Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
File:                     4gjsufNMH7w_NYlxCrPjSfxilcw.mft (raw, json)
Hash identifier:          h6uIz3LHhHUXab6+Tgqo6MxmxTIGbZO8n+PbHrxz10s=
Subject key identifier:   8F:DE:56:6C:DE:CB:3D:0D:9F:21:1C:70:0F:F8:12:DD:45:06:78:96
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Certificate issuer:       /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial:       019F190D294D19891F6F6AB0C16BB2C69F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
Manifest number:          151C
Signing time:             Tue 30 Jun 2026 15:02:00 +0000
Manifest this update:     Tue 30 Jun 2026 15:02:00 +0000
Manifest next update:     Wed 01 Jul 2026 15:02:00 +0000
Files and hashes:         1: 336eDMssVQNfEiBmoxarP3nrjtk.roa (hash: 9J9MwpU2hz/GKCdOknpT6/jotuvB3sQI9jkSTrRaadM=)
                          2: 4gjsufNMH7w_NYlxCrPjSfxilcw.crl (hash: iqpE4CHcucaqo4Z5MHIOMmm13HL/tvJeZrjKqk3zwYk=)
                          3: A1vffGiVRzHhktAh8WauFDp_PGs.roa (hash: FvQNZ1PqCG0U2r5llLhZQlQ9+6yvMXP+Ib7zL2wgnX4=)
                          4: TVR6USDVrzsKPavV9Zqj4mS9t8g.roa (hash: MZXOmiy7piD6PX8VUiC3S2DTVjqauXIxWzFxiqo3ops=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0d:29:4d:19:89:1f:6f:6a:b0:c1:6b:b2:c6:9f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
        Validity
            Not Before: Jun 30 15:02:00 2026 GMT
            Not After : Jul  1 15:02:00 2026 GMT
        Subject: CN=8fde566cdecb3d0d9f211c700ff812dd45067896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:59:b4:a3:46:ad:0f:83:ff:23:70:b9:7d:
                    b6:60:48:09:7f:d0:54:9c:2f:cc:b3:9a:ed:e3:e4:
                    9a:32:c8:ee:fa:d2:be:3e:4b:7b:0f:e1:b9:d5:3e:
                    8d:0e:57:5d:ee:91:6c:ea:4a:79:fa:f4:4b:70:7a:
                    70:0d:c3:a4:a6:50:9e:9c:15:80:11:ca:ca:8d:e2:
                    97:c7:cf:dd:bb:55:7d:64:00:e6:6a:02:49:c2:7f:
                    65:fc:0a:75:74:31:85:75:27:fa:cd:2a:b2:e3:6c:
                    b8:5d:f0:c9:2d:26:01:6a:b3:6c:7d:e9:9e:5b:c4:
                    a2:fe:48:2a:56:8f:c8:95:11:6c:fd:7a:bb:c9:4a:
                    77:f7:a8:51:0d:14:3b:05:0d:00:69:28:0f:46:d5:
                    41:54:e1:40:23:36:c9:37:e1:95:5b:a9:75:a7:1c:
                    37:bf:4c:f0:a5:e0:b2:0f:bb:56:66:3a:81:fe:5c:
                    a7:57:6e:79:2e:b5:60:1a:11:b7:a1:b2:e0:94:0c:
                    20:cb:0f:ea:cc:5c:f8:c4:bf:40:0e:c7:ad:ea:ae:
                    2e:59:e0:43:ab:09:ff:2a:cd:c6:86:a7:1c:81:7a:
                    23:40:9d:8f:72:94:a5:b4:77:48:c9:cb:d7:bf:c8:
                    b6:06:fb:7e:c3:87:6e:bd:10:f7:66:51:48:c0:86:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DE:56:6C:DE:CB:3D:0D:9F:21:1C:70:0F:F8:12:DD:45:06:78:96
            X509v3 Authority Key Identifier:
                keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:25:ce:6b:fb:30:ee:07:f4:af:e5:4d:16:1b:97:2f:2a:87:
         57:12:ff:47:89:38:ba:dd:f3:5e:48:2b:85:6a:26:00:0d:c7:
         0b:99:4b:9d:aa:dd:6a:78:4c:88:99:ad:1b:38:9b:a2:30:58:
         72:f9:d4:b4:76:db:24:e3:c8:25:87:35:2e:10:b4:93:16:ad:
         f5:81:4a:a1:89:27:94:a2:52:7f:11:ba:ff:14:2f:1a:56:19:
         d8:b3:c3:f0:d4:4a:ce:81:45:20:ec:b8:aa:ab:a9:79:46:e7:
         09:1f:1e:9d:b8:3b:c1:7f:1f:48:bd:ea:f3:98:8a:4d:a0:e1:
         c5:c7:86:d3:96:77:8d:df:f2:c5:14:ee:e8:45:90:d7:66:4d:
         25:20:af:e5:7e:9a:95:2b:20:24:e8:36:4a:20:c7:6d:39:5c:
         8f:9c:46:2b:23:37:b4:86:11:06:24:20:53:5c:81:7d:70:8f:
         9f:7d:af:09:a5:bb:17:9e:f3:aa:08:5a:fb:d6:44:96:64:c9:
         60:32:3f:fe:79:d6:ca:05:b8:bc:43:85:de:76:c6:26:b5:98:
         5d:5d:8f:3d:ac:a7:51:69:47:b2:bf:2f:88:75:02:22:96:ea:
         e2:b7:87:a0:86:8b:8d:55:c9:29:a0:8f:f3:39:0c:4f:a6:25:
         7c:b4:45:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:53 2026 by rpki-client