Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
File:                     4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json)
Hash identifier:          riXCpMCeUZON66cgcHdSUKmvVDR8jQTjBd9mC+oZbzM=
Subject key identifier:   F0:E5:B7:E0:A2:6D:E1:AB:73:CC:4E:8E:F1:58:95:B9:16:3A:51:4B
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Certificate issuer:       /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial:       019F9FCDAC97C0D54B9BF10F76C13122A17C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
Manifest number:          092F
Signing time:             Sun 26 Jul 2026 19:01:24 +0000
Manifest this update:     Sun 26 Jul 2026 19:01:24 +0000
Manifest next update:     Mon 27 Jul 2026 19:01:24 +0000
Files and hashes:         1: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: zp4zRB875CTeItvmN8MWibW0+iSkTQnsWSMXE+2dn3w=)
                          2: H6upOznQhofNUsVU2B_mxPFx27c.roa (hash: NbOHDEswfXC4+5bjThUvhDuggTWbfuZ/HmS5egmK918=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:ac:97:c0:d5:4b:9b:f1:0f:76:c1:31:22:a1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
        Validity
            Not Before: Jul 26 19:01:24 2026 GMT
            Not After : Jul 27 19:01:24 2026 GMT
        Subject: CN=f0e5b7e0a26de1ab73cc4e8ef15895b9163a514b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:8c:1f:29:70:19:aa:54:96:a8:76:35:84:
                    12:50:b9:ea:e4:4f:c2:4c:c9:4d:f0:11:3d:a4:64:
                    4c:3f:23:fb:24:5c:fa:5f:23:07:be:1e:8b:b5:c6:
                    a6:32:ec:8e:a6:a8:5b:43:b0:57:b6:fc:2d:30:a6:
                    c4:5c:b0:fb:47:9d:71:2b:6f:2b:93:62:53:81:c6:
                    02:d6:bd:6c:01:85:1a:54:9e:52:87:20:3a:b4:5e:
                    55:3c:e1:73:9e:cf:33:57:7d:c9:eb:53:3c:62:47:
                    60:b6:b2:0a:f2:b4:ba:de:ea:2f:77:88:f2:f4:86:
                    12:0e:13:de:d7:b8:ca:21:6e:55:00:39:90:ef:8d:
                    b2:1d:27:d3:bc:e7:5e:b7:b2:01:7c:f5:86:52:55:
                    f9:94:8a:c7:8e:cf:34:d3:ba:45:2a:ea:1a:7c:d2:
                    eb:77:1b:58:40:45:96:9e:8c:02:d5:a0:61:be:2e:
                    a2:9b:29:6e:12:c4:e0:56:1e:37:9a:c1:dd:90:0c:
                    16:e8:03:45:5c:1f:87:d6:3a:dd:c3:0b:65:cf:c1:
                    a4:0d:73:bf:9c:e5:8a:58:fd:cb:98:a1:29:1d:67:
                    21:48:31:8f:94:64:48:cc:0a:ec:47:b1:e1:44:5c:
                    7d:af:e6:db:09:b2:fe:bd:b5:c3:1f:d2:33:7c:e3:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E5:B7:E0:A2:6D:E1:AB:73:CC:4E:8E:F1:58:95:B9:16:3A:51:4B
            X509v3 Authority Key Identifier:
                keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3f:3c:e5:eb:e2:94:51:3e:cc:d0:43:39:24:d7:65:30:03:
         e3:37:da:4e:c8:ca:40:6d:a0:f3:c8:f0:0e:d0:b4:67:fb:3e:
         f1:eb:91:8e:d6:9e:fb:13:0e:b0:88:90:7c:f0:a9:34:ef:87:
         65:2f:1a:ee:4b:24:24:74:50:e6:9f:95:3e:5f:1a:56:5d:91:
         bb:0b:c6:11:be:b3:8c:18:4d:b2:f9:30:cd:7c:e3:f0:e8:4c:
         b6:55:f5:f5:12:34:08:8a:1c:57:4b:8a:69:e8:33:48:d9:8f:
         5d:b7:97:2f:47:7b:6f:3f:8e:7f:ae:69:7f:26:41:59:cd:ed:
         cf:42:9c:c9:c9:a8:52:73:67:f4:bf:86:af:5c:f3:e7:d0:19:
         bc:94:ec:ba:fe:a4:17:57:87:88:27:54:18:3b:56:8f:49:b9:
         b7:f9:61:e1:3a:8b:2d:d9:9a:e8:99:66:af:bc:7b:e6:75:c2:
         bf:79:39:34:39:2b:77:4e:b0:08:fc:a7:44:b7:db:71:62:e5:
         d4:7b:5c:c5:77:ac:53:be:0f:2e:95:53:62:b7:94:50:67:42:
         c4:08:3b:f7:34:20:c0:4b:12:5b:e9:ff:b7:11:e8:72:c8:7a:
         94:a2:19:84:2b:4a:01:07:ed:ee:8b:35:d3:11:f7:d9:c7:31:
         a2:70:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:21:25 2026 by rpki-client