Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File:                     4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier:          FkF2xgSOdnkef3x5geyVFPJNkxItmJVr77087h9bdOM=
Subject key identifier:   53:F6:17:F9:24:2C:0E:4E:9F:5A:AD:C9:B3:A6:2A:AB:3B:D3:46:C0
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer:       /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial:       01A13F392A1A117DC8D4A601980908C3DFFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number:          17B3
Signing time:             Thu 15 Oct 2026 11:01:13 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:13 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:13 +0000
Files and hashes:         1: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: WLyQJGHXYfE5ZusL1PamfiUtjyvoRQSi4d3Lt2uVGas=)
                          2: BdqGs3R6xCnjEwShLrflyZwaVp0.roa (hash: RR88JIqbu0K/mTZcvwGkA42FVlGztgnaWCqdDikFkjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:2a:1a:11:7d:c8:d4:a6:01:98:09:08:c3:df:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
        Validity
            Not Before: Oct 15 11:01:13 2026 GMT
            Not After : Oct 16 11:01:13 2026 GMT
        Subject: CN=53f617f9242c0e4e9f5aadc9b3a62aab3bd346c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:bc:1e:e9:f4:a9:73:49:77:21:ce:61:74:
                    96:78:a2:21:a3:95:c5:6a:15:ca:d0:f7:7b:0b:f1:
                    cf:3a:46:49:eb:e7:e8:40:a6:88:75:32:06:e5:41:
                    24:ad:6e:1a:23:9b:47:c4:e8:f7:be:8f:a2:60:e2:
                    ad:0d:c0:0a:7d:88:e6:01:04:c0:9d:52:a9:18:b4:
                    80:6c:b4:b3:63:7f:51:7c:86:7c:c5:32:5d:41:1b:
                    0d:20:e8:ba:0d:30:e9:ac:23:c2:e1:08:d5:2e:68:
                    f7:b8:7b:53:61:f4:7a:43:30:10:0f:d6:ee:d2:55:
                    9e:a0:81:ce:18:a1:80:af:f3:e1:7a:2e:72:db:4a:
                    7a:a3:68:dc:b5:18:b7:90:3f:71:74:4e:57:78:d1:
                    f4:6f:fc:b9:06:b5:e1:c4:9e:38:db:6c:ae:c3:50:
                    bf:02:c2:b7:f7:b9:d7:0d:40:01:48:3b:68:c7:6b:
                    c7:46:fe:c1:66:68:2c:69:63:13:fd:51:a0:10:b8:
                    10:2a:ad:b9:2e:3b:c5:96:55:29:8e:86:01:0c:c4:
                    7b:4a:57:19:8f:52:e1:eb:81:87:7c:b7:6d:5f:45:
                    b9:82:d7:bf:ec:58:30:59:37:e9:7f:2c:8d:ec:8e:
                    e4:70:5a:1f:42:2a:43:b9:9f:e0:f2:97:f5:24:84:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F6:17:F9:24:2C:0E:4E:9F:5A:AD:C9:B3:A6:2A:AB:3B:D3:46:C0
            X509v3 Authority Key Identifier:
                keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3b:0c:a5:3b:bf:f1:69:3d:cb:06:0e:a4:29:ee:43:10:c8:
         8a:0d:09:d2:53:b9:2d:3c:22:41:a3:d1:66:16:3b:fd:ae:29:
         aa:0b:bc:ab:b0:07:27:5e:3d:47:80:9d:1e:1a:14:71:5e:b3:
         57:7e:bd:b7:94:73:eb:9a:7e:72:f7:5b:32:75:5c:af:59:c6:
         c8:da:c1:b8:a7:19:bf:f2:a5:e2:24:2f:d7:3c:a4:ee:79:cb:
         80:ae:1f:37:5b:a8:23:ae:d5:c3:19:95:70:cc:7f:49:9f:da:
         e4:ea:61:79:80:f1:4d:4f:41:55:db:bb:a1:0b:b2:da:83:de:
         35:ae:1c:05:8e:54:a0:46:d7:5e:3d:20:90:0d:10:93:d7:22:
         c5:53:d6:a8:07:0a:60:56:13:6e:6e:0b:e9:ff:d7:e9:b5:51:
         42:e3:66:e4:a2:30:24:82:98:fd:9c:06:71:30:62:55:a5:9a:
         57:d7:a2:69:98:35:25:bf:4e:5c:34:e7:7f:6e:3c:b6:8a:6f:
         a9:0c:ef:3d:c3:da:34:54:4a:43:35:1e:7a:5f:eb:1c:f3:65:
         9b:c9:ee:86:25:3b:04:e7:f6:df:8b:3b:9f:c0:e8:8f:20:e2:
         09:62:cd:6c:b4:08:7f:6b:d6:be:92:e8:ae:7b:c6:14:2a:d5:
         6b:48:87:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/OSoaEX3I1KYBmAkIw9/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMGM3YWM1NmIxMWUxMDRhYmIxNjdiYjFhYjM3OTJiM2Zh
N2MzZDMwHhcNMjYxMDE1MTEwMTEzWhcNMjYxMDE2MTEwMTEzWjAzMTEwLwYDVQQD
Eyg1M2Y2MTdmOTI0MmMwZTRlOWY1YWFkYzliM2E2MmFhYjNiZDM0NmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/y8Hun0qXNJdyHOYXSWeKIho5XF
ahXK0Pd7C/HPOkZJ6+foQKaIdTIG5UEkrW4aI5tHxOj3vo+iYOKtDcAKfYjmAQTA
nVKpGLSAbLSzY39RfIZ8xTJdQRsNIOi6DTDprCPC4QjVLmj3uHtTYfR6QzAQD9bu
0lWeoIHOGKGAr/Phei5y20p6o2jctRi3kD9xdE5XeNH0b/y5BrXhxJ4422yuw1C/
AsK397nXDUABSDtox2vHRv7BZmgsaWMT/VGgELgQKq25LjvFllUpjoYBDMR7SlcZ
j1Lh64GHfLdtX0W5gte/7FgwWTfpfyyN7I7kcFofQipDuZ/g8pf1JITfZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFP2F/kkLA5On1qtybOmKqs700bAMB8GA1UdIwQY
MBaAFOAMesVrEeEEq7FnuxqzeSs/p8PTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYt
NGZkMGUxYjljMTJmLzEvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYtNGZkMGUxYjljMTJm
LzEvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDsMpTu/
8Wk9ywYOpCnuQxDIig0J0lO5LTwiQaPRZhY7/a4pqgu8q7AHJ149R4CdHhoUcV6z
V369t5Rz65p+cvdbMnVcr1nGyNrBuKcZv/Kl4iQv1zyk7nnLgK4fN1uoI67VwxmV
cMx/SZ/a5OpheYDxTU9BVdu7oQuy2oPeNa4cBY5UoEbXXj0gkA0Qk9cixVPWqAcK
YFYTbm4L6f/X6bVRQuNm5KIwJIKY/ZwGcTBiVaWaV9eiaZg1Jb9OXDTnf248topv
qQzvPcPaNFRKQzUeel/rHPNlm8nuhiU7BOf234s7n8DojyDiCWLNbLQIf2vWvpLo
rnvGFCrVa0iHSg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:54:21 2026 by rpki-client