Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File:                     4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier:          gZpeQ1g+DQCTY0GKbNnSLlAgncCdUXCmi+Vk62sq3QA=
Subject key identifier:   6B:5C:99:B1:AF:05:1B:03:B4:22:8A:C1:42:63:00:FD:F0:73:71:DC
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer:       /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial:       019F7218944263589B5457D4FAED23FE19E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number:          0AB9
Signing time:             Fri 17 Jul 2026 22:00:41 +0000
Manifest this update:     Fri 17 Jul 2026 22:00:41 +0000
Manifest next update:     Sat 18 Jul 2026 22:00:41 +0000
Files and hashes:         1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: +1frBuSARYuXmA1gCwqYtNweR82Iddy2K8MXasXw8oI=)
                          2: F9rCqWJdm6vLp6haX3vYrI2gL_g.roa (hash: xEd7jJuHdAHJVsMe82Rl5fLSYY66Quy1HzmOZTDjeq8=)
                          3: tEyInJDOacbK6EmGN5_UjB36hSM.roa (hash: Brx/LHxXHyihOiS7ZJHPUbKExTDPA4EDRA7rrTYIERM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:72:18:94:42:63:58:9b:54:57:d4:fa:ed:23:fe:19:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
        Validity
            Not Before: Jul 17 22:00:41 2026 GMT
            Not After : Jul 18 22:00:41 2026 GMT
        Subject: CN=6b5c99b1af051b03b4228ac1426300fdf07371dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0d:f6:e1:09:67:85:56:64:57:d3:f6:3e:4b:
                    95:a2:09:9f:54:70:62:ab:a2:be:4b:bd:a9:f8:2c:
                    56:87:e0:f3:5e:ab:50:4c:ab:83:3d:4e:4b:2e:b5:
                    5b:8d:88:d1:fb:63:0d:b2:21:31:30:3b:6c:bd:67:
                    55:d0:c5:fb:90:7f:3e:7f:7e:4c:b6:4c:ef:ca:e8:
                    c2:28:fd:31:d4:c7:5c:14:c9:ba:24:ac:a8:20:a0:
                    ff:f8:3a:8d:75:b3:7a:83:98:4c:04:f5:0f:74:8b:
                    3e:81:85:85:15:cb:da:3c:f0:ce:bb:7d:dd:df:6d:
                    93:5f:92:b1:09:81:e7:8e:ff:d3:d9:fc:87:90:4f:
                    e0:41:d7:5e:31:9b:7c:4a:bf:9f:14:f1:45:b3:a9:
                    90:33:f3:75:b3:21:f6:14:19:a0:59:1d:42:34:bf:
                    61:12:68:49:13:75:2a:4f:68:f7:60:59:8a:ad:e4:
                    d0:b3:21:d9:f7:3a:b7:49:82:05:cd:3b:38:e2:42:
                    f7:4b:b6:49:55:dc:4a:d3:3b:ec:a1:d8:30:8d:d5:
                    07:02:e4:63:ff:57:03:84:b8:d5:10:8f:39:d8:01:
                    29:97:45:fc:f5:f0:33:75:63:59:5f:3d:56:be:72:
                    24:ef:a7:3c:22:09:d0:24:63:de:cf:a0:63:66:2d:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5C:99:B1:AF:05:1B:03:B4:22:8A:C1:42:63:00:FD:F0:73:71:DC
            X509v3 Authority Key Identifier:
                keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:72:96:d3:42:52:a5:ab:f1:09:c5:bd:9e:46:90:f3:c5:20:
         80:b4:f9:2a:bc:83:58:ee:bb:f0:f8:19:52:e6:e0:c4:3d:57:
         59:cf:11:e0:8d:bb:e1:5e:b2:a5:f7:d9:bf:ee:af:66:30:5c:
         d9:ba:c6:1c:f8:b6:cb:0d:4f:b4:8c:74:bb:08:7f:37:cc:10:
         15:db:70:7d:60:f7:a8:5a:76:36:7f:b7:99:2e:2f:b5:f3:71:
         d4:07:3d:01:40:43:df:26:92:0c:57:30:10:65:c7:2e:ea:a8:
         9a:0f:1b:a7:86:d3:0b:ac:e2:d3:38:7b:e8:3b:36:a4:7d:3b:
         d4:8c:8c:0e:54:f0:2b:4f:a2:e1:7f:a7:bd:47:70:b5:a2:d4:
         2e:80:a8:0d:79:63:37:49:f6:0e:fa:80:98:b2:dd:83:38:21:
         06:24:6e:be:11:27:0b:72:91:ff:a6:a9:10:ec:a9:a7:72:9e:
         d5:05:97:8b:d1:1f:e8:e3:c6:18:ac:59:7b:49:58:14:fb:eb:
         46:dc:1e:98:6b:42:ae:f7:0f:f9:e9:8a:2b:1d:b3:e6:93:e5:
         22:22:0a:c6:ff:6f:28:70:7a:0c:d7:69:08:1d:15:e1:41:17:
         24:6b:6a:f8:12:b0:3a:c6:36:17:cb:cb:f1:1e:5e:86:ba:a1:
         1f:0b:87:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:56:04 2026 by rpki-client