Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File:                     4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier:          RmGBxWVmhMzmeQCI7D7OhQ7FE0q2WDSRY/YM6sIo0gI=
Subject key identifier:   B1:05:92:D3:16:3B:AF:98:40:DB:72:E2:C1:05:FC:1A:86:3B:5E:5F
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer:       /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial:       01A13D136D4E28D0B095F2305B9C32CC6561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number:          0B35
Signing time:             Thu 15 Oct 2026 01:00:45 +0000
Manifest this update:     Thu 15 Oct 2026 01:00:45 +0000
Manifest next update:     Fri 16 Oct 2026 01:00:45 +0000
Files and hashes:         1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: 5Oib85AqXHvxtuZiK2AeJjtQT54FClgUq0WbTpHv9ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:6d:4e:28:d0:b0:95:f2:30:5b:9c:32:cc:65:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
        Validity
            Not Before: Oct 15 01:00:45 2026 GMT
            Not After : Oct 16 01:00:45 2026 GMT
        Subject: CN=b10592d3163baf9840db72e2c105fc1a863b5e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:9d:cd:52:8c:de:27:2f:03:0c:0a:f7:8a:
                    86:e2:7a:7b:d3:60:0e:87:30:13:bf:49:ef:b8:4b:
                    f6:ff:4e:80:ed:b0:b7:b5:8c:5e:a6:b2:9e:51:1f:
                    80:d6:58:89:2d:03:09:41:18:13:27:8f:07:5d:ec:
                    01:f3:2b:c3:c0:df:46:35:ce:31:80:fa:aa:86:7c:
                    62:8d:44:18:f7:7a:72:73:cf:2d:96:69:0e:ed:ca:
                    ea:45:b8:8b:9e:92:a2:a2:42:eb:de:bb:3b:cf:2c:
                    4e:43:eb:4e:6f:bb:b4:2b:36:2d:48:f7:e0:76:e3:
                    4a:96:0a:81:43:e7:35:06:4f:18:d8:58:9f:fb:20:
                    bb:64:8e:9f:31:10:70:59:ba:1d:91:ff:2d:7f:f0:
                    a4:13:dd:a3:52:89:89:c8:17:e0:7f:9a:29:29:9e:
                    d4:9f:f2:e8:3c:86:2e:91:41:6b:87:7e:d1:26:96:
                    00:42:88:7b:6a:d9:38:4b:ec:1d:7d:77:46:13:e2:
                    fc:88:50:c8:69:42:e5:34:6b:73:c3:c9:30:05:86:
                    32:23:c1:ca:94:a8:cf:c6:a7:71:4b:23:2d:ec:59:
                    18:0e:ef:3e:8c:c5:be:3a:b6:77:28:8c:9e:5e:8f:
                    94:53:f5:c2:3d:76:dd:c8:e9:c2:d9:44:32:41:dd:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:05:92:D3:16:3B:AF:98:40:DB:72:E2:C1:05:FC:1A:86:3B:5E:5F
            X509v3 Authority Key Identifier:
                keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:08:2a:e1:b7:43:0b:f2:e5:50:0b:29:15:cf:31:07:0e:86:
         00:a0:0a:47:c8:0e:4d:42:94:c6:60:e5:a3:cf:aa:23:5e:dd:
         d1:a4:9b:4c:68:f4:fb:15:2f:d0:bc:e1:a5:6a:e3:43:1f:cc:
         7d:dd:ce:d3:ac:15:4a:67:c1:f8:01:77:bc:34:e6:71:3d:60:
         bf:91:27:66:c5:36:3b:89:e7:6c:96:62:55:43:49:f5:3b:22:
         de:24:07:4e:e7:a7:89:25:b8:e7:54:55:a1:dc:a7:ea:c4:e0:
         ee:1c:8b:c0:c8:7a:8f:79:70:e0:0b:96:85:a4:9d:aa:0e:41:
         e0:65:a4:e7:22:eb:3e:d0:ae:cd:5b:35:12:71:8b:f6:4d:55:
         2e:3d:db:75:a1:da:e0:fb:0c:0b:80:4b:53:ea:04:9a:a1:12:
         7e:10:8d:ea:4f:78:a2:fb:b4:fc:77:74:48:61:0a:c5:32:ac:
         2b:42:46:56:6c:38:42:68:9b:e3:54:51:e9:90:3f:b8:47:03:
         ed:57:45:c1:50:32:21:d4:32:0b:b7:bd:48:44:dc:fe:a0:d8:
         05:0b:72:da:4f:e7:a2:d7:4d:2f:b6:cc:a1:bf:7a:34:53:1c:
         4a:9f:e7:1e:d4:cd:9d:45:ef:c0:ce:dc:09:1a:c8:ca:49:0f:
         39:df:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:37 2026 by rpki-client