Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File:                     4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier:          VVO9cjrcwoSJHtKB/jvAp+eQQXgiJSNP1GL6dbRt4c8=
Subject key identifier:   B4:A4:AB:9B:C4:88:AF:3D:5E:47:5A:47:05:83:A9:DA:F3:0D:45:D9
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer:       /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial:       01A08A8D8C780278A42FBC5933369A794431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number:          1B0B
Signing time:             Thu 10 Sep 2026 09:02:07 +0000
Manifest this update:     Thu 10 Sep 2026 09:02:07 +0000
Manifest next update:     Fri 11 Sep 2026 09:02:07 +0000
Files and hashes:         1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: TVWsOoEwUnwnYjRFAy6v9E3I+C9VvNj7ayndgWsZEh0=)
                          2: 6DlgWAr1pze2xwhzVuH9SH83sUI.roa (hash: gbVO2/E/cSyLnCFbipnzOKJO3cIbi/OYiOvNNgSS+Wk=)
                          3: 71WBxVro_Euo75ftGbOnYN6EUc4.roa (hash: k6wuSYIpDhDq8ic6TWJjAZJOYAfdEDpyocKJsXVeM34=)
                          4: 8MxVvwEohbQmIikgrwper0uymEc.roa (hash: Xz+dhMsydC+qsZLDpjaa9cvEI5H7yFeVKoYAKozIz24=)
                          5: BKrXZmCPzjDJeoMATTIUCly8RMI.roa (hash: 0jP41FvG8z+VmpVhR+SHdcHSIxObtE+cEfVhbqGGTzs=)
                          6: CFccTSuCEIxalR4ALqPdkAzUO7M.roa (hash: kaoUX+bTmXS7CQqlA/MKZqDGlkdoafsR1N6tmoItSeo=)
                          7: DIoNrmpQjSgOtSSDaoVlE1M8a74.roa (hash: 8EDhoGEvZWxcOl5QR8SMI35B2oKzz+sS9FfHtqdv38c=)
                          8: Dvm1ivM5p4ePpgysDtLtoLHwJ5w.roa (hash: QPVOPL6nSnWbsKxxKr4oQ5BFOYUcMw/3uW2oYvYKLmo=)
                          9: Et6PnTBJBARsc3IlyKiE8qN-8pg.roa (hash: 5VSWKAXKy2dgal6NA51kMlOzzyv8IixCLBR114HbwSk=)
                          10: Kj0CSZRO7Ttjx8zTQ7TY2lYWk6U.roa (hash: 5ijTFRrYY4N4pS9N+fgT1g/tsE4VuTayoctiYwfJwSw=)
                          11: M7Qnaao-wDlPyDUa21pW7viJ6uU.roa (hash: Pb3KKeU2RFaohJ/loiF0Yw7/oOqNkzJemldZbia5xys=)
                          12: NYIUKgptziTmjTuzB89rR5OoJ3w.roa (hash: vBhk29CF4pjp5Kwvmdk02ywPzzfme1nc1O7+7goRrqs=)
                          13: Q8CsEAtSTanzJY3I7fvSE-uMeuU.roa (hash: AbxzldFhMYObOkio0+jbvaPCEAk722DareoqH/SdcdU=)
                          14: T2NfzMdsMpViaAkLEjvuKknHJcA.roa (hash: o9QhHh2ECEBAp63dR2QCY67xVjrjcR7RnvJzXzoRqNQ=)
                          15: TZaomzmIodYFdWS4xPASiRih7SU.roa (hash: DGb2GTBIONw507iw5JiwGCh82nK9eqmR5vddiYtWS24=)
                          16: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=)
                          17: YI8dtG7lrBLiiMxNXTL5ewUbOiQ.roa (hash: tnbNod3/PGWNY9ZhDTZ5mC5bOBNCTSkE0bF9+gHfzc8=)
                          18: Z4qJ0AuvFG9LwCUujh1SFAyCFEQ.roa (hash: L/2723303TsKIyZTz4LxjhNc7XDzNUykt0wbQqKmi1I=)
                          19: aVgebze3DGF-KEsMnZC5Ko2CIfY.roa (hash: NfZpKGjWtpW8R47mtlOQxNS8rkEPFNCDlcl++B9KFvk=)
                          20: g2mq5fXw0aZ88BSIIPCaVM6cI9s.roa (hash: HTPkfWurE/QkJy0L1mUBje2pSgdAEd5QgAQCEntV908=)
                          21: hvrECtRtxVPUHDXzjKdAlcyRjog.roa (hash: d5snX7+Hc4RUYD6A+fmRwRD4YilkH7XfRNO8PBtC+DY=)
                          22: iPahdVFjnIMLFab7e1hz9AD8mnQ.roa (hash: X5DNApyaL3xMnN7g/7ZqxS0aZOIXDBxHJJjMjs9/8GE=)
