Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
File:                     l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json)
Hash identifier:          68ZAGqEIKyWg2cXOyYZlDSM0cAD/wEFsOGqthCqmg1c=
Subject key identifier:   4C:46:95:B2:7C:AA:2A:DE:46:B7:79:08:7F:E1:7D:25:9B:E3:5B:75
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Certificate issuer:       /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial:       019EF8DD4F078FF6530A0542DC3E7836C9EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
Manifest number:          1994
Signing time:             Wed 24 Jun 2026 09:01:53 +0000
Manifest this update:     Wed 24 Jun 2026 09:01:53 +0000
Manifest next update:     Thu 25 Jun 2026 09:01:53 +0000
Files and hashes:         1: B5Ns6rWldhEAob3mxJpKyKcm42A.asa (hash: n1DHfqrLmjXkNDAqU/pYWiBza4Za68DkT/EAuiXqfOs=)
                          2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=)
                          3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=)
                          4: QOv9AtzM59S_WNU7KUIEWRfJl68.asa (hash: 6O0jKZ/+i/G9w5+oF5K0c5UTn7UqPYc3SNDvmBucH+4=)
                          5: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=)
                          6: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=)
                          7: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=)
                          8: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=)
                          9: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: NS4zkExZmwROgATPrC3L13BgrQkJjqMlqt/VSJCjJyg=)
                          10: wNJN5eIQFxpTQPR_yflmL8Lctrw.asa (hash: 2uWAVzddog3xAuqZI9xlMQgD8WOzmLiMNlAfNcUz1AE=)
                          11: xdAiPxtHiSARdy6D1muPHXjJ7bo.asa (hash: VY4TRsfLEX39zBQVtcIxPVYcqXpcy2I5EsQFBkqtus0=)
                          12: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=)
                          13: yPa1ORKwdYO21oPHsCqaSGK2ss8.asa (hash: rF3Bv82DUAK46dZh7JdvizZgf5EoczF43qjQleVqEKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 09:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f8:dd:4f:07:8f:f6:53:0a:05:42:dc:3e:78:36:c9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
        Validity
            Not Before: Jun 24 09:01:53 2026 GMT
            Not After : Jun 25 09:01:53 2026 GMT
        Subject: CN=4c4695b27caa2ade46b779087fe17d259be35b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:41:e0:8b:93:0a:01:a6:43:56:1f:7e:5f:
                    9b:59:9c:dd:3b:4f:21:b9:20:be:de:79:f0:b9:c7:
                    fd:04:5a:42:88:4a:c4:94:a3:e9:c0:30:f2:c8:74:
                    1b:2c:08:06:22:7c:6b:3b:ae:3f:0f:e9:63:5e:a8:
                    8c:d0:12:bf:ca:fb:3f:d0:c0:0a:ee:59:e7:4f:68:
                    f4:d6:d2:61:5c:e1:83:d1:60:f7:d3:e7:c6:36:41:
                    1d:88:48:3c:29:88:70:b6:a5:68:de:01:c8:15:16:
                    b7:59:32:2f:45:da:98:ab:9c:20:13:3e:15:31:cf:
                    41:fb:15:d9:95:69:5c:65:03:81:57:73:32:92:8f:
                    24:9d:a6:ee:f5:ab:23:42:09:4f:e6:29:c9:01:28:
                    d5:60:54:76:5a:08:56:15:92:9f:f9:d4:07:a5:58:
                    3e:b0:ac:f8:0e:83:4a:04:2e:83:77:14:bb:65:88:
                    56:05:95:24:85:e9:30:5a:3a:1a:77:66:34:67:69:
                    f5:43:a3:cb:2f:27:55:79:fa:c2:d4:c0:2d:5f:59:
                    a2:e0:d2:47:d8:15:e6:9f:94:63:51:4e:54:22:44:
                    cd:cd:0f:f7:1e:91:b5:7a:7c:6c:61:f7:db:dc:26:
                    88:f7:a6:61:07:fe:e1:ef:01:29:3e:32:0e:59:76:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:46:95:B2:7C:AA:2A:DE:46:B7:79:08:7F:E1:7D:25:9B:E3:5B:75
            X509v3 Authority Key Identifier:
                keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:d7:50:bd:d9:79:60:e3:ac:90:97:4b:97:c0:35:aa:a6:
         3b:18:e7:6d:e1:b7:b3:84:54:0d:2c:a3:51:d4:0a:f6:75:17:
         c8:44:fc:54:50:98:a8:78:e6:4b:23:3b:53:45:52:9b:0b:5f:
         e1:08:34:4a:8e:8e:10:aa:e6:69:2a:fe:00:0b:7a:11:25:30:
         c8:b8:61:43:29:b0:22:4a:27:f9:f1:d3:9b:50:44:cc:f4:72:
         b2:17:34:0f:3d:b7:9b:14:92:51:19:84:94:8b:81:81:fd:db:
         f9:78:53:38:5d:51:a5:7f:a6:09:94:60:8d:48:a0:4d:b6:5f:
         74:16:d3:13:a8:ef:ba:1a:70:4b:6e:c8:a1:3c:cb:7c:38:23:
         4a:af:9f:b9:72:92:66:51:f8:d5:87:83:ae:16:04:f6:95:cc:
         ce:88:64:86:e8:ca:f2:e0:60:ce:6c:86:d8:0b:cc:d7:78:ba:
         99:02:f2:87:f2:54:16:bd:3a:35:e8:77:3a:d0:46:27:39:17:
         47:65:ad:ce:d6:48:66:94:1a:ba:bd:27:b3:c8:24:12:ea:22:
         fe:ba:53:0a:3a:24:c9:41:98:f2:0e:6a:83:36:49:b2:a2:62:
         ae:9e:b8:19:01:61:d3:57:47:62:5c:94:57:89:c1:e2:9f:13:
         da:35:29:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 17:03:10 2026 by rpki-client