Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
File:                     mcFmTbj325Ln1EZQdic5W8EH3V0.mft (raw, json)
Hash identifier:          AlBQHjQr9093qdfCkIHyBkuYptMflwRAAg3u6DiGyXQ=
Subject key identifier:   81:00:E8:10:3C:87:1E:D8:91:94:2C:20:9E:6C:4F:D6:23:C3:21:CB
Authority key identifier: 99:C1:66:4D:B8:F7:DB:92:E7:D4:46:50:76:27:39:5B:C1:07:DD:5D
Certificate issuer:       /CN=99c1664db8f7db92e7d446507627395bc107dd5d
Certificate serial:       01A14CBDC279F44731BC04D00DB3D4AF4B8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
Manifest number:          B4
Signing time:             Sun 18 Oct 2026 02:01:06 +0000
Manifest this update:     Sun 18 Oct 2026 02:01:06 +0000
Manifest next update:     Mon 19 Oct 2026 02:01:06 +0000
Files and hashes:         1: L3SCpmXJBeENQlngFVsPO7y4j9I.roa (hash: TNxBSmMFYjhX4xx6VIgUZfTdujBVV7wlaoUOw5FQgSs=)
                          2: mcFmTbj325Ln1EZQdic5W8EH3V0.crl (hash: wfFbomG/T72WuxPDpihUR8MMteU7c0BYPdUuQDuHDSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4c:bd:c2:79:f4:47:31:bc:04:d0:0d:b3:d4:af:4b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99c1664db8f7db92e7d446507627395bc107dd5d
        Validity
            Not Before: Oct 18 02:01:06 2026 GMT
            Not After : Oct 19 02:01:06 2026 GMT
        Subject: CN=8100e8103c871ed891942c209e6c4fd623c321cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0d:f4:d3:92:2f:58:6b:0b:79:ec:50:13:bb:
                    02:17:75:ac:14:28:c4:22:65:dd:ef:08:58:52:24:
                    12:19:a8:2a:73:9e:9c:90:c7:ae:7d:ae:d0:e4:b9:
                    2e:b0:d0:e7:6b:76:0c:81:30:19:4f:e4:7a:2c:44:
                    54:c1:c2:24:9b:8f:07:8c:d0:09:71:9e:ac:5f:6b:
                    8a:33:26:28:3e:13:2f:9a:10:67:b0:2e:df:4e:da:
                    d3:9e:93:e7:28:d2:1b:cc:24:a3:c8:b1:c9:a5:5b:
                    6e:8a:30:db:82:1f:3a:77:83:1f:a0:c0:ad:a0:b2:
                    8f:de:2d:16:c0:e9:8c:01:3c:52:fa:30:e1:44:b3:
                    48:c5:50:3d:f0:67:c8:00:15:8b:02:44:54:a9:71:
                    56:b7:1b:76:48:ee:11:3a:6b:68:0d:ef:d9:0d:6d:
                    3b:85:96:d8:3e:38:4a:3b:d8:18:5a:87:68:20:39:
                    bd:d7:1e:4f:d3:d3:00:b8:6f:b6:a4:80:71:45:ae:
                    8a:86:09:96:87:e9:ec:f3:74:b7:1c:6a:de:d8:92:
                    be:88:da:80:8c:fb:3e:e9:07:58:a5:d8:50:a9:4f:
                    3c:48:f1:a2:be:43:47:f2:9c:33:99:96:5a:11:2f:
                    b5:89:3f:bb:cb:ff:ba:80:8f:ff:53:60:3f:ae:3c:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:00:E8:10:3C:87:1E:D8:91:94:2C:20:9E:6C:4F:D6:23:C3:21:CB
            X509v3 Authority Key Identifier:
                keyid:99:C1:66:4D:B8:F7:DB:92:E7:D4:46:50:76:27:39:5B:C1:07:DD:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e9:1a:24:70:54:1c:a1:46:08:4b:1c:02:03:b5:01:5c:82:
         59:3a:f1:04:1b:a7:c9:07:c9:b4:80:79:dc:be:bf:18:19:d7:
         bb:04:1e:97:32:eb:39:e7:f8:f2:2e:b0:b1:74:f3:ef:eb:a3:
         54:f8:c2:90:a5:34:ec:aa:84:d4:1f:82:b3:64:33:3f:e6:a0:
         92:15:45:a9:76:f8:3d:ce:0e:08:4d:69:27:ca:2c:e6:e2:04:
         fc:e6:70:84:70:e6:1c:b2:66:82:82:20:cc:e6:d8:d0:cc:90:
         43:a8:39:6a:d9:87:f2:2c:4a:6f:c7:df:1f:20:04:64:5e:99:
         9c:bb:4a:96:d7:2c:0b:a4:2f:37:38:40:f2:76:58:ab:5b:90:
         a3:c8:83:a8:b9:9f:e5:e5:7d:f2:59:8a:94:1b:d8:d2:5e:20:
         40:2c:71:c1:4f:51:e8:36:29:f7:b9:03:5a:27:a4:29:9e:00:
         a7:00:fe:4a:4a:41:29:6c:43:0d:ee:35:5e:ae:55:45:b8:d9:
         17:f3:fe:5b:dc:3c:4e:75:fd:48:b3:ef:c2:a9:d1:81:9a:29:
         c9:54:c6:8d:e0:14:55:04:08:95:a2:34:58:ae:39:2e:5d:51:
         90:2c:7a:bc:eb:30:19:63:e5:4e:11:54:2c:ce:85:3f:07:82:
         6e:9c:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:06 2026 by rpki-client