Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File:                     4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier:          wbmZRAFMNzTU8X6eM+64OJTewnOb7xogP+2fHRzK8ak=
Subject key identifier:   16:B9:04:D8:E7:3D:5F:B9:5B:48:AF:15:E5:74:77:1F:DF:AA:22:0C
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer:       /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial:       019F1867C705107B8046D36C3D2231BD634E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number:          0A4E
Signing time:             Tue 30 Jun 2026 12:01:21 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:21 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:21 +0000
Files and hashes:         1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
                          2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: aIS1B/5z3K7FPxlYmqO7d8Ma0dxSMPqpUuqlRWJk01o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:c7:05:10:7b:80:46:d3:6c:3d:22:31:bd:63:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
        Validity
            Not Before: Jun 30 12:01:21 2026 GMT
            Not After : Jul  1 12:01:21 2026 GMT
        Subject: CN=16b904d8e73d5fb95b48af15e574771fdfaa220c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f7:5b:4e:cc:26:cb:bf:5b:be:fe:f1:72:4d:
                    ac:f9:29:c0:cf:4e:06:fe:ee:c9:38:26:66:b3:0b:
                    30:d3:a0:d6:83:b7:de:ce:5f:07:81:5a:e5:ac:81:
                    e4:95:61:4a:85:c5:dd:f9:a5:b3:5d:b3:8e:b1:21:
                    c6:3a:27:ec:1d:19:f0:cf:bb:14:ba:09:a9:6e:9e:
                    43:b7:2e:b1:2b:90:26:3e:ac:0e:5f:87:f1:98:bd:
                    59:08:19:55:8a:44:73:2d:f3:17:e0:38:62:77:7e:
                    7a:e1:fb:f8:eb:e5:c5:ae:d7:75:64:99:ed:3d:ac:
                    a4:09:90:72:19:8d:d6:f9:a6:c6:6e:06:0a:c0:39:
                    34:4a:62:c9:be:d5:c7:a4:ec:d9:f7:b4:6e:6a:1e:
                    e0:90:f4:da:05:f3:a3:0d:69:27:69:16:4f:75:cf:
                    9e:86:5b:db:75:79:0a:cc:a1:50:30:9b:38:1f:36:
                    78:ce:07:f3:a2:48:1d:c9:74:6c:df:5d:23:a1:a9:
                    7c:56:f5:f9:4d:31:ae:dc:6f:ec:59:c6:a6:3b:db:
                    0b:b2:51:61:83:80:3c:9b:d3:8a:97:22:24:7f:57:
                    87:9b:bc:e2:18:a4:58:42:b7:ff:61:7a:4c:fc:65:
                    e0:79:7d:39:1c:3e:2b:f8:8e:d8:18:3a:89:12:6f:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B9:04:D8:E7:3D:5F:B9:5B:48:AF:15:E5:74:77:1F:DF:AA:22:0C
            X509v3 Authority Key Identifier:
                keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:de:ce:74:0e:7b:fb:a0:45:7b:64:84:e2:de:10:e8:b0:a8:
         02:48:20:9e:67:65:5d:b8:c7:1c:dd:eb:38:fe:0f:d0:1d:1d:
         5f:bc:4a:ff:1d:b0:66:e7:e0:06:9a:7e:f4:11:8b:f5:93:09:
         d4:d2:64:bb:7c:70:bd:3a:eb:8c:af:32:ed:81:f8:d8:ec:42:
         ed:1a:f0:91:c5:d7:e1:b6:5d:2b:d1:33:9f:bc:a2:0e:0a:ee:
         a8:7e:47:e9:45:02:18:3f:1a:fb:a4:4e:f4:24:ae:1d:22:c5:
         0b:8b:ba:9f:46:fc:20:63:73:01:6d:e1:0f:97:0b:81:26:01:
         68:15:d3:e1:e9:26:82:b3:b1:a5:3b:1b:8d:a6:63:03:f9:a0:
         18:42:96:0c:02:09:65:56:6f:bf:de:5e:a7:49:5b:04:bc:20:
         ee:08:84:be:4c:a1:ce:09:5d:c4:db:3e:c7:f3:94:18:c2:5d:
         2b:84:e4:e6:45:26:16:a1:2f:67:3b:f8:e7:63:f4:27:5e:8b:
         2f:39:88:7e:5e:9a:36:2a:88:29:7c:52:9d:98:cc:0f:79:d4:
         c2:26:1b:c9:a4:f6:15:58:bd:6b:7a:39:c3:e8:1f:1c:aa:ab:
         f2:29:ab:00:4a:37:f5:6e:bf:7d:69:72:78:6c:a4:d8:06:cc:
         a4:d0:4e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:22 2026 by rpki-client