Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          JO8X75GmUYTjESMnklKZnYGlNU8zRZAqGg1bpdVahec=
Subject key identifier:   FA:4F:C2:68:37:68:1F:B3:2E:40:B7:31:B8:D1:A2:B1:0D:3D:BA:85
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       019DA11B907F9FFF48F54D8CA0EB599DDDCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          130E
Signing time:             Sat 18 Apr 2026 15:00:31 +0000
Manifest this update:     Sat 18 Apr 2026 15:00:31 +0000
Manifest next update:     Sun 19 Apr 2026 15:00:31 +0000
Files and hashes:         1: 0p95IngmkZetH0gXJAOs3SDAY0E.roa (hash: LNPnqbLWCMHvDTcExFmSigDZZyvSElARaSkh4q6WPOA=)
                          2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: HryRiL/UqHmUm0c5Ndxg3XQ8gUbWlEgFNRFResF5i3g=)
                          3: Kmej-qj8fPfHORtg4SVaVONzC0U.roa (hash: 6jPhrS5Z1S4tcgzddswtFrBAws8weds+gbgTtA+mUrw=)
                          4: QpnXyX_umcsmqvreaTpX1ie0BoE.roa (hash: QyePGZ/3nR4Ec0qcv35y65LN0I6BsNvKBqNN8cDu/NU=)
                          5: YwRJ2tVF3VFoI8oBKxmxmrlWvzU.roa (hash: e5XlfGq0oDoZyjw7Mj6ppUzfy4+mxsWTLSJb/MkUC8s=)
                          6: fG4rAo9hnNmK3VLhmWi71rIfAd8.roa (hash: gGzEO/u7SMQDSlMk5ffb5FzkNVdHLmHQvEqqwyoxESc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 09:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a1:1b:90:7f:9f:ff:48:f5:4d:8c:a0:eb:59:9d:dd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Apr 18 15:00:31 2026 GMT
            Not After : Apr 19 15:00:31 2026 GMT
        Subject: CN=fa4fc26837681fb32e40b731b8d1a2b10d3dba85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:f5:c1:28:4a:47:7c:04:7b:1f:88:05:83:
                    7e:cb:ee:71:e6:ae:e3:01:47:74:a2:18:27:a4:c6:
                    b6:9a:b8:ea:1e:d3:23:d7:c3:8a:c5:80:35:26:d5:
                    61:cd:34:1a:93:4d:2a:e6:b9:47:43:28:31:59:b0:
                    a6:08:16:df:7f:68:d0:b3:aa:54:af:57:4c:07:6b:
                    f3:e5:98:fc:fa:76:39:72:7d:d5:18:ce:f2:30:41:
                    e3:8a:d5:73:1d:7a:6a:69:3a:74:02:a8:d8:ed:c2:
                    c3:21:a7:8a:45:2a:c4:88:23:97:14:46:b3:b7:55:
                    9a:9f:bd:76:43:aa:e2:78:95:05:cd:16:15:6a:a5:
                    fa:d3:b5:71:ee:42:37:43:59:7a:fa:e8:a8:d7:8d:
                    60:98:62:d1:8b:ce:bf:ae:04:67:4e:31:75:67:ea:
                    6a:d0:47:3c:8c:2c:5c:71:0b:fa:7b:9a:f1:cd:ba:
                    00:72:8a:c8:99:37:31:93:cb:e7:6b:36:ac:e2:02:
                    a1:72:51:c4:cf:4b:21:e2:92:90:41:93:5d:12:03:
                    98:6e:cb:8f:bf:d3:35:c0:8b:2a:2a:68:05:4e:f5:
                    57:60:2a:03:0f:45:c4:b3:98:7d:26:bc:6a:b4:c3:
                    61:61:5d:b2:8b:01:c6:4d:44:90:04:53:5f:13:e5:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4F:C2:68:37:68:1F:B3:2E:40:B7:31:B8:D1:A2:B1:0D:3D:BA:85
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0f:49:1c:09:21:6e:bf:30:30:a3:a2:84:8e:54:01:8a:19:
         36:11:58:2a:04:28:6d:ca:91:a5:52:9c:08:09:f0:5d:b7:c5:
         ec:99:23:d8:b0:39:fc:31:96:cf:6e:93:87:46:d8:d0:51:e2:
         81:1e:7f:b0:13:02:18:11:6d:df:6c:5b:0a:7a:29:80:d6:69:
         6b:3b:f4:1d:93:bd:31:bb:ea:6c:cf:20:ed:26:c8:1b:32:6c:
         ef:72:f7:f3:30:9b:29:fd:a9:50:0d:7e:88:06:c2:30:14:16:
         01:e5:d9:2e:13:ee:ed:96:40:d1:5d:26:61:a5:ff:62:03:a1:
         a0:74:ee:36:01:1d:88:41:2b:89:f5:f7:6a:78:1a:5f:d7:98:
         3f:df:3c:14:9e:da:18:dc:13:d7:8d:53:ab:c6:51:1c:aa:1f:
         ab:82:92:cc:8d:0e:85:7a:84:80:54:20:06:78:74:c4:c3:c6:
         29:f2:78:69:b8:f8:98:ae:70:8f:26:3b:df:0e:9e:c7:50:1c:
         ec:9b:fd:c0:5f:06:9f:5b:e8:53:40:25:ef:d7:30:dc:4a:52:
         b3:07:32:38:4f:9f:07:fb:f2:35:58:9f:c6:6a:1e:9b:d3:cd:
         70:b2:4c:cf:72:2d:8d:b7:68:d7:e5:2b:80:63:2e:a4:02:9e:
         b9:b5:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:26:53 2026 by rpki-client