Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
File:                     pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft (raw, json)
Hash identifier:          gyV3eE7W7oQB21BCr9VC+QvMoF1l2Tl0ibosq3NWCOo=
Subject key identifier:   E5:5A:51:59:4A:80:88:16:1D:A1:19:BF:5B:7C:30:A3:7B:83:DC:3C
Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
Certificate issuer:       /CN=a4b707300e869467be5e5273222d90e0b618f924
Certificate serial:       01A165A1E327D2155CF90FA3D9E7A5116745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
Manifest number:          04AE
Signing time:             Thu 22 Oct 2026 22:01:10 +0000
Manifest this update:     Thu 22 Oct 2026 22:01:10 +0000
Manifest next update:     Fri 23 Oct 2026 22:01:10 +0000
Files and hashes:         1: 4LcrxhWHmhkvPdpuzoR7Y2DvIRU.roa (hash: R/FNqp7EeNGMZEea43bk96Q3NZeLFAovdU6R5kUDA+c=)
                          2: _rkoOQmmtVtFnbLuubGb2FPnExg.roa (hash: CzxwuD95bHpNiF0gIsEuyjsHFs3IQ3s6b3cEWVvW62w=)
                          3: bBQddLsJpMdgE7gqchwFza_jgpU.roa (hash: FUjStVoQwXDYDeRsi+A//hBH3DZhoNYwk2uCiqnGlmA=)
                          4: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl (hash: vpgDfx+pBTlHdQT54bR/lytcCjRk0WTWLKwkFGjZYak=)
                          5: xJLUaEqq1ZnsryMWFK1TiSGmxHs.roa (hash: CgFHk+Ek6FTFUMY85fF8eDyesBRdCZysUJ3S3cGo/uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:65:a1:e3:27:d2:15:5c:f9:0f:a3:d9:e7:a5:11:67:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924
        Validity
            Not Before: Oct 22 22:01:10 2026 GMT
            Not After : Oct 23 22:01:10 2026 GMT
        Subject: CN=e55a51594a8088161da119bf5b7c30a37b83dc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:66:51:7b:81:6f:fa:00:ba:1e:29:c4:6a:
                    e6:8f:49:ec:f0:af:f5:3b:7c:df:23:91:74:fb:16:
                    49:be:41:f0:b1:8e:f4:76:17:92:a6:9e:e3:2a:47:
                    50:7a:11:85:c2:c8:7b:14:83:13:23:f9:ef:b0:a5:
                    60:b7:63:cc:9b:f9:35:61:4a:ec:27:67:c4:62:68:
                    e2:d8:f7:44:a3:28:49:40:79:7d:06:ed:ce:07:2d:
                    fe:74:79:b3:1b:05:75:bd:58:69:68:ee:01:d9:26:
                    af:03:d7:23:cd:57:b9:d6:54:10:b6:e2:83:9d:96:
                    c3:f0:9b:d5:33:d6:7d:f8:b7:9d:01:e8:63:8e:3b:
                    96:43:ea:e6:70:f0:6f:7d:84:73:c4:63:a8:66:40:
                    b1:ec:81:d7:06:e3:5b:7b:86:48:be:13:ab:ba:c0:
                    68:d5:fa:1b:01:d6:8d:87:7f:56:74:81:b2:44:6d:
                    ad:4d:4e:96:12:04:a1:24:20:f8:84:cb:dc:d9:f6:
                    41:ae:fd:53:ce:2f:ee:db:50:41:86:d5:6f:27:bf:
                    81:a1:21:c4:84:e2:76:99:48:c1:2b:5a:7d:f5:f1:
                    e7:4b:4b:bd:5c:59:44:b7:c6:35:a6:ea:3a:55:8a:
                    90:b0:c4:19:a7:f8:9d:d0:0b:6c:2c:61:52:ee:bf:
                    15:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5A:51:59:4A:80:88:16:1D:A1:19:BF:5B:7C:30:A3:7B:83:DC:3C
            X509v3 Authority Key Identifier:
                keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:6b:5b:f5:1f:7e:36:2b:80:39:39:92:eb:20:6f:ec:2b:81:
         5e:04:54:9a:f2:71:2c:2e:f4:e4:0f:c5:d1:90:6b:b6:ec:09:
         d7:3d:ff:03:1d:96:58:c4:9b:78:44:11:da:44:83:fa:32:ce:
         f8:8f:c5:d8:68:b5:ff:a7:bc:64:6c:0f:30:ba:e7:1b:d7:a6:
         00:8c:0e:e9:1f:38:cf:1f:41:90:fe:ad:e8:6e:b9:41:42:c5:
         18:ed:6b:72:1c:69:90:88:ac:f1:58:e4:b3:2b:89:f0:e5:37:
         80:79:d3:8f:e4:d0:69:46:3f:2e:4b:12:3f:0b:b4:63:73:a2:
         07:aa:f2:a4:5a:ba:9c:b0:b2:e3:6c:c6:9c:e3:9c:d5:6e:e6:
         f8:19:80:cd:82:d8:e5:82:e1:c2:1e:e4:2f:22:2b:f8:b7:64:
         e2:59:8f:fd:4b:69:97:f7:4d:05:2a:0e:03:db:5b:66:70:0f:
         64:6e:53:ec:76:95:ce:8d:3a:d9:64:d8:16:dc:db:bb:51:11:
         c8:6d:b6:dd:2c:8a:a7:fd:64:0a:16:4f:2e:44:77:f5:1d:db:
         1c:e0:61:0e:a9:79:b8:cf:92:33:1b:92:45:47:6e:a5:7b:df:
         59:73:8c:12:38:0c:64:17:f1:00:dd:23:8d:18:51:e1:cc:e8:
         2d:d1:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:57:33 2026 by rpki-client