Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
File:                     4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json)
Hash identifier:          m7a5ScpVM32vSrxzdSN3r9XnSI1BgHQkI6roAmgvjIM=
Subject key identifier:   80:58:5B:05:77:53:B5:E9:43:91:56:32:31:46:1E:AF:86:32:54:C9
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Certificate issuer:       /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial:       019DCDBE0F712DB16E1EFCEF5D496B757DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
Manifest number:          18E8
Signing time:             Mon 27 Apr 2026 07:01:18 +0000
Manifest this update:     Mon 27 Apr 2026 07:01:18 +0000
Manifest next update:     Tue 28 Apr 2026 07:01:18 +0000
Files and hashes:         1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: yIgne839+/QXV41tOCx5klTWqcjNo95OrxoWRCa00QA=)
                          2: Wi5MJkqvObCqrjZBlo0JDmeXkfI.roa (hash: 99QCRcjIbmAy7NXYDozY/LitcvyDVNBk3XTYfLTEqtM=)
                          3: X4Jj1-4HqPQyHoz2uvlpMoAV66I.roa (hash: U8BCAKAOabJXvpxRbVFDeRvoLuUy39ScZ8CQFXOkfKo=)
                          4: bRn03FRlSzZThZNkviNVTHKQJGs.roa (hash: xEDx54ik3RAUzg+a27rbqvQuS4hz986uk0RMqkm7R+M=)
                          5: el7Foe7CpoESR0E_lBDRq_2Ohz8.roa (hash: /kLAJJz2VIOJRlWwXrYI0vRC2jlyRUsDvBRbglDgwCs=)
                          6: mccsr8m8ho2_mF3Ywy_9oaBImlk.roa (hash: 8fr0OzT5KHo+mYjffMlKzkDxAz4/c/4/JdZVWTqaEVk=)
                          7: pY-w966p6TcVCR_ceh3iqo8tBvM.roa (hash: 9v8cY+ONlAQ5plK0CUQaAsntXexrpXKvoAQArC1anGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:be:0f:71:2d:b1:6e:1e:fc:ef:5d:49:6b:75:7d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
        Validity
            Not Before: Apr 27 07:01:18 2026 GMT
            Not After : Apr 28 07:01:18 2026 GMT
        Subject: CN=80585b057753b5e94391563231461eaf863254c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:51:e0:65:25:04:57:73:28:be:9c:a8:3c:
                    7c:fd:66:83:65:e9:63:fe:97:30:c8:3b:e1:fb:ee:
                    0e:6e:12:5d:94:df:4c:ae:71:b9:b4:56:67:40:e0:
                    8a:69:93:05:68:c2:16:e6:a2:e8:a0:30:ea:40:3d:
                    7f:d3:f9:ad:3b:b0:3b:25:38:85:71:f4:4a:51:9b:
                    9b:21:aa:56:95:d2:62:63:31:df:a2:88:12:72:1a:
                    6d:85:9c:4a:dd:c8:3c:4c:5f:28:83:36:44:c6:c9:
                    d2:b7:38:d2:22:fe:23:b1:e6:ce:f8:80:78:1e:7f:
                    8b:3f:90:37:33:e6:84:79:d1:23:60:11:47:32:fe:
                    9f:fc:2a:b7:03:e7:28:45:b8:a5:28:91:63:c0:96:
                    ad:41:00:39:90:f8:af:33:a7:84:86:74:8c:02:90:
                    fe:4e:c0:01:13:46:63:ad:a9:1a:06:b9:22:26:d8:
                    9d:43:7b:49:27:11:30:a8:e3:f7:ec:c6:ba:08:95:
