Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          4PodwsMyngxd9VFEby23jMHq+tYKC1bNB7esj3qRug0=
Subject key identifier:   00:A0:67:9D:8B:5D:26:9F:28:75:B6:D6:3F:96:52:1E:4D:66:44:10
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       01A17F9862D45ACA01A4DB7A29D7868A0FC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          1B34
Signing time:             Tue 27 Oct 2026 23:00:55 +0000
Manifest this update:     Tue 27 Oct 2026 23:00:55 +0000
Manifest next update:     Wed 28 Oct 2026 23:00:55 +0000
Files and hashes:         1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: 2NO3btIkIO2VPMLQcLnvQWmenTo3oQIon6VflBjr7+Q=)
                          2: 6GUIWwZxGI0_11LUAF2nyD6ApTM.asa (hash: o9hRLFlhcdetNherJ5nziP+ejI2p5Hk/AOSB3fzCgR8=)
                          3: CyXEon0EjqXOHr8IeWjEVFpMffs.roa (hash: 61FTseLqfGHD+d4UC74A9kaSSpCsOAMcXitG3hvPp+Y=)
                          4: Ig9qMonvPevKOVrWH3fodFx_dR0.roa (hash: 2HfiQoAgdrxTZNqc0uXRZmMC99rWcay1ikzZnt8ejRw=)
                          5: JMUe3al0pklathcu47XaPUqkjyY.roa (hash: WrIFwPH2vXkQmPfNJ4EO/lLH8xEpJfsA80i818mNAGc=)
                          6: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=)
                          7: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=)
                          8: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=)
                          9: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=)
                          10: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:98:62:d4:5a:ca:01:a4:db:7a:29:d7:86:8a:0f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Oct 27 23:00:55 2026 GMT
            Not After : Oct 28 23:00:55 2026 GMT
        Subject: CN=00a0679d8b5d269f2875b6d63f96521e4d664410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:89:7a:2a:9e:1f:5c:96:1e:92:bb:61:33:
                    dd:df:b2:51:c1:af:14:06:8a:0e:f6:6d:b6:e0:a8:
                    c8:20:9e:4e:8a:e8:d7:71:1e:99:6e:59:1d:b1:6e:
                    94:a7:5e:d0:af:99:02:2d:d1:1b:39:94:a2:da:8d:
                    e9:5c:20:38:55:ea:64:82:08:52:d9:67:9c:b7:48:
                    58:95:77:81:22:2d:1b:b0:33:34:88:7f:64:fa:3f:
                    e8:62:2e:ab:b4:58:21:52:02:28:11:30:93:c9:29:
                    4f:e3:40:03:a7:87:22:87:52:da:9c:12:2f:2c:cf:
                    6b:c8:dc:6e:04:cf:0f:29:2d:8f:43:b7:36:d8:9a:
                    a3:8b:b5:90:bf:d3:a7:f5:34:85:43:dc:c7:4e:ed:
                    86:c5:ec:b8:86:c0:19:2e:9c:53:48:9b:0d:bd:dd:
                    d4:df:e7:3a:bc:16:27:05:84:de:c6:53:0d:14:1f:
                    e8:39:a3:9e:dd:1d:5f:87:d8:97:e8:82:2a:20:a4:
                    0c:f6:d5:56:1e:c7:f1:bf:aa:73:c2:89:36:35:19:
                    aa:35:6e:b0:4d:eb:18:63:38:47:30:b0:77:6c:ef:
                    d0:18:6d:f5:cf:32:c6:c6:10:eb:3f:c1:e3:b0:00:
                    e6:7f:cf:22:d0:8f:9b:4f:cc:f2:6c:1e:38:82:18:
                    6c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A0:67:9D:8B:5D:26:9F:28:75:B6:D6:3F:96:52:1E:4D:66:44:10
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:20:cf:e6:c1:91:ab:32:68:93:d1:11:fd:b9:90:e4:28:c3:
         61:42:0d:47:e6:a9:5c:26:5e:a5:b0:c5:e1:33:98:90:ec:68:
         0b:54:36:f1:d1:e5:35:54:b5:8c:a0:81:43:82:96:a9:56:d5:
         55:9c:06:82:30:b9:1f:aa:c9:88:b9:f2:2a:bc:dc:16:4a:8f:
         d4:19:d8:50:56:95:36:a8:f4:31:ab:cd:b7:cd:80:4b:0e:d5:
         0d:a4:a4:de:28:5d:b5:97:3b:6f:04:2b:4b:f4:df:74:68:bc:
         36:76:2a:11:79:54:af:40:e8:59:ab:48:9c:41:00:cb:c5:03:
         b7:29:9a:91:37:a5:e6:e2:26:ff:bd:ca:a7:28:32:3d:d1:80:
         5c:02:8b:da:06:3b:e8:9e:82:6a:57:a4:fa:7e:37:ab:35:23:
         31:42:85:94:12:ad:c2:13:90:44:9f:f8:37:62:26:df:57:37:
         be:ae:8e:ef:9a:11:06:12:10:21:74:75:59:bd:db:6a:ee:76:
         1a:cc:07:6e:dc:76:e0:fa:48:2f:28:87:fb:ac:35:13:96:e8:
         03:83:dd:ed:d5:a4:78:1e:a7:67:25:7e:da:6b:1a:56:8f:ec:
         a2:f9:8a:d3:aa:8d:6e:ef:5d:cd:a7:84:1c:4d:fe:76:db:53:
         1f:66:4e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:29:04 2026 by rpki-client