Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File:                     4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier:          dL1/eCmaOKAAzgaHbMKN+qm2GhkirgU3B03e1KZOYOM=
Subject key identifier:   1B:0C:74:A6:86:BE:C0:0F:A4:37:0D:47:2B:D3:51:A7:09:5C:25:1D
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer:       /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial:       019E31174331F2396C4FB0B29A0A62DFB250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number:          0C53
Signing time:             Sat 16 May 2026 14:01:08 +0000
Manifest this update:     Sat 16 May 2026 14:01:08 +0000
Manifest next update:     Sun 17 May 2026 14:01:08 +0000
Files and hashes:         1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: 7/NYvvakSL1e0FFWf824NYArdVsLcXq3qXjyieCs/Rs=)
                          2: NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa (hash: e6t60cVHGwxB0yMWg7tXzy3uxaUsUhD5hfxLuTTJHN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:43:31:f2:39:6c:4f:b0:b2:9a:0a:62:df:b2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
        Validity
            Not Before: May 16 14:01:08 2026 GMT
            Not After : May 17 14:01:08 2026 GMT
        Subject: CN=1b0c74a686bec00fa4370d472bd351a7095c251d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b8:88:4e:0d:32:bd:02:d2:da:a5:f7:8a:3d:
                    ce:62:9c:3c:13:ed:cb:7a:b8:48:17:2d:e1:45:59:
                    af:e5:91:30:53:b4:d7:86:3f:88:95:a1:d0:23:f3:
                    35:cc:16:ac:51:1e:c3:62:ad:6d:95:b2:6e:fd:34:
                    1d:6c:f5:fa:a3:e0:69:4e:8a:80:0f:b4:28:fc:0d:
                    6c:2f:52:7d:16:62:78:e0:ce:f4:bb:73:2f:4c:3d:
                    ed:d5:4c:2a:86:8f:00:f6:e0:a7:df:02:a4:5d:a5:
                    ea:7f:8c:09:a8:d4:8f:34:64:ba:ec:0d:a5:85:d9:
                    24:f8:3b:50:9d:13:c8:69:87:41:ff:9d:97:3f:c3:
                    39:7f:82:77:b2:9e:5a:9d:3b:b9:7a:e6:d1:0e:95:
                    0c:2e:47:d4:9e:12:54:59:b1:0c:30:a2:47:8f:86:
                    54:74:11:02:45:52:42:51:a6:cd:22:27:c1:19:20:
                    6b:58:6b:c8:86:a1:b6:0d:c4:43:86:cf:be:8b:e6:
                    d9:70:e2:0c:eb:c7:dd:19:8a:20:c5:be:c2:a8:66:
                    95:22:20:60:1d:06:48:19:46:51:f7:45:50:6f:ad:
                    33:18:22:21:f8:e9:f2:bb:ed:ea:68:d3:ef:82:9e:
                    7c:bf:41:cb:53:db:5b:9c:22:d0:40:12:cf:7a:27:
                    c4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0C:74:A6:86:BE:C0:0F:A4:37:0D:47:2B:D3:51:A7:09:5C:25:1D
            X509v3 Authority Key Identifier:
                keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f4:fb:99:21:83:b2:7c:67:d0:a6:39:96:d6:d8:d3:dd:25:
         af:fe:a1:6a:15:b1:29:68:f7:42:aa:bc:8b:b4:17:50:ac:dc:
         fc:ce:8b:a9:80:a3:e5:5f:8c:36:77:e9:50:bd:57:68:2e:2f:
         b2:05:24:63:d9:06:39:39:99:8c:79:5d:2c:42:d6:ef:3c:e5:
         de:ac:2e:47:97:0d:98:e0:74:3b:c4:34:e7:01:d0:28:68:11:
         b1:4f:e4:cd:72:9d:59:d2:c2:16:db:9a:95:77:98:b3:fb:bc:
         82:fd:c8:f9:a1:57:db:9a:60:31:63:f2:2f:a0:84:33:e4:97:
         a1:d3:a2:57:c4:dc:ae:48:91:71:85:0b:87:10:08:41:61:b2:
         5f:aa:3b:55:04:0d:fc:d6:4d:6a:32:4f:a5:1e:af:19:ad:a3:
         3f:4b:28:00:14:64:82:4a:ea:4d:af:5a:33:59:32:6a:13:c8:
         94:75:1a:22:00:eb:ac:32:97:20:b3:d0:d6:c4:ad:4b:14:72:
         7d:9c:3e:08:87:8d:6a:45:c7:41:f8:80:ae:e7:09:4b:1e:ab:
         74:7c:7f:c2:96:cd:ba:bb:0b:bd:ec:5c:be:ec:75:2f:29:6e:
         0f:23:ca:cd:11:ca:08:b6:fc:6d:87:c6:36:06:2d:d9:a2:e9:
         d5:42:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:48 2026 by rpki-client