Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File:                     4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier:          IP6wzxVYzrTNVhw08ZStRj0LTPY/Gd+pHMDS1FKVA0o=
Subject key identifier:   DB:F5:3C:59:4B:7D:18:96:CB:7B:31:A0:8B:20:A0:56:A1:D1:01:AE
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer:       /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial:       019FBCFCAD6C6CB8D40DD36FE283B8496264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number:          0E82
Signing time:             Sat 01 Aug 2026 11:01:43 +0000
Manifest this update:     Sat 01 Aug 2026 11:01:43 +0000
Manifest next update:     Sun 02 Aug 2026 11:01:43 +0000
Files and hashes:         1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: pa1THv/yZ8st9f1D0fuCZ7Vh4FBxpd0e4V4YxvT9HDY=)
                          2: kngS6K-zD_8sUA397D-FmyaEEHM.roa (hash: EsRQ0EgBwWquSNWV/LYzcwJWySX++9Ff9+FU6ey8IeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Aug 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:bc:fc:ad:6c:6c:b8:d4:0d:d3:6f:e2:83:b8:49:62:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
        Validity
            Not Before: Aug  1 11:01:43 2026 GMT
            Not After : Aug  2 11:01:43 2026 GMT
        Subject: CN=dbf53c594b7d1896cb7b31a08b20a056a1d101ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:bd:25:b1:ed:6d:d7:ef:61:74:df:4e:ec:
                    52:54:66:86:cc:88:32:18:38:af:f2:05:45:0b:b0:
                    f4:d4:bc:00:99:85:fa:bc:ff:2c:f6:b1:64:2c:b6:
                    1f:78:9f:69:b1:8e:f7:a4:85:ad:dc:6f:9c:05:a4:
                    8c:f1:f5:00:58:c8:68:0a:bc:8a:be:18:f5:4d:7a:
                    c8:ce:f2:5c:45:93:e2:49:22:66:03:64:0c:79:73:
                    33:97:53:1f:65:4a:28:1a:05:55:54:90:be:f0:1d:
                    09:d9:75:18:84:9a:06:f6:45:75:40:96:de:4d:82:
                    72:9b:cd:a9:0d:73:87:f6:35:af:7f:82:ce:96:db:
                    5b:ed:f9:7d:fd:ed:1d:1f:67:85:34:ef:6a:c1:c5:
                    15:b1:ce:64:a1:b8:37:c8:94:1b:53:3d:b9:0a:04:
                    e3:2a:51:b4:ab:fc:c3:8b:d5:2f:fa:0e:9f:2f:1f:
                    9a:d9:49:ea:a0:09:f6:91:7c:b3:41:57:a8:ac:3f:
                    f3:12:87:c5:ab:14:57:71:29:09:3e:53:0e:53:99:
                    6d:a9:f2:98:dc:92:61:8c:18:ae:d0:09:91:81:77:
                    35:83:16:39:70:da:36:39:21:56:06:04:04:37:7f:
                    be:34:ed:37:e2:ab:11:f5:b4:10:31:e0:63:45:58:
                    fe:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F5:3C:59:4B:7D:18:96:CB:7B:31:A0:8B:20:A0:56:A1:D1:01:AE
            X509v3 Authority Key Identifier:
                keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:19:4c:11:5f:00:c3:11:b3:81:b1:0d:52:94:6e:f9:55:a6:
         3f:e0:e3:1a:df:5d:57:48:15:f2:e9:ae:d5:b2:98:df:a1:78:
         b1:f9:71:b7:d8:5b:b7:58:79:5d:ea:84:a6:82:4f:49:c6:eb:
         d1:97:64:49:41:6a:37:b5:9f:a9:e6:6b:65:db:01:64:93:79:
         d4:f1:f9:30:f1:90:d0:6a:a4:06:8d:3a:73:c3:ce:d9:9e:ca:
         c8:ca:86:21:38:f0:44:62:3e:9f:98:a1:c0:a6:02:6e:96:bb:
         aa:18:02:1e:29:22:6d:54:91:ad:38:14:c9:ec:ee:a2:d5:66:
         cb:f7:3b:43:50:93:57:ef:b7:8c:60:84:d6:98:67:0a:25:82:
         c2:89:9d:5e:17:04:1d:a9:b4:6c:f7:66:5e:1d:ba:6c:ac:29:
         fa:9f:59:9d:32:2d:de:75:09:eb:b5:d1:95:a5:39:0a:17:84:
         82:45:f6:54:2d:0e:be:77:9c:40:bf:21:b3:23:10:64:e2:6d:
         48:23:73:52:f4:ee:cd:6a:cd:ce:03:41:7c:4e:db:c9:96:f5:
         4b:a3:4a:d3:8a:97:18:36:4a:f4:59:27:46:e8:67:f9:f5:68:
         3a:4b:04:fd:26:b1:bc:3d:2d:2c:e5:68:76:c7:1a:23:3f:8f:
         e2:b7:f0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 20:58:20 2026 by rpki-client