Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File:                     4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier:          2/flbMx7M+T9jrr+HV7lDC4DGjQwjQHySx1QuiGR2DE=
Subject key identifier:   69:62:63:7F:88:52:82:29:22:F3:B7:75:27:9F:B3:63:0B:6C:43:5D
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer:       /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial:       01A13D811893F79FB1925750190828002E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number:          16DD
Signing time:             Thu 15 Oct 2026 03:00:32 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:32 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:32 +0000
Files and hashes:         1: 3Kqw9tljPQG5d-js0HaYveBuk-4.roa (hash: D1nlz+BjAzn+Pt0loadLXbRjBXPaaFlVhaNwxEkZAGY=)
                          2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: 2aVxaOAXCxOUoeNNKrC9M/Tb9nE99mEXpZH7VuQQtyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:18:93:f7:9f:b1:92:57:50:19:08:28:00:2e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
        Validity
            Not Before: Oct 15 03:00:32 2026 GMT
            Not After : Oct 16 03:00:32 2026 GMT
        Subject: CN=6962637f8852822922f3b775279fb3630b6c435d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3a:b2:c5:24:65:9f:f0:2c:07:c9:4d:34:89:
                    d7:5c:48:5a:2d:ef:9e:15:ac:c7:95:81:31:f0:34:
                    c8:ae:06:70:f5:76:48:d9:45:bf:0d:a3:85:5a:9b:
                    be:9e:0b:5f:59:7e:44:71:5e:45:60:da:c9:de:ab:
                    bc:04:36:ae:1e:0f:99:2e:73:8a:1d:a5:82:03:87:
                    08:74:bb:66:a5:31:65:1b:18:7a:9a:52:f6:b1:56:
                    a5:18:73:9b:ff:37:48:ef:73:55:e9:6e:ef:dd:da:
                    ee:ba:ba:90:2b:c8:87:5c:69:24:3b:ce:e0:52:b6:
                    bf:92:d4:7f:20:4a:e3:c6:16:76:dd:d8:c3:80:69:
                    24:f2:8c:d3:36:1b:bd:76:5d:17:fc:42:dd:09:c6:
                    f3:a1:3f:48:e2:b2:a5:c9:79:36:39:91:0c:10:6c:
                    f3:f0:ea:91:16:ce:d4:0b:41:31:e4:73:9f:eb:da:
                    0e:b1:58:5e:0f:2a:79:87:1f:3e:29:bd:5c:03:70:
                    8a:7f:27:93:30:b3:cf:b0:50:c1:09:0e:92:34:d9:
                    95:41:79:41:e0:46:b4:4f:46:4e:02:81:14:f3:27:
                    1b:56:7b:a5:28:34:4b:cd:f9:3e:0e:4f:dd:ea:b9:
                    3f:c3:4f:30:34:4b:9d:02:5e:72:a8:0a:ad:11:4d:
                    f2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:62:63:7F:88:52:82:29:22:F3:B7:75:27:9F:B3:63:0B:6C:43:5D
            X509v3 Authority Key Identifier:
                keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f6:98:1c:f8:a3:29:20:08:45:62:12:97:7f:f3:b6:63:14:
         a1:5f:19:51:5c:a5:b4:57:98:d3:2f:56:75:63:75:8d:3d:89:
         f8:86:20:ad:6c:39:77:3b:b6:ac:87:35:5e:bd:7c:70:3d:25:
         f1:ca:3c:cd:0a:de:93:ad:0d:10:e7:8c:b7:fd:15:46:f6:8f:
         8a:71:fb:83:77:72:49:e7:a6:af:c0:c8:27:2d:a4:69:52:0c:
         08:b5:4e:cf:74:21:61:0e:1b:bc:ec:69:2e:20:5c:aa:db:29:
         be:8d:13:95:b1:1b:3b:3e:c0:3d:f2:21:84:8f:ae:4e:8c:30:
         b5:6a:04:18:36:63:eb:06:e0:0f:88:b7:2d:74:da:e4:d7:51:
         e5:97:4b:32:7f:89:e6:3d:34:29:21:87:73:94:7f:8e:6f:7a:
         9a:89:a2:1b:25:33:71:28:18:71:1c:58:be:2e:2b:a7:85:fe:
         d9:08:7b:75:64:6c:7f:bb:1f:a8:a1:dd:11:e1:da:36:56:b5:
         ad:aa:82:d9:8a:44:d4:01:8d:07:11:98:a1:c7:1f:85:13:df:
         2c:96:4f:a9:b0:6d:ec:48:4e:40:66:42:88:e6:eb:2b:25:46:
         a7:24:e7:86:ee:e3:60:c1:29:09:ab:86:79:76:10:f6:a3:6c:
         93:50:12:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gRiT95+xkldQGQgoAC5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYmQ5Mjc2YTZmNzhkYWMxMDAyYzM3ODNhMThkNDVlYzE0
YjVkNDMwHhcNMjYxMDE1MDMwMDMyWhcNMjYxMDE2MDMwMDMyWjAzMTEwLwYDVQQD
Eyg2OTYyNjM3Zjg4NTI4MjI5MjJmM2I3NzUyNzlmYjM2MzBiNmM0MzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjqyxSRln/AsB8lNNInXXEhaLe+e
FazHlYEx8DTIrgZw9XZI2UW/DaOFWpu+ngtfWX5EcV5FYNrJ3qu8BDauHg+ZLnOK
HaWCA4cIdLtmpTFlGxh6mlL2sValGHOb/zdI73NV6W7v3druurqQK8iHXGkkO87g
Ura/ktR/IErjxhZ23djDgGkk8ozTNhu9dl0X/ELdCcbzoT9I4rKlyXk2OZEMEGzz
8OqRFs7UC0Ex5HOf69oOsVheDyp5hx8+Kb1cA3CKfyeTMLPPsFDBCQ6SNNmVQXlB
4Ea0T0ZOAoEU8ycbVnulKDRLzfk+Dk/d6rk/w08wNEudAl5yqAqtEU3yHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGliY3+IUoIpIvO3dSefs2MLbENdMB8GA1UdIwQY
MBaAFOK9knam942sEALDeDoY1F7BS11DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgt
NzFlZWNmODk4ZDQyLzEvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgtNzFlZWNmODk4ZDQy
LzEvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfaYHPij
KSAIRWISl3/ztmMUoV8ZUVyltFeY0y9WdWN1jT2J+IYgrWw5dzu2rIc1Xr18cD0l
8co8zQrek60NEOeMt/0VRvaPinH7g3dySeemr8DIJy2kaVIMCLVOz3QhYQ4bvOxp
LiBcqtspvo0TlbEbOz7APfIhhI+uTowwtWoEGDZj6wbgD4i3LXTa5NdR5ZdLMn+J
5j00KSGHc5R/jm96momiGyUzcSgYcRxYvi4rp4X+2Qh7dWRsf7sfqKHdEeHaNla1
raqC2YpE1AGNBxGYoccfhRPfLJZPqbBt7EhOQGZCiObrKyVGpyTnhu7jYMEpCauG
eXYQ9qNsk1ASzw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:52 2026 by rpki-client