Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File:                     4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier:          c1+6hgHfjRa4aMmSSFpsPjZvP0e1ySGURxnX/ZtxC1g=
Subject key identifier:   59:E9:C3:F1:5B:64:E4:8F:F9:66:54:16:AB:9B:B3:61:15:C9:49:06
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer:       /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial:       019FA3A9CE1E182ED4E9700C7CD28E348DC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number:          19E2
Signing time:             Mon 27 Jul 2026 13:00:42 +0000
Manifest this update:     Mon 27 Jul 2026 13:00:42 +0000
Manifest next update:     Tue 28 Jul 2026 13:00:42 +0000
Files and hashes:         1: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (hash: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA=)
                          2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: MHK07tC+2ZICU1ztwIrbKf6IkOZ7qUCvPjb/YnQ8j/0=)
                          3: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (hash: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:a9:ce:1e:18:2e:d4:e9:70:0c:7c:d2:8e:34:8d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
        Validity
            Not Before: Jul 27 13:00:42 2026 GMT
            Not After : Jul 28 13:00:42 2026 GMT
        Subject: CN=59e9c3f15b64e48ff9665416ab9bb36115c94906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:10:73:00:73:55:fd:ef:4c:03:d8:f5:74:b9:
                    24:2a:67:48:00:e9:07:ad:bd:85:b8:71:57:a9:fb:
                    b5:96:88:da:3f:48:30:bb:c3:cb:db:0a:6a:13:68:
                    cb:7a:eb:be:4e:0e:ee:6e:e2:1a:3f:ef:6f:d4:4d:
                    5f:7d:51:87:b8:56:4f:0a:e0:97:99:a0:0f:f3:91:
                    0c:4a:08:95:6f:8a:69:a5:bf:15:ea:16:36:b9:d1:
                    87:47:89:42:39:e6:d4:b1:d2:a2:06:69:59:78:47:
                    1a:54:95:7f:1d:8e:8d:2d:d1:3e:be:1e:79:38:1f:
                    1f:1f:35:a6:c6:7b:5a:52:de:a8:d0:a5:47:2f:82:
                    b3:e3:57:e4:28:bf:55:e0:8d:bb:5a:6e:68:01:56:
                    31:f2:5b:70:49:cd:01:13:78:35:d6:b0:23:0b:5e:
                    91:88:e4:8d:e4:da:0e:f0:92:27:35:77:7b:8a:eb:
                    28:52:45:7a:32:3e:b0:7b:f7:aa:ab:eb:7d:14:76:
                    1b:5b:46:ea:3d:74:95:a7:f1:23:ed:9e:cc:f3:6e:
                    dc:8f:02:97:42:aa:63:82:66:f3:4e:f9:8b:4b:6a:
                    a6:91:86:79:31:35:20:db:be:11:0c:10:28:0f:9a:
                    34:cb:eb:46:08:15:91:5f:d5:c0:9c:b0:4c:9c:63:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E9:C3:F1:5B:64:E4:8F:F9:66:54:16:AB:9B:B3:61:15:C9:49:06
            X509v3 Authority Key Identifier:
                keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c9:e9:01:6f:f7:42:34:8c:a2:e7:57:a8:54:0c:17:07:15:
         31:b3:a2:4c:af:0e:1e:87:8a:80:02:c6:01:5c:af:29:21:32:
         e1:54:37:ca:01:0b:2c:c1:fd:c0:cb:9b:a2:68:8a:da:3f:97:
         41:95:be:dc:36:54:88:cf:e7:7a:e5:cf:7c:e3:26:7e:f4:0d:
         0c:b9:6a:09:23:6f:19:d3:19:ca:43:e8:33:2d:d1:ee:68:e2:
         f2:d7:30:cd:35:73:80:ea:fb:e8:a0:a0:2c:ff:95:c5:3a:33:
         70:49:d9:74:59:ab:10:85:b1:0a:70:41:be:1f:42:9a:05:3c:
         9c:c7:96:87:cc:23:cc:82:d4:ea:d5:ab:fc:ad:68:8c:33:fb:
         89:6e:22:b1:43:d5:fb:cf:b5:39:0c:c0:2f:6d:be:13:3b:7b:
         c7:6f:bc:85:66:01:10:4a:94:41:3e:34:80:35:3d:15:b6:a2:
         f5:b6:25:26:38:b0:3f:81:e1:cd:62:e0:4d:ca:b9:86:82:93:
         97:27:e5:33:5b:fb:4f:63:d8:38:7b:4b:97:9d:e2:e6:38:73:
         23:8f:2c:40:35:e3:7c:8a:8f:81:2a:fa:41:b0:44:4c:f4:88:
         67:3d:66:2e:a7:35:ea:c2:88:ca:15:c7:67:aa:64:7d:69:9b:
         06:12:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:10 2026 by rpki-client