Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
File:                     4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json)
Hash identifier:          8JtYkqLGkHKN6LYj5aAgCNu/iUgRT92gFN5WU2qqrfc=
Subject key identifier:   37:F5:B3:4B:0B:5E:48:54:D6:14:C8:72:AB:5C:67:B0:D7:03:0E:3B
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Certificate issuer:       /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial:       01A161C498E00DC6478E1C42A49151598B7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
Manifest number:          1BC5
Signing time:             Thu 22 Oct 2026 04:00:36 +0000
Manifest this update:     Thu 22 Oct 2026 04:00:36 +0000
Manifest next update:     Fri 23 Oct 2026 04:00:36 +0000
Files and hashes:         1: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: VNdY6zxWvRg+lHVG6NIKVwr+X+6dYebI7gZNE8WqM/k=)
                          2: 7f-qk0jKjn3Hv6ygSTSqX-A52T8.roa (hash: wWQY3pRKERmG9ujMWcp884MAVgXLED92sf1A7NartQU=)
                          3: Qpzdfxddg7sAd9HOkX4hdICsNh8.roa (hash: 4zKxw2hbsJ7DHleUFCRfkqUEw6l9X5X22tDEvhwM0Q4=)
                          4: vsuT_IOPUjzvR0My_Kd7LSpDKKM.roa (hash: cFfCeRAoBGEzB928ke0BQYkYud/Q7OkffZYjpQPUqk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:61:c4:98:e0:0d:c6:47:8e:1c:42:a4:91:51:59:8b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
        Validity
            Not Before: Oct 22 04:00:36 2026 GMT
            Not After : Oct 23 04:00:36 2026 GMT
        Subject: CN=37f5b34b0b5e4854d614c872ab5c67b0d7030e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:0e:32:62:90:26:79:f2:a6:bc:1b:d2:56:
                    a2:b3:09:fb:f2:a8:cc:8a:59:3d:22:1e:6e:66:17:
                    e4:89:03:4c:34:b9:a9:52:50:27:73:c3:85:e0:84:
                    b5:99:f4:78:bd:0d:f4:bf:3b:3a:60:b0:ba:4f:96:
                    37:80:13:ed:13:a5:c7:f7:f2:a2:fd:7a:7c:b4:44:
                    f4:00:3a:db:83:7a:4a:ae:12:84:5c:2c:91:0f:cf:
                    e0:b7:e1:c8:33:64:b0:46:37:d0:fe:a0:d3:d1:d8:
                    71:cf:00:63:0f:a5:e3:75:e4:23:db:e7:c3:37:13:
                    9d:32:95:70:5e:19:a6:d3:e0:ac:5c:34:2b:02:a1:
                    d3:9a:b0:07:d6:27:ed:4b:e5:d3:f4:f8:03:0b:1f:
                    fb:0f:56:d8:3c:31:28:5b:3e:55:f7:04:b1:89:0c:
                    27:16:e7:e0:fc:2b:6f:52:cc:ed:6c:5c:8b:5b:99:
                    10:a8:67:1a:25:df:a0:b2:f2:76:d9:66:44:95:d4:
                    d7:01:b3:de:0f:b3:e5:16:c6:c0:bd:c9:ac:49:26:
                    0f:03:42:3e:e9:79:cf:46:44:bb:46:95:31:17:cc:
                    ca:cf:cc:3c:2d:e9:82:66:ea:15:b1:f5:83:14:28:
                    80:98:f7:0b:7b:bd:ce:5a:77:ee:c3:1a:3f:95:30:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F5:B3:4B:0B:5E:48:54:D6:14:C8:72:AB:5C:67:B0:D7:03:0E:3B
            X509v3 Authority Key Identifier:
                keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:f7:07:13:fd:46:6e:f3:6e:97:0c:a6:b8:60:6b:26:ad:
         ef:5b:4d:12:61:29:9c:0d:de:63:43:2f:48:02:e6:a2:3e:9e:
         96:e2:6e:63:01:f0:1d:d4:78:b1:10:26:85:92:04:ea:1e:2c:
         b7:1e:4e:a9:87:89:31:56:d5:08:15:d2:9a:75:8a:00:60:e1:
         8b:c1:cb:1f:86:17:89:bb:ee:48:9d:c4:c1:f2:33:02:f4:9a:
         cc:d3:ea:cc:ba:0c:70:31:7c:4f:59:a1:02:f6:63:f6:cd:ad:
         86:46:df:22:36:4f:a1:5d:09:39:bb:f1:86:00:c8:8b:87:3e:
         61:82:92:0d:ea:92:33:76:89:18:06:26:cb:4d:4c:1b:61:cb:
         d6:3b:d0:fe:85:e2:41:95:cb:9c:13:1c:53:a3:d7:6b:98:b4:
         81:5c:19:47:0d:6d:20:c2:66:c1:94:04:3f:95:ba:ec:8d:89:
         43:9c:89:07:cc:9d:b5:25:4d:ed:e5:ad:2b:c9:20:de:fc:81:
         d4:37:1c:49:d2:1d:29:f4:9e:44:e1:b9:20:d6:f0:23:ca:b8:
         96:e8:f0:76:3d:db:ac:10:ed:e4:42:84:9e:0d:d7:de:ad:c2:
         43:c7:90:1c:80:0b:ea:be:2e:1d:39:10:cf:ca:11:6e:dd:c9:
         93:1e:b4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:59:19 2026 by rpki-client