Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
File:                     4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft (raw, json)
Hash identifier:          LHaxsVBBckvY0AT9IG37jyyIjdMRmFR6npekav762IU=
Subject key identifier:   B3:C8:6B:70:5A:C0:B1:05:52:B4:2D:F5:4D:53:05:43:5F:85:C3:20
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Certificate issuer:       /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial:       01A14EE2D0FAAB3CF21BF8B3436FFBE4FC65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
Manifest number:          1ABE
Signing time:             Sun 18 Oct 2026 12:00:49 +0000
Manifest this update:     Sun 18 Oct 2026 12:00:49 +0000
Manifest next update:     Mon 19 Oct 2026 12:00:49 +0000
Files and hashes:         1: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl (hash: nrxQDhkVeipW9M8M3mjBdCBa87oya8ergIf5SHz9UGs=)
                          2: QoYf0tAUEKqIrSmIG2tWWODeEqY.roa (hash: xUGeL/d9PAos8zWTD1cTYvl/O/Fd7xB/QfyjZxYeQ2g=)
                          3: s5zHySgUNC4r9yyDLUGS6hKc5AU.roa (hash: MCsyJIJVnFTvjDhLswke9JGgZHvXeY1VQLlom/hhChI=)
                          4: trEBVhTnYojMGk31Am98ZfEdQ9o.roa (hash: ZUjcn+k6KVdZ0YruJwm/37Xg7sBIq8yD/WZghxDB9RQ=)
                          5: u4dfVgTBlyOwWNQ0P6NKkpYOUUQ.roa (hash: w4779kW3IR6Ef4OLAy8K23RNH+GshDoVigRrQzkg78w=)
                          6: xvzjWZWQsB3A6lco8X1BjK51Rro.roa (hash: R+i0CBWTZwrH14DiftjMYo17Tzx/3SLww5XYhZACozo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4e:e2:d0:fa:ab:3c:f2:1b:f8:b3:43:6f:fb:e4:fc:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
        Validity
            Not Before: Oct 18 12:00:49 2026 GMT
            Not After : Oct 19 12:00:49 2026 GMT
        Subject: CN=b3c86b705ac0b10552b42df54d5305435f85c320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:29:4f:51:fb:14:03:4b:90:15:d7:05:47:d3:
                    2a:71:91:8d:26:df:9d:31:bf:84:86:e7:2f:55:4f:
                    78:a2:f4:a4:17:f7:d5:a1:3d:51:64:3c:9e:8c:31:
                    e9:2f:51:65:39:9c:08:5d:cf:b3:f6:5a:51:50:cd:
                    3f:4d:49:c7:ca:9b:37:3a:3d:cd:00:07:34:e0:5a:
                    37:f4:36:02:bf:9a:8b:32:d5:37:da:14:e6:08:ac:
                    66:06:a1:99:9f:14:dd:fb:2a:2d:03:f7:20:67:39:
                    47:9e:77:6c:d9:aa:09:cf:44:5e:aa:aa:3b:c1:6d:
                    a2:41:ee:f1:28:77:22:1b:e9:32:71:1a:16:96:fa:
                    bd:b6:65:c7:ad:07:78:b6:02:73:04:11:76:00:ce:
                    b9:5e:5d:d1:16:3a:03:3e:dd:de:b0:dd:27:98:bd:
                    3a:0e:27:cc:0f:a7:a7:6d:7d:77:87:33:34:e4:6b:
                    cd:80:7a:73:ea:b9:38:b3:72:3e:6b:a2:6a:9b:cd:
                    8d:77:7a:39:28:1d:2b:d5:ff:72:ae:ea:c9:eb:4d:
                    7b:08:ad:18:2a:92:33:cd:79:3b:1b:32:df:b9:4f:
                    d7:a3:12:51:a7:b3:38:44:8e:f4:70:4d:82:48:3d:
                    56:41:bd:34:f4:c3:39:63:cb:38:15:89:79:01:0f:
                    ca:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C8:6B:70:5A:C0:B1:05:52:B4:2D:F5:4D:53:05:43:5F:85:C3:20
            X509v3 Authority Key Identifier:
                keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fc:7e:84:43:05:79:2a:1d:88:70:84:ec:a8:7e:04:21:fa:
         bf:fe:ea:29:4d:76:8a:65:c4:d1:77:92:d7:31:e6:22:58:97:
         86:06:ed:2c:d4:b9:4d:1d:6b:f7:38:44:1e:d4:e8:f1:d5:ed:
         fd:be:23:7c:b5:41:3a:75:cf:f8:26:d2:42:89:ad:11:5d:7e:
         0c:ac:07:e2:d2:d1:d7:7b:09:7a:34:35:e9:3f:3a:ed:0e:c7:
         57:5b:ab:98:92:99:d1:e1:d9:2f:ed:ae:e0:c9:93:14:77:ac:
         61:e0:42:3b:bf:72:fb:7c:a3:5d:e2:b7:f4:88:93:9e:2b:6b:
         da:0b:f3:22:f2:10:48:bc:82:2a:3c:8b:4b:ca:72:d4:5e:eb:
         9b:b5:f2:6e:03:1d:22:ba:43:76:1e:aa:f7:32:03:c9:4e:5d:
         0f:4b:8f:01:c8:9a:ff:bb:25:35:0c:fc:f0:84:a2:76:d7:ad:
         6d:cb:c4:7b:e8:c2:43:ac:ed:83:34:ef:77:a5:dc:49:78:ce:
         99:ea:e9:b4:7e:7b:5e:07:17:38:bc:42:dc:86:44:33:d9:79:
         8b:92:50:fc:9a:78:10:a6:c4:fd:96:6b:75:55:fa:ff:b8:4e:
         4f:be:83:61:6b:97:19:73:b4:d5:59:a8:cf:1c:18:f0:5f:6a:
         12:32:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:00:15 2026 by rpki-client