json)
Hash identifier:          EGxJhoCeXcU5GuwyusfXqmrrMRdvi566lpoN5bHtIaU=
Subject key identifier:   21:1D:D1:5D:19:D7:1F:B0:29:25:B0:D3:AC:D9:EE:33:85:A3:95:8B
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       01A0A93BA91CFAA541C930F6861AB903E514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
Manifest number:          1A86
Signing time:             Wed 16 Sep 2026 08:00:54 +0000
Manifest this update:     Wed 16 Sep 2026 08:00:54 +0000
Manifest next update:     Thu 17 Sep 2026 08:00:54 +0000
Files and hashes:         1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: YXC5qYH5R/IWqPinqufzTHPxtQJCrtJEtW4XpFrQyhE=)
                          2: 6tTmYQwXOKfIx8EFjvxOkACOgVE.asa (hash: B+RAPGXA/BvL3QEc86FbnID2OOj7wYJWGGhX0NgqKgw=)
                          3: H6apiE0r9rOHvwzUANUDplSJSTM.roa (hash: cqjpgcUWiCJ8i4KpFtLhuI6KYkP0u+mdUggey1II1u8=)
                          4: HO--5wVYjTks1d4pGuEUndfhIc8.roa (hash: PSZ01mmnd3IXqRjRDT7Afa21Y0Y9+VVQ6A0uP0yE5t4=)
                          5: MW9IWiMaMbGWFIKAeGiIeFNoSuk.roa (hash: WXFlau1tw1wJE2NKxIsomrLjPJJN929dyuhMW8ngWzA=)
                          6: MdU1TDg6gPzzC5Jls0YI4g9dlJY.roa (hash: j2NCQtDtoHkREqMeNzVs0PKFMT/ogTJaPYMRxR3JZtM=)
                          7: T-DUSJ-O8JuK2PTgLk1errJO3_0.roa (hash: gJp14x3RVojW4Suzi+mnaQxUdouo4FmMOXfOj5Yct9k=)
                          8: ZHbHMoVLkFBwhZlfsyeyMo-r1YI.roa (hash: uDFD5MRDq12e9FrZ9TcR4muF3bF0UyIZh3ZvvCBU2ko=)
                          9: ZxZQikqsaz0OBgAuk40P1B9mOf4.roa (hash: +lV4F2CcosnXBXnETAHYkbM6uZLP9AqAiX7Djks3Lcg=)
                          10: iEeEp42GZdk24J_XhsWfZczs8bI.roa (hash: Es9r36V7+YULS9141hzfnZoXbLZeW7YOudDWcJDuqPo=)
                          11: iFaMxfToISMhuIOtnklJbKH8sU0.roa (hash: kU5eLBTCsLrlHtahyO4pMWGlPVbZxhPgtGU2m2KhHJU=)
                          12: kivoHyrrTapcSTu_dcsRevtd1qU.roa (hash: vlUy1Pp06OgEmxAK5wPWEB8oYerqdlsGZx57sDlsb/I=)
                          13: knMCjsMKq8boFlcM4TD-NB1mee0.roa (hash: 5pXrohpLzHpy5wR5NL0Pk7xascagMMWfyt+Jyy021+I=)
                          14: nBm950xJAm9pONVZhHt0wVFEq7Y.roa (hash: ZyCH9JBRPWP0WR4LL51Jbb1msIvVHDWA7bezxMkIVWY=)
                          15: orZjZ-bLi4QKzxMYS8aOyD5DwHw.roa (hash: j0NxewdNRbQ+iT6xBmN+n5xKVYa/xRMyvSC57UkHgro=)
                          16: wGxMkOKwYRGUeVwmL4uEg4oCpRQ.roa (hash: nnLs9+jHXNnt9wq/cQKewcR5GdgxSXwPrxibYjjofOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Sep 2026 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a9:3b:a9:1c:fa:a5:41:c9:30:f6:86:1a:b9:03:e5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Sep 16 08:00:54 2026 GMT
