Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File:                     4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier:          2w06TyB/FsUQ7ebIfMbJQRPDqZ+J79ArsfAjbrPVdJE=
Subject key identifier:   37:DD:B7:77:70:DB:CF:A7:27:51:18:FD:D2:F9:84:FA:3D:78:A9:F1
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer:       /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial:       01A00101BD036DFB5D5D77484E95286413AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number:          0F58
Signing time:             Fri 14 Aug 2026 16:01:26 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:26 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:26 +0000
Files and hashes:         1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: W0xUglKhFSlX9lagidF4h9Q4gJUw6x1/b6lPQNvdPzY=)
                          2: QtPhnyLsRRN8U6hpcPXp4Z0oWqY.roa (hash: i0nu2P6NxLQ5ERHa8d6GR72neeBYjpf7KkNPNvBe0Gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:bd:03:6d:fb:5d:5d:77:48:4e:95:28:64:13:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
        Validity
            Not Before: Aug 14 16:01:26 2026 GMT
            Not After : Aug 15 16:01:26 2026 GMT
        Subject: CN=37ddb77770dbcfa7275118fdd2f984fa3d78a9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:0d:c8:0a:21:39:d2:33:ec:3c:19:fb:bd:
                    10:3b:20:d9:50:38:7f:49:e2:1d:6c:ca:f9:ac:0b:
                    e6:f4:fe:13:48:dd:ce:18:99:6c:0c:52:50:36:84:
                    b7:11:03:76:fb:5e:53:ac:99:d4:91:7a:94:dd:7d:
                    48:da:a6:fc:02:d4:b8:ac:e5:83:ac:3f:8b:a2:14:
                    81:67:ba:98:d7:5b:b6:32:aa:1f:e9:ae:05:9e:87:
                    e6:a8:45:10:76:b2:f4:1e:b8:7c:d8:46:8f:d7:a2:
                    e3:9c:87:3e:2e:d6:70:fa:88:0c:96:44:10:d9:f4:
                    ee:a3:6f:83:c9:c2:bc:2c:01:08:5f:f8:f2:20:05:
                    4f:68:b5:20:3a:de:00:6e:fb:82:4d:ad:5b:4e:9a:
                    02:97:2d:cf:39:b3:79:6e:59:de:4c:cc:40:30:23:
                    c9:f0:4b:ff:8d:08:b7:d0:71:77:92:17:29:42:8c:
                    17:2e:9c:3e:8b:d4:8e:a9:40:5b:1e:3b:87:e0:59:
                    b7:82:c1:af:bd:66:a0:1e:99:38:bf:47:cb:da:fb:
                    5e:d8:a4:3e:3f:9f:2c:a5:4f:f2:37:66:84:56:e1:
                    f1:c5:3e:eb:1a:02:02:b4:0e:e3:21:ed:8a:f6:e1:
                    a2:e1:b8:c8:62:e7:f2:98:c2:08:f8:be:a0:ba:36:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DD:B7:77:70:DB:CF:A7:27:51:18:FD:D2:F9:84:FA:3D:78:A9:F1
            X509v3 Authority Key Identifier:
                keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b7:ed:9b:f5:14:82:0a:53:6e:e8:3f:20:87:bf:da:62:8c:
         e7:cd:2b:8d:78:7d:64:4d:44:5b:5b:1f:a9:43:04:9d:4e:71:
         d6:f0:0a:4d:f1:8b:9f:19:15:06:49:fe:b2:95:ab:93:fa:1d:
         d8:75:54:bc:95:ab:1d:91:b0:b2:08:42:12:68:ae:51:9c:d7:
         99:33:c1:47:64:c5:d8:32:ee:a7:bf:16:2f:f5:ec:b4:ad:5b:
         0b:e5:ee:14:fd:9f:70:9f:29:5a:32:c6:cd:00:63:d5:11:78:
         10:74:69:16:ff:00:49:41:36:e8:e2:13:59:a0:1d:50:09:4f:
         a3:9f:d6:00:25:27:44:82:54:e4:00:03:90:23:43:08:bc:f0:
         5d:ce:32:50:1d:f4:e9:68:9e:30:0a:50:d1:e2:9a:52:c1:94:
         b2:db:ca:d1:e2:e6:2b:8b:cb:b1:73:4e:94:7a:f1:34:62:98:
         2e:17:0e:48:94:21:9d:27:b2:75:6e:6a:4a:1f:83:af:82:ce:
         0a:81:ce:a4:24:cb:e8:e3:5e:5b:8c:68:98:ae:bb:83:a2:ef:
         84:1b:c8:42:64:ee:df:a5:ea:dc:ed:30:96:a9:52:bb:b7:47:
         45:30:a9:f4:b4:d8:20:6a:82:2f:6d:01:90:30:19:5e:d5:ae:
         73:6a:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:43 2026 by rpki-client