Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File:                     4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier:          VwjlakkiijU3teN1t5LZifhTjo9e4xuqvV2H68DqSlU=
Subject key identifier:   73:1B:AE:14:4C:EE:25:8D:07:1D:27:27:8C:EC:73:21:24:37:F0:11
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       01A140F0A88D9FA4828690FB74F352149099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number:          1367
Signing time:             Thu 15 Oct 2026 19:01:15 +0000
Manifest this update:     Thu 15 Oct 2026 19:01:15 +0000
Manifest next update:     Fri 16 Oct 2026 19:01:15 +0000
Files and hashes:         1: 1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa (hash: p8zMORBp4EwLrEV0pwePL8HYOl4fQLM1ray936MhnIo=)
                          2: 3gKR0cK9QoxfvHnSIiqY4bcG8ww.roa (hash: ZcGaXU4YPznoibhlbyhjzKqhwZf4BJJECm4SI2hoD/U=)
                          3: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: UwxDzaYs/qj/UbziWE5+Ag2J58P3rSyTrmV7U8Ieoz0=)
                          4: 8tAmUasl9shJmzVr02QyR9gf1yg.roa (hash: 56dLPJcjlB89ljFKBrlBrzN9saKBJC9XHbbe4kgHJpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:f0:a8:8d:9f:a4:82:86:90:fb:74:f3:52:14:90:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: Oct 15 19:01:15 2026 GMT
            Not After : Oct 16 19:01:15 2026 GMT
        Subject: CN=731bae144cee258d071d27278cec73212437f011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:b2:97:d4:23:02:95:49:12:ce:ae:46:70:
                    7f:18:02:b0:28:50:fe:60:a8:43:b7:4f:ba:13:40:
                    51:58:8a:03:45:ed:4e:05:cd:da:9b:14:d3:70:d4:
                    f0:08:c7:2d:e4:84:fb:e5:33:a5:07:cc:39:17:58:
                    60:df:83:75:bb:27:57:2c:0b:37:55:79:19:d3:95:
                    3b:0f:02:01:c3:71:fe:71:30:da:d7:71:f1:6e:3e:
                    76:95:0e:b0:01:a6:e4:f2:b1:37:3a:26:b4:d6:e8:
                    9d:50:4f:a1:47:4d:55:40:ff:21:ad:26:91:8a:f8:
                    62:26:6a:03:d2:fa:54:dd:25:11:8b:62:26:45:12:
                    1a:8e:41:ac:29:4e:bd:80:dc:f3:00:af:ba:61:2a:
                    96:76:d6:f0:18:82:ac:25:0c:84:2f:4b:34:a1:f9:
                    e8:12:5d:a3:37:16:41:1f:df:9d:8d:11:f2:3d:e6:
                    22:0f:48:d1:94:91:cb:cf:ee:38:7c:23:55:e5:91:
                    f4:75:3d:6a:53:a9:ce:fe:ef:f3:1a:d2:32:e4:0d:
                    ef:e6:b3:a1:a3:04:42:12:c4:8d:5e:8c:2d:54:45:
                    3d:48:9a:97:23:6d:82:61:52:39:58:ff:79:07:a2:
                    da:59:44:5d:f8:7b:61:95:fb:f2:8a:9d:b3:50:ba:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1B:AE:14:4C:EE:25:8D:07:1D:27:27:8C:EC:73:21:24:37:F0:11
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a2:07:49:77:3f:91:3f:b4:7d:be:c8:3c:8a:04:dd:3d:68:
         f3:ed:8e:90:51:24:ab:35:0f:1f:1b:00:31:05:8e:ef:e8:a1:
         44:5b:c0:16:24:09:23:62:5e:2a:58:4c:d5:c9:83:05:bc:6b:
         32:1a:88:74:b5:c0:bd:29:b7:e5:c8:84:71:cb:f2:05:62:9e:
         2c:d2:b0:1d:88:61:cf:0b:3a:95:31:0a:a4:ef:d4:43:1d:78:
         1e:83:5b:cd:bc:a7:82:52:57:aa:44:e0:67:16:59:f4:5b:84:
         c4:d0:8d:e8:f3:9b:a6:6d:ed:55:ce:27:8d:27:33:07:5a:67:
         95:dc:6a:c3:e3:2e:43:37:fd:ea:63:70:f0:24:6f:2c:3e:31:
         38:78:0c:24:35:c3:20:72:b0:17:bb:fd:07:db:4d:d5:4d:b8:
         89:7c:46:a3:08:16:d5:19:9b:f1:7c:66:68:0a:d1:e6:d4:c8:
         ca:cd:c3:a7:14:88:d2:03:9b:ec:d1:79:67:ce:dc:c4:9b:74:
         80:a8:76:6b:f1:46:be:ac:b4:27:2d:97:c3:08:55:79:70:1c:
         e8:f0:11:72:66:be:c8:80:eb:eb:78:a9:17:e6:7c:6a:f9:dd:
         67:7e:70:4a:cd:a9:b0:c6:17:44:32:bb:c3:24:28:6a:e8:e1:
         44:87:fa:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFA8KiNn6SChpD7dPNSFJCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx
ZmI0ZjIwHhcNMjYxMDE1MTkwMTE1WhcNMjYxMDE2MTkwMTE1WjAzMTEwLwYDVQQD
Eyg3MzFiYWUxNDRjZWUyNThkMDcxZDI3Mjc4Y2VjNzMyMTI0MzdmMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzOyl9QjApVJEs6uRnB/GAKwKFD+
YKhDt0+6E0BRWIoDRe1OBc3amxTTcNTwCMct5IT75TOlB8w5F1hg34N1uydXLAs3
VXkZ05U7DwIBw3H+cTDa13Hxbj52lQ6wAabk8rE3Oia01uidUE+hR01VQP8hrSaR
ivhiJmoD0vpU3SURi2ImRRIajkGsKU69gNzzAK+6YSqWdtbwGIKsJQyEL0s0ofno
El2jNxZBH9+djRHyPeYiD0jRlJHLz+44fCNV5ZH0dT1qU6nO/u/zGtIy5A3v5rOh
owRCEsSNXowtVEU9SJqXI22CYVI5WP95B6LaWURd+Hthlfvyip2zULqZzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMbrhRM7iWNBx0nJ4zscyEkN/ARMB8GA1UdIwQY
MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt
ZmQ0OWViM2YxOWIxLzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx
LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6IHSXc/
kT+0fb7IPIoE3T1o8+2OkFEkqzUPHxsAMQWO7+ihRFvAFiQJI2JeKlhM1cmDBbxr
MhqIdLXAvSm35ciEccvyBWKeLNKwHYhhzws6lTEKpO/UQx14HoNbzbynglJXqkTg
ZxZZ9FuExNCN6PObpm3tVc4njSczB1pnldxqw+MuQzf96mNw8CRvLD4xOHgMJDXD
IHKwF7v9B9tN1U24iXxGowgW1Rmb8XxmaArR5tTIys3DpxSI0gOb7NF5Z87cxJt0
gKh2a/FGvqy0Jy2XwwhVeXAc6PARcma+yIDr63ipF+Z8avndZ35wSs2psMYXRDK7
wyQoaujhRIf6vw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:05 2026 by rpki-client