Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
File:                     4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft (raw, json)
Hash identifier:          oJH22QEgKagL8unWC1iTLT29MLmYwYzJ2g+nbHwU3ms=
Subject key identifier:   86:30:8E:C9:56:76:7F:9A:4D:FA:50:12:B4:50:FD:43:47:E8:0F:2B
Authority key identifier: E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
Certificate issuer:       /CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Certificate serial:       01A13D1342622EF4D7B83212F7CCD8759FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
Manifest number:          1AA4
Signing time:             Thu 15 Oct 2026 01:00:34 +0000
Manifest this update:     Thu 15 Oct 2026 01:00:34 +0000
Manifest next update:     Fri 16 Oct 2026 01:00:34 +0000
Files and hashes:         1: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl (hash: fJ327H69JQBDnStW8TAFiJN1kVIH7XVJqvJDA8VLAyQ=)
                          2: limcXQL5irLoJkXVtLb_HxKT9Cc.roa (hash: aQ8BkEO1FUkjaNo1mk5XdjSymKmGcpWue4kgaoY47rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:42:62:2e:f4:d7:b8:32:12:f7:cc:d8:75:9f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31da2ba057e9a54a6170f257ff97856dc97e068
        Validity
            Not Before: Oct 15 01:00:34 2026 GMT
            Not After : Oct 16 01:00:34 2026 GMT
        Subject: CN=86308ec956767f9a4dfa5012b450fd4347e80f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:bd:50:5c:fc:4d:f8:92:61:86:48:b4:1e:
                    43:6d:6e:4e:28:02:c0:60:4e:f3:27:ba:4d:fc:0d:
                    b0:8e:ea:56:84:29:fc:81:dd:1c:ae:c8:31:bf:4a:
                    21:17:2b:0b:29:cf:5b:49:60:c8:a8:84:3b:55:3c:
                    2c:6e:2b:75:18:d4:a8:5e:df:f3:bb:18:7b:a3:46:
                    76:0d:06:74:d1:05:ed:f0:20:ff:3b:00:3e:f6:c5:
                    23:09:36:33:45:65:69:82:82:9b:5f:57:56:66:4c:
                    7b:37:19:7c:94:54:99:b7:b7:7f:67:cc:ac:88:fd:
                    a2:19:02:1d:35:e1:b7:22:fd:0f:67:08:7a:f8:34:
                    60:2c:2b:e1:90:86:a3:a3:4c:5b:e6:2d:76:b8:67:
                    7a:12:b3:c7:cf:81:4c:81:b1:d6:ac:dc:83:a0:77:
                    27:ff:ca:f4:b4:c3:ef:77:cd:5b:07:77:84:ad:75:
                    0b:1a:ff:5d:81:0b:b0:e7:7a:80:ec:49:bb:02:d9:
                    73:8c:2a:0e:7c:39:f9:74:81:f0:20:f1:d2:60:17:
                    5c:c6:89:00:38:7e:59:e3:17:d8:87:3f:6c:31:e5:
                    8e:88:62:53:2a:e1:50:b5:7f:f1:67:ec:7b:0b:c8:
                    39:c4:b9:29:6f:2c:cf:3a:58:f9:bc:b0:cb:06:da:
                    0a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:30:8E:C9:56:76:7F:9A:4D:FA:50:12:B4:50:FD:43:47:E8:0F:2B
            X509v3 Authority Key Identifier:
                keyid:E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d5:ea:0f:3a:58:d9:b7:b0:d8:95:73:b3:20:16:3e:b7:36:
         b1:85:f9:6d:31:d8:14:28:c5:68:95:70:3f:76:28:b3:d5:70:
         1a:66:42:84:20:1b:ed:32:c1:bc:78:91:2b:2d:99:1f:17:3a:
         cc:c4:4a:74:3f:ad:42:07:19:f3:f9:d7:6d:5c:d0:a9:57:a6:
         42:e1:5c:54:e2:cc:21:a3:82:af:39:2e:93:93:60:8d:b4:5e:
         9a:bd:73:f5:75:18:1f:6e:a5:82:c2:fa:d3:50:0f:60:72:48:
         15:2c:ea:e8:53:66:e8:6b:0f:42:72:98:78:a0:bf:48:e9:39:
         10:08:ac:da:f6:55:14:71:5d:4c:85:8a:75:e0:4d:ae:c7:12:
         c5:6d:c6:f5:88:84:e2:5a:49:30:3d:9f:81:d3:7e:b1:44:78:
         9a:9c:25:71:b9:02:2e:26:42:52:dc:1d:b2:74:3f:ec:5d:1c:
         b7:cd:6e:d8:a0:8f:4f:4a:27:08:89:c6:d5:7b:1d:76:85:75:
         1b:0b:87:51:9f:28:15:09:4a:f6:8f:17:45:5f:8d:db:8a:11:
         f5:d7:88:6b:fb:81:26:74:7a:ff:0a:72:ee:4d:9d:e3:f0:0f:
         d0:a4:08:db:fe:cf:cf:ce:a4:d1:27:52:47:9b:c3:c8:70:48:
         20:44:05:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:37 2026 by rpki-client