Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
File:                     4tc__D83xP7EvTWtHFlc0Fa67P0.mft (raw, json)
Hash identifier:          zab5o3snoeGy0hfjPAEyDGZ2wX6kmxUNVo3v2rK2HO0=
Subject key identifier:   D1:81:A6:38:08:1C:89:0E:AD:A0:A9:E3:09:A2:45:26:C8:B5:27:C0
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Certificate issuer:       /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial:       01A17F615368574A93B4ADEE823AEC48308B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
Manifest number:          0C20
Signing time:             Tue 27 Oct 2026 22:00:46 +0000
Manifest this update:     Tue 27 Oct 2026 22:00:46 +0000
Manifest next update:     Wed 28 Oct 2026 22:00:46 +0000
Files and hashes:         1: 4hsqhU_idyK9ZtsBbVsnOSDR9S8.roa (hash: 02YQZHaQKClpvxiJTvB0M8bPIBR6ADS6J6pTTSvGVSY=)
                          2: 4tc__D83xP7EvTWtHFlc0Fa67P0.crl (hash: PUsWTl2KiqxVFy+MiLij62oyYFpmW6VlMZ0cGu/yLXA=)
                          3: FgPm5ePIdB7iyy-qswL10gBrcZU.roa (hash: fBas5dQFDC57PItx0/bJVSQqggK4/99S8Oo+iirl10c=)
                          4: Stc8aIR2oBQoHtcw_xrfLAmAUGk.roa (hash: 8ZpNKKbRIaY+CLBS4atbnWfFsbmXLX5CBoQCPoi8WBk=)
                          5: k_KLQiozPwj61c05UHKa7kfze-0.roa (hash: vY77Fi6ERBrpxxjT73ei2pAcgwKcQZh57UKcaPMLUbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:61:53:68:57:4a:93:b4:ad:ee:82:3a:ec:48:30:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
        Validity
            Not Before: Oct 27 22:00:46 2026 GMT
            Not After : Oct 28 22:00:46 2026 GMT
        Subject: CN=d181a638081c890eada0a9e309a24526c8b527c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:12:0f:52:79:13:64:27:f9:86:38:7e:2f:a0:
                    82:2e:d2:19:2a:2e:b8:92:5e:57:f4:a1:1b:e6:21:
                    4f:ee:88:fa:3f:c7:b4:b7:fe:9c:e7:28:7e:85:93:
                    52:e0:a1:05:7e:5c:4b:86:b3:3b:19:04:8e:d5:15:
                    b2:63:7e:5c:eb:d7:2d:d1:de:7f:ee:a6:9f:d4:a4:
                    76:73:f6:5b:29:a4:b7:29:c5:dc:99:f2:3e:42:b3:
                    28:fb:49:21:5a:12:95:83:b5:51:fa:89:e3:01:2e:
                    7c:f0:42:ba:27:bb:eb:54:10:1d:cc:c2:35:0e:32:
                    61:5c:75:13:db:d2:43:5e:c3:fc:38:e1:04:c7:ac:
                    a8:c7:dc:b8:6f:ac:05:59:bf:e4:88:7f:20:05:62:
                    c4:36:8f:e0:52:5f:55:e6:03:c2:ad:6c:21:48:7b:
                    f6:a9:0a:07:09:0f:d4:9f:6b:c4:8e:d4:cb:44:34:
                    c1:f9:d3:47:37:a1:cd:74:18:b9:a8:b1:20:44:25:
                    25:63:67:b9:5e:c9:aa:d2:7c:01:69:c1:4a:fb:3b:
                    a3:88:6d:fe:19:42:36:67:b2:d8:17:a7:6a:b6:6d:
                    49:48:32:1f:0d:ca:4f:31:65:4d:10:7c:e8:89:5e:
                    d9:be:5e:5a:67:6a:69:50:dc:9c:90:ac:66:25:ff:
                    18:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:A6:38:08:1C:89:0E:AD:A0:A9:E3:09:A2:45:26:C8:B5:27:C0
            X509v3 Authority Key Identifier:
                keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:4b:d9:e3:7e:19:b5:e0:ff:ca:b1:c0:8e:f9:9e:af:a1:30:
         44:e8:60:02:37:b5:b8:41:34:de:02:cd:2b:c5:ae:de:c5:f7:
         e7:d1:83:2d:0b:78:0a:86:7b:7a:61:0f:3c:e4:5d:a1:85:fe:
         32:0f:8c:ea:f6:7e:34:61:ea:8c:7b:df:ca:b6:f7:db:7a:ed:
         07:56:01:ff:28:3f:d0:0b:3e:8d:7e:e7:29:1f:97:06:2a:61:
         7b:40:ef:d4:e9:88:7f:48:f1:0d:d5:3a:05:b7:cc:34:2f:4c:
         c6:1a:3b:f2:f5:16:ab:ea:79:9c:df:6a:e9:4c:12:63:9d:fc:
         b6:e2:3c:ba:2c:85:fc:ae:ca:32:29:55:e7:67:22:94:ef:60:
         36:8c:31:cd:2c:13:18:0d:3c:a8:61:cb:54:80:28:8d:ae:5c:
         f7:a6:50:c3:6f:f5:f0:66:71:7f:ae:d4:7f:7c:86:bb:01:37:
         d3:3d:5f:c2:ba:fc:78:f8:5c:50:6a:d9:98:b0:93:13:b4:f2:
         c7:2a:c9:f7:5d:7f:21:50:df:35:e9:ee:f3:b2:8c:2c:8b:06:
         92:0a:58:cd:ed:73:88:0a:7a:b0:d1:5c:66:f0:3b:1f:8f:70:
         3f:b1:d1:c5:00:76:44:d3:0a:2d:50:19:55:ec:f2:15:42:23:
         30:e5:36:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:29:13 2026 by rpki-client