Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.mft
File:                     e4JUJT3AIT_linr_S4JGPkeXgGM.mft (raw, json)
Hash identifier:          5Mqoclw952jS3vKAqBDroMNa5ObREJLbampwmqHJmVI=
Subject key identifier:   4C:F5:C3:2C:4A:53:91:07:2C:B1:7A:69:92:10:66:BD:E3:6E:21:A4
Authority key identifier: 7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
Certificate issuer:       /CN=7b8254253dc0213fe58a7aff4b82463e47978063
Certificate serial:       019D3A1C659AF46E719C2E0F35133F556339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.mft
Manifest number:          10EE
Signing time:             Sun 29 Mar 2026 15:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:32 +0000
Files and hashes:         1: UZMJ447vttwTg_huu_OKwoMxvGE.roa (hash: 8iSOwwrTAx9gSZ9mC5u63bBy7LU/RafYSDAsoyi9XRI=)
                          2: e4JUJT3AIT_linr_S4JGPkeXgGM.crl (hash: 3mR0rGPXth0QOleJRJTEAWZpWpfkCCjNOCOPTkioDo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:65:9a:f4:6e:71:9c:2e:0f:35:13:3f:55:63:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b8254253dc0213fe58a7aff4b82463e47978063
        Validity
            Not Before: Mar 29 15:00:32 2026 GMT
            Not After : Mar 30 15:00:32 2026 GMT
        Subject: CN=4cf5c32c4a5391072cb17a69921066bde36e21a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:de:8d:76:8e:10:7a:82:61:fd:c2:05:39:
                    8b:a4:22:ff:d6:61:c1:07:bf:3f:4c:c5:ec:5c:14:
                    80:be:99:f6:0e:68:34:3d:2c:00:aa:3d:10:aa:66:
                    f1:77:3d:e1:51:4d:d0:6a:da:1c:3d:9e:ff:c6:32:
                    a0:62:58:da:2a:86:b1:45:4a:30:da:de:b2:ca:21:
                    41:13:e0:a8:c4:70:fd:ee:2a:44:4d:88:ff:05:cd:
                    b4:0b:2f:75:08:9b:62:c8:2b:6f:73:d3:f3:a0:d3:
                    73:b4:b0:79:0d:56:fd:51:77:ce:9d:b5:a7:0a:62:
                    c3:83:93:4c:24:31:53:e8:30:71:3e:fb:e2:31:24:
                    a1:c6:1c:a5:43:42:d2:78:19:d4:21:ba:30:86:7e:
                    e5:80:6a:c7:2f:f4:90:dd:a3:85:77:10:9a:b1:03:
                    9a:a5:52:78:73:6e:63:14:11:f7:68:e1:c0:bf:51:
                    89:d4:18:4d:43:21:0d:53:71:e9:6b:a6:1e:82:ed:
                    04:a5:1f:07:9b:2e:1e:a0:c9:c5:4d:64:90:99:88:
                    1f:1b:c0:6b:3d:fc:69:96:19:33:a0:8f:2c:5c:bc:
                    35:ee:ca:7e:28:23:45:a6:43:24:4c:d8:7f:e9:ad:
                    85:70:93:1a:bc:f5:54:81:f3:7a:cb:37:96:6e:c2:
                    ea:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F5:C3:2C:4A:53:91:07:2C:B1:7A:69:92:10:66:BD:E3:6E:21:A4
            X509v3 Authority Key Identifier:
                keyid:7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1d:9a:f1:0c:51:82:88:ba:10:05:a9:3a:b9:45:d2:b3:b0:
         b9:4c:fe:82:d2:f7:f7:ad:cf:1a:55:80:ee:2f:9b:5e:eb:d8:
         f1:13:56:a0:2b:e8:6f:9c:cb:de:da:46:15:aa:c2:71:f4:c5:
         7a:b6:6e:b7:d2:18:0d:f5:64:00:fa:94:7b:14:33:05:f7:1a:
         f0:ec:ef:71:ae:33:86:6f:cd:61:9a:4a:c9:89:0f:90:4c:55:
         0b:86:04:bc:68:98:f9:05:6b:93:07:6c:76:4d:13:cb:4a:96:
         58:bb:48:af:5c:a0:6b:19:93:2d:87:6e:c9:53:9e:5e:a2:b7:
         48:cc:55:54:47:81:36:24:91:08:31:93:88:7f:49:73:b7:93:
         ad:e2:c3:b1:e5:e8:12:33:45:06:25:9d:32:46:c0:97:0a:58:
         51:0b:d3:7e:00:90:2c:04:81:54:fe:99:5a:e5:bd:3b:74:17:
         43:99:ea:61:63:af:81:cf:d8:ec:f2:3d:7f:16:0a:8b:29:77:
         3d:88:5d:aa:1b:f1:65:91:cb:ad:eb:ff:ba:78:73:19:12:52:
         db:74:e8:d9:56:23:7d:4c:f8:1a:a3:6e:7b:9b:d2:c3:05:35:
         20:0c:d3:20:66:88:4c:68:aa:fe:6c:0d:ba:b2:db:6d:de:0e:
         80:32:9f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:37 2026 by rpki-client