                          23: w5ldQ0CjL0tGIL7RdlldMWQrpOA.roa (hash: QwbB2Dm20UEpXkRwmnRCF3k99p0EBKuROeuhoBVi3/8=)
                          24: x6TaUDjx_Xkt_2Lw0GlWR57EAlc.roa (hash: m5z3Yg3lZo67vrQykV72uJNnGiIVgvzyPCgBuqRvX2A=)
                          25: xKKgMBYggYrOzddWnjoXfABzYtI.roa (hash: CRfn67QEd4oVTEk3kHUBSolPZ3Du9hm6IXw4Z34egdI=)
                          26: xKV3kgxBf7UUVRr84bCErhDrc4c.roa (hash: ZYiZ6jRe3+R5IVfA5CRR8v3ck5ek+jMsdDXIYsxQY8o=)
                          27: zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa (hash: ddUTwFfUFZpRc1ExRHE36LurAQIjxRiZ+75kFQEiqQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:8c:78:02:78:a4:2f:bc:59:33:36:9a:79:44:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
        Validity
            Not Before: Sep 10 09:02:07 2026 GMT
            Not After : Sep 11 09:02:07 2026 GMT
        Subject: CN=b4a4ab9bc488af3d5e475a470583a9daf30d45d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:95:0c:70:9c:91:1e:1a:b3:f8:00:39:27:
                    da:53:35:d0:d1:4d:d2:13:63:76:92:a6:ff:53:70:
                    ca:59:92:53:8b:cd:92:10:b9:fe:9f:e3:e7:46:2b:
                    c1:30:b0:c8:ac:0e:3f:01:fe:b0:35:8e:8a:7a:9b:
                    3c:99:35:8d:75:e8:6a:49:fa:f1:56:a5:a3:3d:ae:
                    a7:24:d9:a8:7d:ce:b2:0d:bb:c8:41:00:03:51:d0:
                    0c:c0:07:f1:bd:02:7f:18:1f:d1:f6:e2:3b:6a:8e:
                    db:98:0b:0e:f3:96:e8:61:6d:fa:13:70:67:9a:ca:
                    f2:74:cd:8f:3e:67:17:32:b6:1d:96:8d:d0:ba:7b:
                    b0:59:f9:ed:03:dd:82:8b:47:ec:ca:b9:3d:57:84:
                    5e:72:26:bc:0c:bc:13:38:57:88:91:d9:cf:8a:95:
                    e6:04:2a:b8:b2:02:89:2b:6c:22:45:12:af:1f:83:
                    1d:9b:92:98:78:22:e1:b6:a6:a3:24:fd:c1:d3:03:
                    f4:a6:a2:f0:32:2c:76:e9:4a:a0:4f:7e:b8:e1:90:
                    75:6d:06:02:a9:7f:97:75:fc:fb:53:26:8c:40:ba:
                    6e:c0:60:26:5c:09:5f:fe:e6:05:22:7b:15:e0:ea:
                    6c:22:48:e3:bf:3a:b3:cc:96:4e:65:b5:eb:56:e4:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A4:AB:9B:C4:88:AF:3D:5E:47:5A:47:05:83:A9:DA:F3:0D:45:D9
            X509v3 Authority Key Identifier:
                keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2b:64:af:d1:e1:ed:33:c6:6d:34:c8:50:9b:98:a2:18:bd:
         94:ca:c2:35:49:3f:aa:4d:ee:77:96:d2:50:a6:c5:39:5c:f9:
         62:eb:d9:ba:86:52:88:d3:95:b4:77:cf:35:40:aa:60:10:53:
         25:5f:a3:61:4e:9b:7e:8d:d8:a8:56:28:e9:43:9a:80:56:82:
         2f:2a:26:49:3f:bb:5a:3c:f1:b6:da:6e:d3:84:5b:ca:1d:3e:
         ca:d9:cb:6e:aa:58:17:aa:5a:7f:06:ba:cc:78:7b:58:d4:80:
         4b:34:88:8a:41:39:6c:eb:7a:ad:97:e6:98:27:74:0e:b4:39:
         6a:4a:35:1c:02:61:60:4d:8c:1b:bd:b8:2f:2d:f4:bb:83:dc:
         36:d3:30:48:4c:b4:0e:0b:1a:b3:6e:de:f5:fa:5e:bd:04:ac:
         f1:b8:ac:d7:a9:b7:cb:97:32:23:99:99:a1:53:af:7c:2e:fe:
         d9:38:bc:94:72:b9:a1:a4:36:cb:f5:78:a2:e3:6e:d1:8f:ce:
         f3:1d:9a:4b:f8:1d:2e:5c:67:3b:0d:44:bb:83:11:87:f6:5d:
         2d:c3:3e:08:21:68:f3:8c:54:c9:48:01:ba:62:b2:7c:f6:83:
         9e:27:74:49:d7:ba:2e:80:b8:fa:6e:23:be:ab:32:6a:93:fb:
         71:ab:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:08:50 2026 by rpki-client