Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File:                     4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier:          D2nh9ZjiOL7aUkAxlD7bGnVi4e5zfedzu5JvQjm8p0c=
Subject key identifier:   B0:31:C3:08:53:3E:17:1E:A7:3C:FA:AB:14:D5:E7:EA:BE:A5:76:44
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer:       /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial:       01A0B6F69CF4E660F113BCD7F8CC5EFE2B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number:          0282
Signing time:             Sat 19 Sep 2026 00:00:10 +0000
Manifest this update:     Sat 19 Sep 2026 00:00:10 +0000
Manifest next update:     Sun 20 Sep 2026 00:00:10 +0000
Files and hashes:         1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: Fkn5QKJ2LGp+7H9re2WaGYNLXQMn2h2tKo0SvuFPLvs=)
                          2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
                          3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
                          4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:f6:9c:f4:e6:60:f1:13:bc:d7:f8:cc:5e:fe:2b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
        Validity
            Not Before: Sep 19 00:00:10 2026 GMT
            Not After : Sep 20 00:00:10 2026 GMT
        Subject: CN=b031c308533e171ea73cfaab14d5e7eabea57644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ae:e5:93:2e:0d:98:b7:00:52:99:83:ad:4f:
                    8b:8e:cd:f2:88:4a:5b:d1:e3:a3:d0:5c:0f:c2:6b:
                    37:3c:d3:ca:54:fc:ba:11:cb:f4:cf:8e:ec:86:4f:
                    8f:99:fb:73:59:68:ed:7e:1d:80:29:38:15:3c:26:
                    17:ad:52:4d:30:22:92:32:c5:70:f8:f2:2b:80:cc:
                    a1:4a:29:d0:0b:b0:7c:a6:12:1d:49:28:62:14:1b:
                    6c:c1:a5:cd:67:c4:1a:ec:f9:ec:eb:28:b1:16:83:
                    68:a0:e4:ed:66:b7:c8:a0:34:5e:08:fc:4d:97:77:
                    d4:dc:2f:cc:c0:9a:7d:aa:6f:3b:60:7b:8c:00:ae:
                    64:cc:8c:f3:c6:4e:ff:74:22:13:20:78:8d:be:df:
                    c8:84:a1:ad:f6:b7:d9:cf:c0:61:30:55:e1:a4:8e:
                    e5:f9:a6:b8:af:e1:9d:64:49:e7:da:bc:20:73:48:
                    3a:57:2d:a4:fa:ae:6d:76:93:48:87:2a:3a:9c:61:
                    23:ba:6f:1b:7a:4d:14:03:8b:a5:2d:8b:e6:4c:1d:
                    5a:ff:bd:5b:05:db:5a:ba:35:7c:0e:46:bf:6e:c1:
                    3b:08:09:44:06:90:3e:80:ea:b3:21:84:c7:e2:d6:
                    ba:ae:08:1e:f6:0f:39:bb:3a:f5:ba:ee:b6:1d:50:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:31:C3:08:53:3E:17:1E:A7:3C:FA:AB:14:D5:E7:EA:BE:A5:76:44
            X509v3 Authority Key Identifier:
                keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:84:74:ec:22:15:f9:03:5a:f5:fe:f8:93:1e:b7:b0:a7:2c:
         db:ab:56:e7:11:42:5f:10:32:f0:06:22:66:a4:a3:a5:17:de:
         1b:00:af:af:d8:bd:37:7a:45:cc:c7:df:17:a9:33:f4:0d:5d:
         71:68:7b:2b:f5:14:ed:2b:78:76:51:42:ab:a0:86:56:40:8b:
         f6:36:4f:76:c7:78:eb:0f:69:2a:d1:38:9b:de:6b:0f:a6:b2:
         83:a9:06:10:d2:90:00:81:ad:f3:a7:d6:df:0c:e2:f8:f0:9c:
         ae:52:50:4b:55:5c:88:a3:80:b9:5f:49:be:ab:8c:fb:51:e4:
         dc:dd:82:ce:d6:2d:99:3e:b5:3c:cc:2b:86:92:fc:c1:f5:a7:
         32:3c:33:b8:5f:ed:c3:53:ae:ff:11:21:b8:9b:27:f4:d1:d9:
         5d:95:0f:fd:28:ee:e4:c5:be:4b:7f:85:0e:7f:bc:84:fa:00:
         25:b5:df:76:33:d5:a8:78:e3:d4:04:1e:42:10:d2:8e:7d:2a:
         38:1a:7a:66:37:ed:ca:69:98:26:d6:52:15:ee:f4:78:9b:4e:
         ed:7b:ca:ea:b5:ef:05:a0:51:83:e5:fb:ee:46:f2:63:c2:35:
         82:05:b6:81:8b:2e:31:c5:a3:f6:ac:dc:2d:6f:16:91:62:a7:
         1c:74:b7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:10:57 2026 by rpki-client