            Not After : Sep 17 08:00:54 2026 GMT
        Subject: CN=211dd15d19d71fb02925b0d3acd9ee3385a3958b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:a0:1b:1c:c6:93:54:fd:b2:62:a9:1c:3b:
                    2f:12:c2:64:27:86:a2:b9:58:53:ad:d9:b5:45:78:
                    23:f6:53:7a:cd:c6:a7:b3:b9:01:2e:c7:d4:63:d4:
                    e4:d9:ea:54:58:61:35:8d:8c:85:bd:21:26:82:04:
                    12:cd:3c:b5:21:99:e4:00:21:ca:20:37:d0:b9:99:
                    19:02:ae:5d:da:2c:08:e2:7a:f0:e6:0b:26:25:b1:
                    c9:a6:55:2f:20:2c:1c:17:9a:f3:b3:ed:a6:a3:bf:
                    06:4d:77:a3:e2:96:4c:be:7d:0a:77:ea:f2:69:08:
                    74:e9:15:58:2d:d0:72:ba:0f:d8:d2:42:b6:ab:f5:
                    9a:50:7e:f1:cc:a7:0b:af:6e:34:e6:79:0e:8e:a0:
                    25:c4:aa:ad:a0:7f:5e:20:9d:1a:35:00:d7:68:45:
                    55:53:60:6c:84:60:b2:e9:89:75:0a:6c:e5:23:25:
                    08:5f:a6:46:08:8a:54:a2:d6:6a:00:ab:ac:fb:0b:
                    1e:ad:a1:39:3b:e9:75:2d:c7:67:d8:16:4b:fa:a8:
                    b5:76:24:03:de:f5:46:65:1f:00:dc:46:05:3b:89:
                    c2:0e:68:6e:98:d6:2e:70:82:c9:1c:ac:6b:be:2f:
                    dc:d4:00:42:df:49:34:4a:ac:96:b0:af:73:db:c5:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1D:D1:5D:19:D7:1F:B0:29:25:B0:D3:AC:D9:EE:33:85:A3:95:8B
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a4:12:ef:6d:36:bb:74:90:01:06:11:81:1a:fa:c9:5a:cc:
         fd:f2:8c:ac:68:74:74:c3:66:e7:43:c5:66:41:47:86:68:dd:
         ef:1e:c6:9e:46:a3:cb:c8:d7:4e:d5:da:7c:a1:40:cf:bb:f4:
         b4:dc:29:19:02:8c:6f:fb:6a:84:79:ae:cd:d9:09:ad:75:6b:
         3d:b3:e5:ec:22:77:ce:69:8c:b4:49:71:0f:78:6f:6b:e4:28:
         01:8d:c6:14:3b:b6:3a:23:bf:ac:4f:2a:55:a5:f8:da:56:d2:
         d3:45:f5:f4:b8:be:8d:6e:5e:d2:34:cf:ec:21:8d:3a:e0:e2:
         e9:77:b2:d9:cd:10:ad:d2:a2:34:46:88:f8:67:45:ac:2c:76:
         ad:ce:39:b6:bd:b5:0a:bb:7d:c6:67:13:05:76:cd:d3:e5:ac:
         59:64:cc:96:d1:d9:2c:20:63:84:8d:d5:0a:06:bd:8b:cb:2a:
         18:eb:b7:c7:bb:f8:fe:53:7e:d7:b2:d9:9f:5d:04:a9:d4:2e:
         54:72:2f:7b:ef:cb:81:ec:79:78:ec:a1:8d:df:61:33:4c:8c:
         8f:6d:25:7c:e2:9a:e3:f6:0c:a5:5e:69:53:8a:90:6c:40:69:
         54:83:60:bc:db:1b:18:ec:59:62:a5:b5:36:ec:a6:02:bc:45:
         52:c7:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 12:45:23 2026 by rpki-client