Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File:                     s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier:          4qX9PgLvT6SO5SwdFVTxQpfGt+r3NMvuunV2nSN1Qa0=
Subject key identifier:   70:A2:46:B8:CB:46:A7:EB:75:5D:19:FF:D0:71:1E:96:68:5F:3E:04
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer:       /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial:       019FA1F203C9B0E346D7E8BB8150DDEEF89C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number:          19DA
Signing time:             Mon 27 Jul 2026 05:00:20 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:20 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:20 +0000
Files and hashes:         1: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=)
                          2: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=)
                          3: bnU5Q0FeKCXPHTgsxSNx9kV93d4.roa (hash: jfuS4WANPOwG9IyimGe8aZrpP9Pv78GN//1LDqZ2n2k=)
                          4: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=)
                          5: kSkniVRVZqjXlp9BCZT6zQWlnDU.roa (hash: FfDKz/98X7m6YKQq0UNqzZ0ctHS3WQFyRiYlyLAtxCw=)
                          6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: INL/rTaQXLuAOTu4W5ht/ZWI9bPzpWLzC9vS1jmVTRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:03:c9:b0:e3:46:d7:e8:bb:81:50:dd:ee:f8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
        Validity
            Not Before: Jul 27 05:00:20 2026 GMT
            Not After : Jul 28 05:00:20 2026 GMT
        Subject: CN=70a246b8cb46a7eb755d19ffd0711e96685f3e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:d6:b7:4f:9f:fe:cc:cf:ee:2d:92:c4:fb:
                    24:27:18:41:62:66:08:18:63:fa:22:05:d3:ac:26:
                    65:67:db:ca:35:58:8c:8c:7e:10:6d:d5:6a:73:0e:
                    7a:e0:7a:4d:f7:a4:97:e3:69:79:f8:b2:6b:e2:92:
                    7c:4b:30:ce:7a:44:a8:a2:a9:f9:fa:b6:2e:5d:a3:
                    a1:47:d4:77:cc:28:2d:a2:95:ea:4d:25:b7:14:1c:
                    76:ab:29:03:2f:1c:2f:64:b7:bc:90:0c:8e:66:f6:
                    e4:a1:c4:87:27:8e:d4:0e:0b:cb:bb:ad:44:ff:55:
                    ba:05:b2:6f:80:d4:5b:42:fe:f6:e6:dd:65:4f:5d:
                    be:69:25:f8:db:b4:6a:40:7b:53:7b:df:b2:9a:26:
                    61:aa:db:50:73:ec:89:36:5c:8e:43:03:4b:31:17:
                    0b:5f:ad:0e:35:ad:9c:25:1f:3c:fb:5a:d5:f3:ca:
                    db:6e:9a:56:54:3b:2d:f6:30:10:d7:d6:62:b0:1b:
                    d6:bc:81:2b:9a:11:9f:db:83:e6:fa:a7:ac:b6:b0:
                    b8:f5:59:5a:5b:cd:c5:24:47:42:f1:1c:89:cb:7d:
                    3c:58:34:9f:b4:0d:8b:81:5a:5a:38:48:b1:97:9d:
                    57:42:ee:40:6e:7b:1b:53:bb:1d:ee:e5:55:5d:0f:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A2:46:B8:CB:46:A7:EB:75:5D:19:FF:D0:71:1E:96:68:5F:3E:04
            X509v3 Authority Key Identifier:
                keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:40:87:e1:2c:42:24:74:9e:45:20:d5:56:51:e7:63:2d:e7:
         27:0a:3b:74:18:4c:a9:c9:26:ab:c5:ca:6b:66:d3:57:d7:d9:
         b5:26:bd:95:7a:98:49:e9:66:ac:68:27:48:c7:0d:3d:93:a3:
         09:ae:7a:a6:df:7c:b7:c1:2d:17:9b:5b:32:99:ad:58:5e:da:
         43:2d:67:71:7b:5c:b9:e8:b5:01:b3:89:24:c0:fe:1d:f2:dc:
         c0:d9:b1:61:8a:c1:d1:18:34:f8:cc:6b:30:78:f6:3a:ba:f9:
         49:3c:27:3b:a5:98:c4:4a:c3:a9:fd:51:2e:38:29:5d:7d:0e:
         94:2e:71:1e:f7:89:5a:03:81:30:c7:f3:e9:59:99:f5:43:bd:
         08:4b:41:b9:e3:28:f4:8d:e3:a2:4a:1f:1a:52:2e:48:77:b2:
         4d:ce:80:7a:e2:cf:f6:be:ee:00:64:79:de:4d:7c:07:84:d6:
         b6:ed:1b:a1:13:f8:13:b0:a5:27:5c:a5:bf:a7:d2:58:50:4e:
         01:0a:51:49:c5:c3:fd:f5:5a:56:8c:3e:ab:5e:f7:56:df:c4:
         dd:99:dc:bc:65:c1:99:62:82:c7:01:7e:1f:b6:c2:02:bf:b0:
         b6:ab:45:45:fc:a6:b6:67:95:21:1d:75:1d:25:04:6a:d7:d9:
         56:e2:a1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:26:37 2026 by rpki-client