Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File:                     4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier:          PadPrhXkInrfqw27hpbF1KSnRwqjC5oK+aZTCXjcajw=
Subject key identifier:   15:04:5F:C0:C7:55:0D:47:67:90:C5:5E:12:8F:0A:B5:E4:ED:4D:81
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer:       /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial:       01A13D1310CF90EF9E9CD2B2AA91DFA1A9AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number:          0ABE
Signing time:             Thu 15 Oct 2026 01:00:21 +0000
Manifest this update:     Thu 15 Oct 2026 01:00:21 +0000
Manifest next update:     Fri 16 Oct 2026 01:00:21 +0000
Files and hashes:         1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: zsKz5U6CfReIyK1lMasIYE+bW9SUOR/poX6nO8tBz8o=)
                          2: BxZPTQDdLKKz_KzmvAmu63Br_30.roa (hash: RJzmMfXa1i3UOXt5apo9yzIAminXwO5ap7oBJzJBEJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:10:cf:90:ef:9e:9c:d2:b2:aa:91:df:a1:a9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
        Validity
            Not Before: Oct 15 01:00:21 2026 GMT
            Not After : Oct 16 01:00:21 2026 GMT
        Subject: CN=15045fc0c7550d476790c55e128f0ab5e4ed4d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:71:dd:0e:b3:a7:2b:17:0b:7d:c2:85:da:
                    ce:74:f9:50:b8:fe:7f:c3:0a:5a:c0:f2:87:aa:9b:
                    6d:4e:5a:9e:ae:cb:7e:86:7e:80:ae:2a:15:45:c8:
                    7a:c7:f0:0a:c9:da:3e:42:ec:a5:94:81:4e:f4:12:
                    b0:af:ca:b8:7d:42:cb:4b:4b:ed:1e:4d:2c:99:8f:
                    a4:d4:b4:52:af:65:fa:f4:b5:92:9c:58:bc:a4:79:
                    54:c6:06:ac:da:a5:f7:04:07:bd:c9:4b:86:4b:42:
                    0c:06:28:68:45:23:6f:ba:87:5d:82:2c:40:1b:39:
                    ad:4c:9f:d5:c7:ac:fd:2c:a6:c9:57:72:e9:2b:38:
                    d9:b5:f3:0d:2f:cb:35:98:9a:94:6f:d5:76:36:71:
                    41:be:6b:19:ba:e4:53:65:f2:5a:b4:dd:e9:ef:ff:
                    3b:11:c9:d8:61:71:26:cd:29:28:39:c5:8d:d6:ec:
                    d0:61:2d:d5:a6:ae:b9:5f:f4:36:87:7f:23:8b:f6:
                    aa:21:fd:e6:c7:d3:03:18:b0:d9:9f:98:c6:e3:27:
                    25:b6:4b:cf:ac:2c:98:17:1d:17:b9:35:39:3d:55:
                    c3:77:5f:d0:fe:58:26:ae:b7:55:c8:64:0e:33:df:
                    4a:c6:65:2a:ee:6e:1d:3e:be:60:0a:57:e6:56:06:
                    ae:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:04:5F:C0:C7:55:0D:47:67:90:C5:5E:12:8F:0A:B5:E4:ED:4D:81
            X509v3 Authority Key Identifier:
                keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6f:3c:63:df:0a:4b:8c:ca:b0:9b:c9:b9:7e:8f:12:44:a5:
         f6:99:7c:bc:db:51:17:a7:cc:53:f0:07:42:82:61:a6:06:c7:
         2f:6f:1b:37:fc:c7:dc:fe:d1:53:91:78:1c:29:b5:1b:ce:88:
         69:31:1a:c8:40:b0:19:12:cb:eb:39:e8:cc:d0:43:16:b8:a9:
         35:74:f4:e8:70:21:4a:94:8d:6b:02:59:c2:39:a3:48:d4:5b:
         a2:5f:bb:63:d4:01:f8:a8:f9:d0:80:64:a5:b6:d1:05:5e:12:
         1c:5a:77:14:21:05:2a:4e:ef:50:2f:6a:b9:63:ab:40:7a:98:
         6d:8a:95:25:df:76:21:50:22:c1:5d:d7:e3:07:0a:f0:e2:7e:
         43:6a:5a:57:84:83:5d:74:04:8e:04:fb:9a:e5:27:ab:58:22:
         55:cb:26:2b:35:0e:3f:75:05:02:ce:ba:a2:51:06:de:25:7a:
         42:5b:b0:6d:87:98:da:79:b1:ee:ba:e3:ac:b8:d6:e8:29:2a:
         9d:66:85:f8:fb:1e:8e:f7:04:62:c6:61:a8:6b:21:db:db:1d:
         d3:62:05:7d:21:a1:6e:1f:35:74:16:01:43:cb:34:e4:13:e0:
         5b:a7:5b:33:02:74:f7:a8:28:93:78:7e:2e:af:60:f7:76:60:
         1e:9b:fb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:25 2026 by rpki-client