Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File:                     4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier:          p86eJxSzQoSyjsvkvCzF9Z3KHsW/LC2YNdJLgUGC110=
Subject key identifier:   98:CD:5A:E7:35:D8:65:A9:12:5A:C1:0A:DA:EC:C8:50:11:F3:55:41
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer:       /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial:       019F18D6F6C486EFAE5C1B346FD1EB24EE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number:          0CCB
Signing time:             Tue 30 Jun 2026 14:02:48 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:48 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:48 +0000
Files and hashes:         1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: WUKQ8XPx3vTCVOytIMr9YLCYA20vDugs3+vQymn20Pk=)
                          2: NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa (hash: e6t60cVHGwxB0yMWg7tXzy3uxaUsUhD5hfxLuTTJHN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:f6:c4:86:ef:ae:5c:1b:34:6f:d1:eb:24:ee:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
        Validity
            Not Before: Jun 30 14:02:48 2026 GMT
            Not After : Jul  1 14:02:48 2026 GMT
        Subject: CN=98cd5ae735d865a9125ac10adaecc85011f35541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:0a:34:77:16:5a:90:76:3d:82:11:2f:4e:
                    a0:7c:c9:28:49:cc:53:62:dc:05:a3:53:47:a2:07:
                    b5:92:04:06:55:a4:10:3f:4f:f4:9d:c7:d4:ea:1a:
                    1b:9b:9f:c2:1e:b8:0f:80:98:7e:08:33:b2:5d:63:
                    43:18:9c:25:ee:67:65:10:f2:ca:1a:f7:b5:47:cc:
                    9c:cc:ea:ed:73:5d:cf:d0:b4:18:53:3b:e8:d6:07:
                    f7:e9:0d:9b:7b:bc:9e:e6:02:71:9a:2f:6c:32:9c:
                    72:b8:2b:55:b1:ae:bc:c8:c8:8d:69:e0:76:27:ab:
                    e6:0d:46:64:a3:c7:9a:82:79:7a:ab:b0:6d:e1:ac:
                    4c:d9:89:df:2a:33:cd:17:4a:89:30:8e:a7:6d:35:
                    e5:65:25:9b:50:7d:b0:e4:b7:32:10:24:ae:df:f5:
                    39:d8:d7:e5:bb:ab:c1:79:c6:e1:ef:5d:a6:98:a4:
                    bc:48:bc:20:e4:86:94:39:41:7d:e4:55:0e:8b:72:
                    b1:88:57:fb:67:17:3d:95:70:e5:ab:37:38:a6:93:
                    ad:df:2a:08:bb:be:40:ee:b3:43:6d:d3:dd:e3:2c:
                    0e:ad:ff:db:e1:53:1b:0e:b4:48:c5:50:e4:45:aa:
                    83:b2:8e:e3:31:63:40:e5:58:b0:fb:5c:a3:66:dd:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CD:5A:E7:35:D8:65:A9:12:5A:C1:0A:DA:EC:C8:50:11:F3:55:41
            X509v3 Authority Key Identifier:
                keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:32:53:e5:4b:f0:0a:69:26:63:0c:d9:1c:3e:1b:ae:93:e6:
         98:61:3f:75:a5:16:75:b5:05:52:31:58:da:e8:10:3f:60:fe:
         64:ca:d8:4f:d4:46:ce:c5:f6:c3:27:a4:da:6a:95:8d:ee:22:
         c9:10:60:3c:19:bc:0b:90:d7:7b:95:7d:71:f0:cc:72:63:94:
         5b:35:3b:76:7d:87:5a:0e:e9:9c:1b:7c:f4:6e:37:12:5d:ff:
         4c:9d:59:ae:bb:ef:a7:56:75:26:4f:ed:31:74:f9:d2:45:0f:
         c2:0a:87:30:73:b5:d3:2b:e9:b3:71:ea:20:2e:5b:18:6e:d4:
         a5:bc:6a:f7:8a:43:40:6e:62:bc:3b:4e:85:db:c5:0f:6f:c4:
         fe:dc:b6:9c:e8:86:6d:1e:b2:d2:0d:48:1e:cb:1c:19:10:71:
         4e:f5:cc:59:17:f7:1f:7d:f8:95:5a:d8:21:6f:45:d2:2b:64:
         f2:33:97:4b:87:1a:88:9d:52:21:29:6b:c6:20:ed:83:32:3e:
         f9:30:74:ce:3f:15:39:06:1a:50:79:b6:c5:68:22:bf:93:22:
         ae:b0:64:76:15:be:97:ed:82:4b:4b:cc:0e:6f:4b:41:b1:b3:
         a3:1b:4c:11:68:2c:3c:d2:75:15:d3:e7:0a:32:29:85:12:04:
         ec:e3:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:10 2026 by rpki-client