Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File:                     t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier:          Ci5X/7c5PqUemhBUC7jhx+oRte98uxTdnylR3N5Qmes=
Subject key identifier:   54:35:E1:A8:6A:3C:A8:C4:A7:71:36:6B:21:D8:C9:D8:BA:BD:9D:E9
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer:       /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial:       019EFB024F623CE17FD3066B7B46E38ACFDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number:          162D
Signing time:             Wed 24 Jun 2026 19:01:32 +0000
Manifest this update:     Wed 24 Jun 2026 19:01:32 +0000
Manifest next update:     Thu 25 Jun 2026 19:01:32 +0000
Files and hashes:         1: 2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa (hash: VpwFMCxf02N3s6qbKcrB7OwUNutAGhYjp7y72GSVaW4=)
                          2: fZqDSJnUbHG62IvLERx4tiEWKgg.roa (hash: GDZnevYXZ2UVLkiVPlwZRqNZ2Bo/evXbLjj481Slbr4=)
                          3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: 63+zgRUxfqnEfnpxRxKiUMr+O/SDmMylXbp0Hl/DCfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 14:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:02:4f:62:3c:e1:7f:d3:06:6b:7b:46:e3:8a:cf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
        Validity
            Not Before: Jun 24 19:01:32 2026 GMT
            Not After : Jun 25 19:01:32 2026 GMT
        Subject: CN=5435e1a86a3ca8c4a771366b21d8c9d8babd9de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:36:47:9d:91:af:51:c8:a5:7a:4e:d3:12:
                    54:e0:7f:40:38:17:11:65:2d:77:10:ac:d1:31:30:
                    d8:97:ff:b8:7e:7e:ba:b6:89:2a:2b:87:cb:1a:2c:
                    04:37:0b:77:e4:ee:82:ad:b6:7f:a3:36:60:79:04:
                    76:17:f2:db:58:da:71:f3:c1:1c:a9:ee:a9:0e:bd:
                    15:3f:a8:50:44:2b:08:07:00:95:4f:3e:5c:bb:68:
                    aa:ba:b3:c2:96:be:3a:b9:ea:43:99:43:3b:88:cd:
                    12:ac:05:5a:68:0b:9c:1c:30:8e:6d:10:32:be:4f:
                    1d:2b:c5:9d:fc:fa:df:80:be:fc:a1:ed:7c:a9:d9:
                    9d:ec:09:9a:85:52:ed:82:69:55:01:2a:b7:9d:53:
                    44:0c:90:10:7a:79:d9:8e:04:f0:e8:9c:6c:71:9b:
                    d7:21:9f:3c:fb:5d:66:41:fc:5b:41:53:0c:47:cf:
                    94:7e:8d:97:f1:31:8e:17:ea:0c:d7:83:ca:fa:58:
                    eb:3f:0b:e6:32:d1:69:82:58:f9:73:67:f1:bb:0b:
                    69:11:ff:4d:be:74:e8:93:d8:88:34:fa:58:45:74:
                    7b:42:a0:91:b9:07:26:54:5c:60:b8:18:8c:96:42:
                    80:8e:21:e8:65:2c:4e:ec:c0:f2:59:60:ab:0c:66:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:35:E1:A8:6A:3C:A8:C4:A7:71:36:6B:21:D8:C9:D8:BA:BD:9D:E9
            X509v3 Authority Key Identifier:
                keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:03:28:8f:54:04:19:a5:63:94:1d:08:a1:05:f6:b9:7f:89:
         68:1a:18:28:6f:69:a7:bd:98:d1:b6:d9:58:8a:09:8d:ea:d8:
         9e:2c:1a:0f:01:8e:9c:7c:24:64:b8:5a:20:5f:6a:e6:2a:67:
         a5:fe:47:7b:66:14:ff:f5:96:0e:37:db:a8:c3:1a:10:68:5a:
         ba:85:35:43:d2:0c:b4:94:2f:ac:5c:9c:31:d4:70:32:ea:c8:
         77:8c:54:f3:6c:b6:52:ce:46:79:39:a2:55:a8:37:7f:81:8d:
         92:60:07:e1:b3:94:90:cd:61:1d:a8:1a:9e:2e:20:33:ca:40:
         3e:f2:8f:6f:8f:91:a9:14:9a:35:05:6d:63:6c:fb:83:ea:63:
         99:23:da:ee:75:b0:c3:b6:ae:d9:cf:59:63:42:75:3c:99:81:
         6a:0c:e2:56:c4:c3:56:27:0f:b8:f9:13:9a:b0:8d:34:61:f1:
         77:ee:e5:33:75:06:ac:67:aa:62:06:b4:1d:68:fd:7f:bf:a5:
         8b:5f:c4:bf:7a:68:99:5d:96:4e:43:51:f6:86:ba:fa:be:38:
         7e:c8:6a:7c:f0:02:81:b9:db:0f:63:00:67:79:3f:19:e8:fd:
         ac:d2:a0:50:16:21:29:08:7e:9c:08:06:60:11:e2:06:33:66:
         79:d5:a4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:17:24 2026 by rpki-client