Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File:                     484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier:          1kMPt4GR+h8f7sf76816jGA1vWFRovDFG4qrSGM9+BI=
Subject key identifier:   4D:5A:97:BA:1C:E5:39:16:20:92:A0:9B:70:2C:37:11:9D:1E:32:7A
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer:       /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial:       019F17C35E1780F59CC0FEF3B0E694D418E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number:          101A
Signing time:             Tue 30 Jun 2026 09:01:47 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:47 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:47 +0000
Files and hashes:         1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: uT9y5+HpGjtKmzi6zgooYrY3lo7TyJC/a5IeoyGgPK0=)
                          2: Sb27fx8W2Bv1m1pEAWpcbW-vK10.roa (hash: ClUudBc4gF5lYIHf+aYM1gznaI2Os4gu/iEuZ8iqJzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:5e:17:80:f5:9c:c0:fe:f3:b0:e6:94:d4:18:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
        Validity
            Not Before: Jun 30 09:01:47 2026 GMT
            Not After : Jul  1 09:01:47 2026 GMT
        Subject: CN=4d5a97ba1ce539162092a09b702c37119d1e327a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:50:cd:b8:fe:0a:a0:d3:f3:68:ad:7b:2e:
                    3d:02:94:a5:d1:b6:7d:3d:c8:8e:66:11:1e:f2:86:
                    7a:f4:9f:8d:19:45:44:71:3f:48:5a:a8:97:27:c7:
                    dd:30:5c:c3:af:7c:8a:96:89:9b:b0:3a:a2:48:0c:
                    e8:51:46:e9:1d:ef:73:c6:9b:b4:82:5d:c2:d4:e8:
                    1e:14:9d:a0:5c:d3:b5:55:ba:66:c9:55:78:68:8a:
                    c6:a3:39:ec:58:b5:46:ea:5b:9c:64:7c:da:5b:b8:
                    6e:ff:0f:fe:a3:0d:d0:b3:fd:04:c2:65:7c:24:3d:
                    2d:84:f7:cf:c9:5d:27:9d:82:ac:fc:7b:e6:9c:a8:
                    09:85:0d:b1:84:03:dd:2f:df:72:b8:4a:d7:06:d4:
                    d4:05:22:0c:54:f8:cf:61:cf:57:2b:06:08:7f:31:
                    1d:18:f9:fd:ff:8d:86:d8:6a:44:af:6c:79:d8:f6:
                    75:1a:93:60:8e:f6:43:ec:ce:ec:a2:3c:6b:b3:dc:
                    b6:9c:0b:05:a5:fd:dc:1b:22:77:35:a0:57:18:ef:
                    3c:44:98:8c:3a:5f:74:52:53:ef:f4:33:e4:56:91:
                    2e:03:94:8e:7d:1d:b4:08:84:47:22:ab:35:2e:28:
                    38:7a:d2:b9:7c:dc:a0:9f:ab:b9:06:b2:ce:60:7c:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5A:97:BA:1C:E5:39:16:20:92:A0:9B:70:2C:37:11:9D:1E:32:7A
            X509v3 Authority Key Identifier:
                keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2f:e4:dc:e9:5b:9c:53:05:6d:ca:ba:d9:9f:1f:a1:e8:a1:
         19:69:41:bb:06:8d:6e:d2:b1:d2:84:77:83:fd:01:08:25:cd:
         23:d8:2c:43:96:42:6e:0d:66:ac:97:28:19:a9:35:8a:eb:c7:
         5b:ba:11:45:20:22:c7:d4:4e:ba:24:75:5b:79:fc:97:32:5f:
         79:28:f2:eb:19:76:4b:50:4d:c7:3a:22:68:ad:77:6f:0d:75:
         7e:cb:69:ee:88:fc:ea:d3:ec:4d:7b:c5:6d:4d:fe:42:2b:6a:
         36:4e:76:20:90:a2:4d:f3:b9:f9:d7:fb:e1:22:4d:95:06:36:
         da:49:6f:64:f7:fb:5c:25:65:ec:eb:98:f9:e7:43:a2:55:71:
         e6:b3:b9:69:cd:ce:e5:e1:64:e6:75:4f:d4:7a:28:c1:d3:14:
         8d:d8:95:77:84:f7:4f:87:4a:76:c3:2b:e1:f7:cf:65:93:e7:
         01:c2:85:7c:3f:14:8d:4c:7a:89:f4:a9:cf:6e:80:df:94:3f:
         95:25:59:e6:0d:10:be:31:1a:c7:ea:f0:d0:57:69:be:81:1e:
         47:64:e1:fa:d9:b6:28:df:36:db:8e:eb:45:19:8a:d7:a0:23:
         f3:6c:5e:b6:69:8b:98:e0:d8:3b:e4:15:ab:44:b4:0e:80:fb:
         ba:7c:12:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:09 2026 by rpki-client