Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File:                     4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier:          YM8NKwsXCz/w/wNupX+c1iTkEGe+HS/ZLd6/1U+0s90=
Subject key identifier:   4A:09:9B:26:72:E3:51:FC:D3:6B:92:69:FB:4F:80:76:7C:65:D0:1F
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer:       /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial:       01A000930491AD1ADDB3B3CD10EF68B732E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number:          0D43
Signing time:             Fri 14 Aug 2026 14:00:29 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:29 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:29 +0000
Files and hashes:         1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: WjVMjigAyuL6IeyI/apiOABgWsRI9wNpRJLhs5RwB4k=)
                          2: NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa (hash: e6t60cVHGwxB0yMWg7tXzy3uxaUsUhD5hfxLuTTJHN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:04:91:ad:1a:dd:b3:b3:cd:10:ef:68:b7:32:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
        Validity
            Not Before: Aug 14 14:00:29 2026 GMT
            Not After : Aug 15 14:00:29 2026 GMT
        Subject: CN=4a099b2672e351fcd36b9269fb4f80767c65d01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:98:57:97:c1:65:2d:7a:52:f0:2e:f6:e6:
                    9c:f9:25:76:af:a3:d5:a4:0c:3a:20:90:ad:af:5d:
                    13:5a:50:ae:f7:bf:3a:32:5f:d1:dd:44:9a:c6:8a:
                    ab:c0:84:7b:0b:d8:1f:32:3b:4d:56:15:7c:b7:35:
                    d6:20:b2:69:c3:c6:87:45:93:01:76:c9:bf:12:ce:
                    a4:5a:b4:b5:e6:7d:46:56:ac:12:a9:82:32:3f:b1:
                    29:c9:df:94:3d:86:1e:f9:4e:93:08:54:48:2c:83:
                    b0:09:04:96:1a:5e:1a:95:cf:01:8f:ae:0b:d1:f9:
                    f2:49:d7:b3:5f:86:61:89:c6:0d:c5:22:fc:d8:62:
                    03:03:6b:47:6b:5a:36:31:27:85:c0:03:40:7b:bd:
                    f7:24:05:b3:eb:72:13:85:86:c1:c4:11:53:ba:8f:
                    ce:ac:37:bf:26:61:be:04:5c:3f:99:2c:a0:2b:87:
                    f0:22:21:2a:4a:50:80:2c:5b:bd:e7:99:f4:1b:f6:
                    8f:03:ef:91:7e:74:dc:73:d4:c1:d0:4a:0b:19:ac:
                    64:1a:6b:c4:a8:11:6d:9a:7c:35:f5:2d:a6:fc:7a:
                    ca:dc:d3:9a:29:27:33:cc:50:8c:ed:d1:5d:19:27:
                    75:4c:6f:13:75:0a:d4:5b:d6:7b:ac:fa:06:84:4b:
                    af:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:09:9B:26:72:E3:51:FC:D3:6B:92:69:FB:4F:80:76:7C:65:D0:1F
            X509v3 Authority Key Identifier:
                keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:27:04:4f:2d:65:fd:e6:f5:07:fc:b9:09:c5:88:50:1b:8c:
         30:ab:dc:30:cb:d9:f6:5c:79:50:1b:76:75:52:4b:03:d4:35:
         7a:47:a5:43:c8:2a:be:bc:d4:ce:e9:a2:26:62:99:9b:8f:6d:
         0e:f1:4d:d0:dd:c2:44:57:39:03:92:a6:62:e5:5c:38:08:59:
         3f:2a:63:3c:a7:a7:d1:55:3f:3b:f0:9d:31:35:f4:38:5e:42:
         d6:be:27:03:e3:08:e3:8b:eb:28:97:a9:87:0b:dc:7c:ab:7e:
         81:a3:e5:92:c0:d3:22:bf:ce:21:86:41:b7:b6:29:ca:33:1d:
         32:d5:9b:15:f4:b0:00:9c:27:65:3f:96:a8:c3:85:57:ee:ac:
         be:49:47:7f:40:4b:f3:3d:2b:3c:91:f7:ff:0e:b6:17:ca:98:
         87:ed:38:d9:a8:0e:81:b1:56:93:39:d2:6e:99:3a:6c:27:b4:
         bd:0f:e9:e1:7b:a4:0b:d2:63:d9:ed:db:49:c9:72:3b:f1:c8:
         d3:7c:59:ad:75:b9:7b:dd:e4:87:1f:d0:20:57:6d:0d:ae:35:
         a4:97:a9:c9:69:7b:1f:5f:9a:a9:5d:4a:9d:ba:24:b9:50:3e:
         51:2d:c1:56:62:37:38:55:ab:c9:f5:8c:57:24:9d:c8:45:06:
         91:7e:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:10 2026 by rpki-client