Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File:                     4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier:          KNdduwEsRF1CPsi3ZOwjXotj01HHjli8L+aee/eGxA0=
Subject key identifier:   78:87:10:90:45:00:02:E1:31:49:4A:F6:DF:29:79:F4:56:65:73:AD
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer:       /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial:       01A001700D20DEA0431C6D3CCA008DDCACF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 18:01:55 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:55 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:55 +0000
Files and hashes:         1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: BGWG+je+W61x82SrIYfCeIRonIidPevrPvJAy5fkJ6A=)
                          2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:0d:20:de:a0:43:1c:6d:3c:ca:00:8d:dc:ac:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
        Validity
            Not Before: Aug 14 18:01:55 2026 GMT
            Not After : Aug 15 18:01:55 2026 GMT
        Subject: CN=78871090450002e131494af6df2979f4566573ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9a:f3:5c:04:30:eb:0e:75:e8:e8:04:36:18:
                    27:7e:a0:33:fb:68:3f:85:e5:46:60:47:61:ba:e0:
                    63:9b:f3:46:cc:5a:87:9b:ab:49:45:29:17:9f:99:
                    6b:89:ad:4a:97:41:f8:f5:19:48:16:bc:df:d9:12:
                    6e:63:08:b0:10:2e:af:d3:04:6c:27:6a:ff:8e:3a:
                    23:38:3b:0d:c3:8c:95:6b:c3:8a:b0:50:a6:fa:ed:
                    ba:37:f8:44:e4:a5:59:36:1b:fa:78:6c:96:3a:37:
                    09:e1:83:43:69:a8:52:45:4c:87:94:ac:ee:75:2a:
                    b5:3f:5e:0c:c6:75:a8:0d:bc:38:84:5d:86:ff:bb:
                    03:71:7e:b0:22:4b:1e:3c:93:4a:d8:90:65:1d:32:
                    3a:1c:25:2c:8d:9a:fd:f9:56:f6:94:c2:17:37:62:
                    59:64:51:03:e4:c3:36:57:b3:31:75:a0:d5:4b:89:
                    67:9b:61:b8:0c:3b:ec:1d:16:f1:19:75:6a:7c:55:
                    4d:37:c0:14:d9:b0:1e:60:e2:a5:8f:ae:f8:a7:d9:
                    e8:51:85:3a:a9:07:52:8e:87:e6:1f:08:c7:f6:4b:
                    19:27:96:ad:67:02:9a:82:8b:f4:f6:39:e0:51:23:
                    bf:61:52:29:7a:07:b0:28:be:03:aa:7f:74:d3:74:
                    d7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:87:10:90:45:00:02:E1:31:49:4A:F6:DF:29:79:F4:56:65:73:AD
            X509v3 Authority Key Identifier:
                keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3b:8b:e2:9f:47:ae:ea:91:31:fe:18:6c:3d:d0:0a:55:bd:
         b6:63:7c:cd:30:b4:a6:e2:e7:5e:79:68:1f:b0:8a:7f:1a:67:
         e5:af:11:d4:a0:b1:ce:29:aa:80:d0:d3:13:f0:c6:a7:01:35:
         26:83:c9:4e:05:a5:fa:b4:54:f4:ce:20:d3:f2:1a:5b:ef:0c:
         0c:a5:a2:b0:0c:e3:12:f9:db:c1:c0:26:a7:8b:a1:11:e6:ba:
         58:4d:86:1f:e3:d9:3b:1e:a4:ae:9b:90:0f:b7:24:1f:8d:e4:
         bc:e5:53:96:1d:d0:42:6f:71:a5:79:b4:2c:33:8c:84:95:33:
         7d:3a:63:b5:94:a2:8c:12:16:2a:1d:54:e6:d1:d6:69:70:ab:
         26:f4:73:30:59:86:01:7c:30:58:50:c3:60:ab:c4:82:b3:96:
         ca:bd:17:81:5d:6e:b3:a5:9d:45:36:a2:e5:4f:8b:0d:94:f0:
         8f:a2:19:af:fd:43:5e:de:f7:17:d0:31:a4:25:78:1b:9f:a1:
         b8:d8:fb:f7:45:61:37:84:7f:4d:bd:2b:fc:7c:a9:5d:51:1b:
         ad:f4:b7:77:a4:df:28:1f:c0:2f:18:4b:8c:1f:af:3d:58:92:
         7f:09:c5:34:10:29:3a:48:16:ed:b6:7f:0d:86:0b:8a:25:2e:
         64:92:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:18 2026 by rpki-client