Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File:                     4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier:          8mlwHqOpMfLMpgcNPKnNBWxaB532B9bBFY11NLhLbfA=
Subject key identifier:   F9:41:6A:6C:FB:C0:84:8B:C2:A3:F5:D1:F4:88:6D:C3:7F:65:BA:30
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer:       /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial:       019FA14D3B63218B47054CCEB1CA6D1F3C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number:          15B6
Signing time:             Mon 27 Jul 2026 02:00:20 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:20 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:20 +0000
Files and hashes:         1: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: hmfkSwEWekoKaX7pVmIW2EmYinU0xTcNuC3rRYrzihA=)
                          2: _kQ6sm_mo_p1SKdQoRItAP8rezY.roa (hash: FamL8pGq13zRSsk9bbJZ26sKBwj3qZkJI9rn7zZOeO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:3b:63:21:8b:47:05:4c:ce:b1:ca:6d:1f:3c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
        Validity
            Not Before: Jul 27 02:00:20 2026 GMT
            Not After : Jul 28 02:00:20 2026 GMT
        Subject: CN=f9416a6cfbc0848bc2a3f5d1f4886dc37f65ba30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:a4:58:08:3f:b7:5d:43:d0:eb:3b:ca:93:
                    7c:fc:49:43:6a:01:78:09:63:0b:da:17:73:80:4e:
                    38:13:69:7f:c5:ec:69:bc:84:1c:f8:a4:9d:05:64:
                    bf:43:8f:84:58:6b:35:be:0c:68:fb:6b:b5:28:fb:
                    51:c0:7b:0a:7d:7e:4d:08:9d:bd:80:b3:48:3b:89:
                    75:4c:4d:56:42:dc:25:12:fd:03:48:ae:92:65:cb:
                    2a:5a:58:2f:f4:b5:de:37:11:f6:37:cf:61:df:83:
                    53:40:fe:41:ff:26:da:e7:c3:dd:5e:33:26:69:e7:
                    22:91:a6:09:13:ef:6a:50:56:53:a2:97:41:2f:15:
                    69:0c:ca:56:89:c2:92:e1:5b:e9:51:eb:36:3b:68:
                    1e:37:b1:51:8a:2f:31:bf:97:04:26:27:38:a3:e4:
                    09:ab:94:28:d1:8e:99:db:7b:dc:fa:eb:7a:10:f4:
                    b2:98:86:af:30:c3:23:a5:ad:a6:f4:b5:33:b3:54:
                    e7:3d:9e:5b:ab:10:40:8b:19:60:49:e4:75:4b:ec:
                    fa:05:7d:e6:70:60:34:73:4c:56:ce:18:cc:30:2e:
                    d6:1e:98:36:19:08:eb:8b:f1:fc:e0:03:20:54:e9:
                    47:9e:19:e0:be:db:e4:c2:4b:b0:da:08:a9:b5:82:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:41:6A:6C:FB:C0:84:8B:C2:A3:F5:D1:F4:88:6D:C3:7F:65:BA:30
            X509v3 Authority Key Identifier:
                keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:97:79:d8:69:e8:b9:cb:16:ce:d4:9c:b6:58:f2:9e:16:c8:
         39:29:de:b9:e5:32:62:cd:03:a4:cc:ec:03:c2:7e:7a:b1:c2:
         ef:1b:cc:ba:21:1b:b1:a5:c5:4d:9a:12:0f:7b:dd:85:93:44:
         64:dd:b7:20:3e:05:ca:be:7a:22:7c:7d:7f:a1:5e:b8:f6:37:
         75:87:09:11:67:aa:62:dc:2b:c4:50:2c:be:0a:c0:fc:60:75:
         da:ff:11:c0:67:6b:ef:57:7a:30:fa:07:a1:e8:fb:2b:60:13:
         ff:f6:49:05:e6:44:c6:8d:c2:6a:e3:8e:09:16:67:fd:6d:ad:
         b9:68:9c:3f:bf:76:8a:2a:63:24:52:ae:9d:a0:94:fe:36:49:
         d0:4e:1b:5d:6e:33:de:80:61:8f:25:12:a6:e2:5d:4c:ac:33:
         b4:37:35:e6:4f:8e:e4:71:ec:8c:44:a7:20:fb:b9:74:df:87:
         0c:60:b6:05:de:77:47:3d:78:a4:78:1c:14:50:e0:a8:38:2b:
         2e:0a:d0:26:cc:5f:bf:44:88:f7:c7:4c:74:2a:72:d6:dc:e8:
         0e:cd:d9:ac:b5:33:4b:b3:73:f5:ed:ce:ed:2d:3c:74:34:c9:
         03:e3:7a:4c:19:3c:ac:e3:5c:51:ce:51:50:47:c1:46:31:5f:
         2b:b7:c7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:50 2026 by rpki-client