Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
File:                     4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft (raw, json)
Hash identifier:          NXKiYBmnorjGmrRrnACKkG2n8bgjx+/tw4Y8i6yCJ7Q=
Subject key identifier:   34:17:78:91:3E:BD:7A:E6:42:6E:A4:30:75:94:EF:A3:3A:48:C8:72
Authority key identifier: E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
Certificate issuer:       /CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Certificate serial:       01A0021425E1E5489BF5FBC7DC58CD92D11C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
Manifest number:          0E02
Signing time:             Fri 14 Aug 2026 21:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:09 +0000
Files and hashes:         1: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl (hash: LQHXik2bu3AK6TN9CDR1Ikxvna/Y7SR+QTbhpItconM=)
                          2: xdfHz51H2U_drRVl99FgU2CFlPQ.roa (hash: BLDc4xOeEFuPu6EvzSRPfHwGo2Y4vTDZuLs9dGjD79Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:25:e1:e5:48:9b:f5:fb:c7:dc:58:cd:92:d1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
        Validity
            Not Before: Aug 14 21:01:09 2026 GMT
            Not After : Aug 15 21:01:09 2026 GMT
        Subject: CN=341778913ebd7ae6426ea4307594efa33a48c872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:8a:25:11:c8:43:29:ff:50:e4:31:85:de:
                    be:37:5a:49:25:ff:6e:14:7f:63:65:8a:03:ad:4a:
                    0d:49:2f:85:b3:79:21:e7:47:e6:0f:3a:17:23:ca:
                    55:43:98:5e:d9:97:94:70:b9:49:f6:9b:af:df:02:
                    31:eb:aa:95:19:c5:f9:c5:c8:03:14:66:ed:be:01:
                    a6:86:1a:c3:c1:85:e4:44:34:60:f0:00:3c:c3:4b:
                    08:b4:5d:84:18:c5:bd:07:0d:d7:20:c5:69:e8:3c:
                    13:05:1e:d2:37:70:26:ff:cf:b5:a7:a2:3d:6d:a0:
                    1a:35:dd:f8:5f:89:ac:49:f7:ea:ce:0a:6d:aa:4c:
                    7b:9d:2d:d3:34:3f:0e:c4:b3:28:39:51:95:1f:f4:
                    88:d3:79:07:e0:87:dc:d0:e2:8a:d8:ba:79:f4:20:
                    69:7d:08:e1:00:be:59:9e:b0:20:be:b7:23:57:be:
                    79:81:b5:0f:19:e1:7c:b4:06:71:8a:03:fa:3b:42:
                    5a:db:99:9c:14:fe:06:d5:ca:d0:c5:67:31:23:51:
                    3e:72:a8:9e:32:7f:34:b8:f5:1c:c7:12:18:05:c5:
                    2f:ff:69:a3:32:10:db:7d:f7:9f:31:fe:c5:fe:41:
                    30:07:32:e2:47:e9:46:af:61:c8:df:76:92:c0:bb:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:17:78:91:3E:BD:7A:E6:42:6E:A4:30:75:94:EF:A3:3A:48:C8:72
            X509v3 Authority Key Identifier:
                keyid:E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c2:e9:a4:a9:e7:6b:84:a7:0b:95:b0:b1:50:f1:68:49:ed:
         73:dc:73:72:04:22:c4:f8:58:86:3c:c5:9e:5b:cd:36:7a:37:
         cb:5e:35:71:3a:22:a4:6e:d0:aa:55:1c:01:1d:33:40:19:49:
         29:e2:d7:53:25:b7:a7:39:75:6a:16:4d:29:3d:df:4f:a5:57:
         f2:0a:b8:be:43:0b:72:46:63:d7:47:d5:87:ff:f0:8e:84:e5:
         35:78:a3:ae:aa:ee:da:52:87:71:ef:7a:91:89:83:ff:28:f3:
         0d:8e:e3:08:44:e4:48:a8:55:98:03:f9:3d:a1:f6:68:8e:bb:
         33:e1:46:29:a1:d2:ec:45:81:9c:86:ef:32:49:de:bd:48:e1:
         50:07:e3:1a:69:c3:01:18:ab:44:d3:36:04:c9:43:bd:a0:8f:
         b3:26:40:e9:43:23:97:99:e2:13:45:47:62:8e:07:15:f8:71:
         a6:96:23:10:46:78:00:5b:15:bb:75:b7:dd:13:87:21:b9:60:
         8e:cd:79:f9:1a:12:d8:91:25:20:59:f4:36:53:29:50:9a:3f:
         43:4c:02:2a:68:09:44:8e:a7:b0:6c:eb:00:77:3b:76:e0:ee:
         27:62:ad:f9:6d:28:b4:72:d3:dc:e3:0e:02:b9:17:f7:21:5b:
         2b:8a:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:05 2026 by rpki-client