Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
File:                     4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft (raw, json)
Hash identifier:          3F8Z+0ieTAIBzOaU3OkkPLZU+U8VMSXwzlise6TdEx0=
Subject key identifier:   0C:0F:9E:B3:3E:F4:32:DF:6F:B4:E9:56:C5:F5:63:4C:77:4F:B0:3A
Authority key identifier: E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
Certificate issuer:       /CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Certificate serial:       01A13D4AA01CE38781FB3165ED42D6D1BAAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
Manifest number:          097D
Signing time:             Thu 15 Oct 2026 02:01:03 +0000
Manifest this update:     Thu 15 Oct 2026 02:01:03 +0000
Manifest next update:     Fri 16 Oct 2026 02:01:03 +0000
Files and hashes:         1: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl (hash: rgozvssPqGgd38wdvV4G5jYX1eYzZx3SfczlLIGBWOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:4a:a0:1c:e3:87:81:fb:31:65:ed:42:d6:d1:ba:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
        Validity
            Not Before: Oct 15 02:01:03 2026 GMT
            Not After : Oct 16 02:01:03 2026 GMT
        Subject: CN=0c0f9eb33ef432df6fb4e956c5f5634c774fb03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:40:6d:b1:27:81:8f:e1:a0:9c:e3:59:16:dd:
                    25:5c:0e:d3:fe:52:61:84:47:b9:d3:7f:a5:75:8f:
                    72:a2:0b:e3:e3:a9:24:a9:8b:21:c6:f2:fd:cc:ea:
                    80:b9:8c:3f:cc:f7:b2:1c:26:b7:2d:93:9b:96:1c:
                    99:26:76:7c:a0:20:d2:16:e2:68:dd:b4:27:e7:4b:
                    83:46:0d:6e:23:9d:45:6a:f0:68:81:fa:b0:bf:65:
                    86:3d:68:6e:97:66:e1:f2:3f:82:46:66:6e:5e:98:
                    a5:15:db:cc:8e:4f:c9:4e:06:8c:72:11:1f:63:fd:
                    22:a0:d0:9f:98:26:fd:87:01:fe:01:b6:64:7d:f4:
                    c7:b8:7e:ac:7d:52:1e:26:e5:2a:d7:7c:b4:41:93:
                    97:23:b3:e1:57:69:2b:9a:08:28:5d:c1:bf:6c:1c:
                    c8:6b:da:9c:ef:ce:18:3b:e0:0f:c4:74:1d:39:92:
                    48:ad:c4:5f:d2:ae:03:c5:22:5b:11:8d:1f:82:45:
                    ce:8a:a4:ac:6d:3e:55:c8:92:62:f2:70:3a:05:2f:
                    aa:6f:5a:29:98:48:49:40:b6:ab:f3:80:88:3d:03:
                    4c:88:c0:3d:64:b4:34:8e:38:0f:7d:a9:b7:92:21:
                    ec:8b:c7:48:65:7a:db:ba:ac:a2:2f:b5:37:7a:56:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0F:9E:B3:3E:F4:32:DF:6F:B4:E9:56:C5:F5:63:4C:77:4F:B0:3A
            X509v3 Authority Key Identifier:
                keyid:E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4f:81:17:23:18:87:45:55:f2:65:1f:4b:67:30:05:fe:0f:
         41:84:73:51:0e:38:64:53:39:1d:37:3c:7a:a5:e0:3b:2f:32:
         11:5d:bb:24:bf:a2:3b:87:e2:fe:15:27:2c:6a:5e:38:52:01:
         c6:4b:26:63:ba:2a:6c:37:a7:1a:de:c3:6e:d7:11:5c:3a:8a:
         47:82:46:18:29:67:c8:8a:f0:49:32:39:ad:cb:5d:ab:09:aa:
         3f:8f:45:88:87:09:cc:49:c3:1f:1d:c4:88:fa:aa:22:0b:2a:
         a7:30:46:83:a8:f3:b2:17:06:98:68:28:d1:2c:e1:cc:3e:f3:
         f3:eb:34:ac:ad:67:44:9d:5f:ed:22:13:03:98:e0:86:a6:44:
         04:fe:df:ed:53:0c:53:bc:7c:ea:12:c0:79:6c:9c:08:55:e6:
         d7:4b:dd:8e:46:de:4a:b5:80:fa:c6:26:74:0d:26:6c:34:50:
         f0:f8:66:4b:24:84:1d:e6:cc:32:9d:11:83:1b:0c:cf:5e:1c:
         80:a9:0b:77:39:a3:f3:2f:59:1c:4d:a5:24:6d:7e:dc:99:6e:
         ee:38:6a:10:d0:d9:cb:84:82:7a:a5:5d:48:08:ee:0d:1d:74:
         ed:f3:80:1a:f1:0e:ad:30:aa:0d:e4:42:95:a0:dc:45:ed:fe:
         db:d5:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:01 2026 by rpki-client