Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
File:                     4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json)
Hash identifier:          nxA2JF2d3Ih4BjOQpU3yrdzx7p6QlbIwNzOnYbHe3PI=
Subject key identifier:   A7:29:34:D5:57:60:33:6A:D6:11:72:A7:83:C0:7C:0E:CD:58:44:3F
Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Certificate issuer:       /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Certificate serial:       01A001DD450C761F6C1BC680D7EE1922672C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
Manifest number:          198F
Signing time:             Fri 14 Aug 2026 20:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:13 +0000
Files and hashes:         1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: MhhVoOlIwFVeQul/90E/LjwFS2SXpFCYK3NgdQiJ14I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:45:0c:76:1f:6c:1b:c6:80:d7:ee:19:22:67:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
        Validity
            Not Before: Aug 14 20:01:13 2026 GMT
            Not After : Aug 15 20:01:13 2026 GMT
        Subject: CN=a72934d55760336ad61172a783c07c0ecd58443f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:32:9a:50:88:50:3e:57:3d:c1:78:e1:c8:
                    41:ef:08:ef:3c:fd:95:22:86:a8:16:d8:ce:c8:33:
                    50:6f:29:7b:da:f1:f2:78:8d:a9:9e:d7:99:69:06:
                    ea:14:ac:7c:db:a9:f1:10:45:ba:de:6f:81:72:98:
                    8b:39:50:79:5b:df:f8:11:84:c2:fd:e6:10:0c:04:
                    c4:41:67:c9:2d:e5:12:35:f6:c1:3a:8c:7f:de:35:
                    16:88:ec:70:5a:71:1d:61:2e:0e:ee:2c:d9:05:71:
                    18:33:26:9b:b4:e9:8a:6a:e3:3d:1e:b8:6f:d9:e5:
                    6e:3f:29:49:33:48:9f:66:44:2a:03:6d:af:09:c0:
                    71:4b:8b:6c:d4:3b:f7:a5:17:7a:31:54:e9:e7:e5:
                    2f:8d:70:e5:18:c1:5c:1b:ba:21:c3:72:f7:ed:f1:
                    40:aa:77:76:b8:29:48:18:9a:e9:00:74:c9:e0:f1:
                    f4:eb:e7:9a:bf:3a:62:36:0b:5e:ef:33:ce:7d:d3:
                    55:d4:c4:5d:9b:54:d2:fb:90:80:fe:be:6a:ea:33:
                    96:4f:82:c0:6f:12:f8:3f:96:25:94:c8:86:dd:6c:
                    c4:2a:63:7e:4d:f0:4b:1a:81:85:d1:e4:a0:96:a5:
                    b0:22:5e:5b:de:9d:e3:fb:6f:9d:49:fa:94:ff:b9:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:29:34:D5:57:60:33:6A:D6:11:72:A7:83:C0:7C:0E:CD:58:44:3F
            X509v3 Authority Key Identifier:
                keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ac:78:d3:2b:bb:6b:71:08:94:e6:c0:ce:40:b3:3a:f0:b8:
         47:c4:cf:ad:80:ad:c0:fa:52:7c:62:f7:09:dc:db:4d:f1:c3:
         5f:6b:00:c3:20:be:e9:55:47:d6:39:e8:b2:f1:ae:2b:b9:64:
         ca:f1:ed:06:c5:40:2a:bb:e4:a7:ee:d6:ae:8f:c8:a6:73:95:
         24:26:13:95:d0:1e:fd:c9:6c:59:38:80:62:c3:a8:92:f7:25:
         2c:4b:dc:99:05:7a:60:5c:18:ea:a0:f5:35:5c:1e:c5:2f:03:
         9c:53:ec:b8:7e:ae:b0:44:d2:a4:ab:32:d6:e2:ab:ee:be:68:
         d2:bc:c4:29:f3:6e:e8:ec:4e:b1:bc:1a:3d:ba:cd:da:91:3c:
         68:31:27:99:94:a5:5d:ce:70:ff:ac:76:2e:2a:5b:18:a7:b9:
         75:bd:be:cf:c4:c8:8a:0c:04:28:0c:53:76:b5:cc:62:3f:e2:
         c0:04:2a:aa:28:1b:63:7d:7c:05:32:fd:ec:fd:28:6c:fd:7f:
         a1:a8:15:26:82:42:16:92:ca:7d:45:fb:cc:2d:aa:6b:93:b4:
         a1:65:8a:3e:8e:34:ce:53:89:32:3e:0b:4d:1e:fe:b4:82:11:
         76:38:50:a1:3c:7e:21:31:68:05:5d:f8:b5:61:74:d3:c1:18:
         e0:24:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:54 2026 by rpki-client