                    6d:c6:e4:a2:31:5c:6f:be:c6:ac:53:33:5a:84:0e:
                    c2:ad:fb:53:75:e8:b0:fc:30:04:e6:02:2d:3b:9e:
                    ba:2b:0b:28:2f:5d:34:11:40:43:f1:ff:f2:67:b1:
                    c3:fb:4d:cc:94:cf:7d:45:fe:94:3c:26:ec:44:ab:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:58:5B:05:77:53:B5:E9:43:91:56:32:31:46:1E:AF:86:32:54:C9
            X509v3 Authority Key Identifier:
                keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b3:b9:6f:2b:4d:f8:e3:55:22:64:74:74:8b:c8:14:65:9c:
         28:e5:88:60:33:1d:26:b3:b9:8b:0a:7e:0a:bd:68:ce:8a:66:
         76:24:32:eb:9c:b2:6c:97:b1:69:26:bb:b3:3c:e6:8c:46:84:
         05:61:b3:44:7d:28:55:ef:c1:88:8c:85:00:ba:8e:87:75:b3:
         5d:8e:23:d3:0b:83:0e:99:24:10:9c:e8:ef:0f:35:c2:a1:7d:
         5e:63:cb:a4:d3:85:ea:fb:cf:19:97:28:1c:95:25:09:24:3d:
         a1:e7:8b:a4:e3:99:f4:5a:6c:32:80:1b:ff:c0:dd:b7:7e:fa:
         6f:19:3f:4f:94:25:72:2c:50:c2:ca:fd:60:29:fc:6c:d5:cb:
         6a:15:8a:52:fb:12:53:da:26:fe:48:cb:4c:c8:ed:6a:ab:4a:
         dd:5b:3c:65:80:bd:d1:b6:5e:e5:c5:73:c5:36:d8:99:8e:79:
         41:90:48:07:98:62:05:24:0a:fc:ed:eb:47:aa:d9:cc:a0:19:
         c7:a6:fb:70:96:2a:a4:72:75:80:7b:dd:b3:ae:d9:26:d0:3d:
         6e:18:e6:f4:0b:6d:80:8c:2d:c6:40:86:ac:9f:01:69:0c:01:
         62:53:a4:08:34:25:72:1d:fc:19:1a:06:2c:28:e4:8d:4c:1f:
         bd:1f:30:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Nvg9xLbFuHvzvXUlrdX2yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi
YmZmMjAwHhcNMjYwNDI3MDcwMTE4WhcNMjYwNDI4MDcwMTE4WjAzMTEwLwYDVQQD
Eyg4MDU4NWIwNTc3NTNiNWU5NDM5MTU2MzIzMTQ2MWVhZjg2MzI1NGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY9R4GUlBFdzKL6cqDx8/WaDZelj
/pcwyDvh++4ObhJdlN9MrnG5tFZnQOCKaZMFaMIW5qLooDDqQD1/0/mtO7A7JTiF
cfRKUZubIapWldJiYzHfoogSchpthZxK3cg8TF8ogzZExsnStzjSIv4jsebO+IB4
Hn+LP5A3M+aEedEjYBFHMv6f/Cq3A+coRbilKJFjwJatQQA5kPivM6eEhnSMApD+
TsABE0ZjrakaBrkiJtidQ3tJJxEwqOP37Ma6CJVtxuSiMVxvvsasUzNahA7CrftT
deiw/DAE5gItO566KwsoL100EUBD8f/yZ7HD+03MlM99Rf6UPCbsRKs5DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBYWwV3U7XpQ5FWMjFGHq+GMlTJMB8GA1UdIwQY
MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt
OGQ4MWZkYzZmMTcwLzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw
LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLO5bytN
+ONVImR0dIvIFGWcKOWIYDMdJrO5iwp+Cr1ozopmdiQy65yybJexaSa7szzmjEaE
BWGzRH0oVe/BiIyFALqOh3WzXY4j0wuDDpkkEJzo7w81wqF9XmPLpNOF6vvPGZco
HJUlCSQ9oeeLpOOZ9FpsMoAb/8Ddt376bxk/T5QlcixQwsr9YCn8bNXLahWKUvsS
U9om/kjLTMjtaqtK3Vs8ZYC90bZe5cVzxTbYmY55QZBIB5hiBSQK/O3rR6rZzKAZ
x6b7cJYqpHJ1gHvds67ZJtA9bhjm9AttgIwtxkCGrJ8BaQwBYlOkCDQlch38GRoG
LCjkjUwfvR8w3A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:10 2026 by rpki-client