Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File:                     4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier:          S5/eC14hIUDaBPCFKavWj9j/LT8pROLBBUXG/7Vb6MQ=
Subject key identifier:   21:91:FA:29:7D:35:43:7F:83:6E:34:40:C4:B8:2A:73:E7:7E:40:D4
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer:       /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial:       01A13F02E26FCC77593E5E2E8871C321548C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number:          0A04
Signing time:             Thu 15 Oct 2026 10:01:56 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:56 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:56 +0000
Files and hashes:         1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: zvuEngPp14XMPuKPtwN7P5EiOZRxDCihSrULf4+lN2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:e2:6f:cc:77:59:3e:5e:2e:88:71:c3:21:54:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
        Validity
            Not Before: Oct 15 10:01:56 2026 GMT
            Not After : Oct 16 10:01:56 2026 GMT
        Subject: CN=2191fa297d35437f836e3440c4b82a73e77e40d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:e6:f5:30:0b:90:f7:b4:46:53:59:f5:e1:
                    e8:55:36:d0:3b:76:37:ff:4a:84:9f:59:7b:e3:3d:
                    42:bd:20:14:95:da:fe:20:29:10:80:82:70:aa:f8:
                    ca:20:3e:8e:d3:1b:ed:c7:54:d1:65:dd:5e:9f:3f:
                    06:f2:7f:dd:e9:35:d7:e9:e1:96:f0:2d:1c:34:06:
                    ce:47:ad:b6:d1:32:3c:c5:a8:61:2c:28:58:b4:43:
                    89:d6:a6:59:6f:4a:7f:aa:a8:74:24:6c:b8:f8:58:
                    ce:52:49:b1:69:e7:a9:ee:3b:e8:fe:63:00:72:bb:
                    23:33:a5:41:0e:89:95:e2:c0:ed:c1:23:ce:0d:7f:
                    14:42:37:b3:46:48:ea:75:53:f9:38:0e:8b:06:30:
                    90:dc:79:fa:d9:4b:7d:d8:16:df:b6:b8:33:fb:95:
                    44:0d:3c:90:16:4b:f2:bf:01:6a:da:8c:b5:c2:53:
                    5a:5e:f3:a0:28:a9:d5:b5:d1:41:da:08:a9:bf:36:
                    9f:dc:dc:6b:8f:dc:b5:7c:a7:49:76:2e:a0:02:02:
                    62:02:74:42:32:cb:61:49:a0:7c:7f:28:6e:fb:7b:
                    b5:34:50:43:4f:c1:6e:21:02:95:7f:f9:dc:4f:ad:
                    c3:f1:15:d2:0f:21:8d:3d:8c:ec:96:13:43:23:c2:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:91:FA:29:7D:35:43:7F:83:6E:34:40:C4:B8:2A:73:E7:7E:40:D4
            X509v3 Authority Key Identifier:
                keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:48:3f:7d:26:41:00:9b:c3:6f:05:4f:2a:09:24:46:dc:4b:
         4e:d3:5a:25:bf:1b:a3:71:eb:84:53:37:e2:cb:bb:c6:a5:2f:
         1d:e2:5b:71:5e:f9:3f:58:1d:d5:b8:31:30:94:1f:c1:ba:7b:
         15:7e:61:52:73:7d:1f:db:d3:1a:67:47:52:a8:e1:32:43:cb:
         22:01:7e:aa:46:9b:15:7c:bc:76:fd:7a:cb:8f:57:a0:f2:6f:
         f3:4b:1a:7a:02:73:b0:c4:bd:9c:6b:16:fe:8b:30:9b:9d:73:
         82:c5:bd:38:f6:1c:6e:20:8a:92:a8:cc:21:c6:f9:b5:20:19:
         63:43:49:e4:bf:15:18:31:3f:df:50:93:7c:74:7c:27:02:f7:
         55:0f:44:cc:de:e0:65:2e:ae:7e:54:a8:2e:98:50:cf:17:03:
         52:1c:9a:f7:fa:b2:73:49:07:42:76:da:a4:9d:2f:22:ae:81:
         fb:3a:27:b2:99:ac:8e:ea:35:71:b5:bf:bf:e2:bc:8c:af:df:
         f6:cd:ab:2e:5a:a9:fe:96:4c:03:95:09:9b:64:d1:5e:b1:9f:
         79:b7:80:40:b4:2d:99:53:18:94:82:17:d5:54:9e:fd:07:82:
         d6:02:b8:5d:1e:d2:85:03:e6:8f:b0:16:20:4e:d7:20:e9:ae:
         b2:61:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:19 2026 by rpki-client