Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File:                     4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier:          4egxiWrvRDBp8nLihy+AIW5EfSqiGcIg3Gdf7PEUDTo=
Subject key identifier:   0F:B3:B3:92:F6:1F:1C:77:4A:AB:11:C7:45:38:CD:83:01:D7:6A:60
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer:       /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial:       019DDCFAB4B0CCE505AEE6DFA79160118242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number:          18E9
Signing time:             Thu 30 Apr 2026 06:01:50 +0000
Manifest this update:     Thu 30 Apr 2026 06:01:50 +0000
Manifest next update:     Fri 01 May 2026 06:01:50 +0000
Files and hashes:         1: 2fN3eFa0bjosUQqjhzxnSC-ZbG4.roa (hash: adZ7mZtP0EOWzdaHjuDb/aCtRN0v7AY6Df2Y3DcoCAs=)
                          2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: qWfwr2pQSLP0ia82DrAtt/yFZ6BpFn2QQXNxYIVouMk=)
                          3: 9v_0JWu-xS3HupRXSgVGs4u-y9E.asa (hash: sTee8C1I1rz26eDODyCBNjrldfLm0tSqfnc3UkcLmsI=)
                          4: VFTnlB7fVRBsXRxIBDV1iFufXkE.asa (hash: iqnFhWzzO6j+t2K9kgwBf/ErkVyc0h9GJuE4NZx67oA=)
                          5: Vq_xfXcXdKcO1UzpZxW6yviyyFE.asa (hash: m8FshAEN/KHrFIoeny5MQ2gIm897mevyMxMfoqG/biI=)
                          6: YivW_0JV1PXQKNZNuU-YZa-0178.asa (hash: UK5xEl6Yl9PtluY9Smceeot0bF0az/oSTMQ4CgDOsRs=)
                          7: fQpqOd1l93-P-yMVY0liF15r3FA.roa (hash: fe669y4X3Xx1cDS4i66TQBvbP8wPt7PZfJZDiZ3TAoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 06:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dc:fa:b4:b0:cc:e5:05:ae:e6:df:a7:91:60:11:82:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
        Validity
            Not Before: Apr 30 06:01:50 2026 GMT
            Not After : May  1 06:01:50 2026 GMT
        Subject: CN=0fb3b392f61f1c774aab11c74538cd8301d76a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:19:9b:43:c3:d1:6b:66:9d:2b:ab:66:5d:
                    95:33:ea:e3:3f:70:7a:67:2c:50:b3:cf:2f:58:3a:
                    9c:a9:8b:f7:b7:95:ca:7c:1b:86:f7:09:0b:80:64:
                    c2:4b:ef:7f:52:b1:06:e5:20:99:bc:14:84:b2:8e:
                    1a:44:a2:b7:15:f0:c4:74:f8:62:07:50:53:52:67:
                    29:e7:97:76:e4:1b:05:bd:d6:66:47:a2:3d:2c:b6:
                    8b:6a:5d:b4:15:45:8e:6c:e8:3a:e7:f2:1c:0a:5c:
                    28:82:8e:80:e6:6c:f6:93:69:38:30:14:ef:95:db:
                    76:94:4c:5f:b0:fc:aa:fb:92:38:b9:37:4a:ed:4b:
                    00:48:d3:51:d1:1d:da:60:ef:f0:59:40:25:2d:68:
                    88:8a:99:cd:29:fc:7f:3e:fa:44:95:19:62:25:61:
                    0f:8f:ef:27:2c:8a:48:e1:3f:f9:df:6c:b0:8d:c7:
                    dc:ed:77:71:fb:94:1d:ee:b3:d8:98:27:2f:d3:be:
                    43:6c:73:4e:e0:9f:9e:46:2d:fa:fd:90:4e:ff:68:
                    3c:bd:d6:01:b2:f2:65:76:27:6f:42:35:cb:01:8c:
                    d7:69:11:43:d4:ab:e2:73:3b:8a:e0:32:f9:72:b7:
                    e1:d8:5a:8b:03:9e:59:93:d5:cc:e8:fe:77:5a:31:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B3:B3:92:F6:1F:1C:77:4A:AB:11:C7:45:38:CD:83:01:D7:6A:60
            X509v3 Authority Key Identifier:
                keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fd:31:2b:c2:24:93:aa:1b:87:53:07:50:2f:57:59:cc:01:
         ad:b6:2f:5b:eb:45:1f:c4:61:bf:3f:a9:a2:03:05:d6:59:f1:
         d0:9f:cc:ea:04:fb:15:be:19:74:59:67:f6:8b:0f:ab:df:c5:
         ea:73:1d:0a:12:f9:c8:90:aa:15:07:b2:22:da:bb:d4:5c:9c:
         3c:15:32:07:e1:d8:d9:d8:4c:02:92:e9:1b:97:4d:1d:23:20:
         4f:0e:ce:87:d4:25:50:c1:84:88:3e:38:b9:ac:d1:f8:c1:94:
         fb:9b:82:2c:8c:cb:1b:c9:32:86:15:bd:af:f2:f5:d3:11:89:
         d0:5f:39:f1:61:d6:07:92:56:8a:0b:7f:e4:00:7e:51:1c:51:
         39:0c:a0:75:46:ce:a2:b8:eb:87:96:47:2d:a7:3b:5e:f0:fe:
         80:f9:49:f7:11:ee:51:dd:f8:01:ed:df:8f:47:7f:1b:37:3a:
         5b:a6:77:bd:8e:ae:2d:71:e1:3b:3f:02:7b:77:d0:e4:8f:79:
         5d:18:c3:fc:21:6b:34:6b:09:1f:5a:a9:3d:28:63:e4:62:f9:
         0e:ea:71:9c:7b:23:cc:d9:e4:2e:02:db:92:50:18:31:de:de:
         8f:25:63:6f:0b:8e:c1:f7:a2:aa:e8:cd:d8:ef:21:bd:a8:8d:
         c8:05:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:45:27 2026 by rpki-client