Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File:                     4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier:          1pd16b8NgWxojCwSil/QkAzWtU4gQCG4He09nhuvKxU=
Subject key identifier:   77:C0:50:24:5F:28:8B:09:99:B2:F2:41:F3:31:B3:EC:94:ED:72:AE
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer:       /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial:       01A147CEBD57DA2BA683F9F1F9F09F8F7252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number:          19FD
Signing time:             Sat 17 Oct 2026 03:01:33 +0000
Manifest this update:     Sat 17 Oct 2026 03:01:33 +0000
Manifest next update:     Sun 18 Oct 2026 03:01:33 +0000
Files and hashes:         1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: BoNpKu4B6qX7jCIhNpIyR2V3iSNGbJQVdHT8++/OMWw=)
                          2: APkEJsxH2t-1o8uReEsySa-BG0k.roa (hash: QGebNblh9sIV47+DzT8QKo/lQO0JIeSNiq/YB/thR5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:ce:bd:57:da:2b:a6:83:f9:f1:f9:f0:9f:8f:72:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
        Validity
            Not Before: Oct 17 03:01:33 2026 GMT
            Not After : Oct 18 03:01:33 2026 GMT
        Subject: CN=77c050245f288b0999b2f241f331b3ec94ed72ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:42:70:66:2c:13:7a:09:c3:67:04:5c:0a:
                    d2:df:93:f8:d9:5a:24:6e:92:8f:73:37:ab:3f:f3:
                    b6:6b:b4:67:34:f5:52:ee:3a:d6:62:2a:22:69:31:
                    68:bb:28:8a:d4:da:a2:79:bd:16:23:80:5f:42:58:
                    76:c0:8d:a9:f6:e9:87:2d:11:ad:ee:89:4f:e1:e6:
                    e0:49:24:c1:db:c8:f8:3b:6c:f8:01:60:c0:ae:8b:
                    09:c8:00:36:72:87:f6:b6:f9:f9:7e:6d:3c:f2:b3:
                    93:01:a9:f5:b4:31:98:4a:7c:e1:cc:d4:2b:e0:89:
                    f1:3b:b4:dd:ca:fb:15:a3:a0:7b:6a:d3:b8:db:65:
                    80:16:05:13:b5:e3:7c:de:00:30:ba:8b:1a:52:da:
                    a7:bf:de:52:b3:11:c8:25:6b:20:f7:3e:47:e4:34:
                    59:23:46:d7:58:46:a9:ce:c4:2e:d7:03:2e:c0:22:
                    f8:52:e6:63:63:c7:9f:88:48:18:38:b1:43:57:79:
                    61:ba:6f:54:78:37:ee:f7:b6:b7:eb:5e:f7:a0:47:
                    8f:ef:e7:51:18:48:6d:02:85:0f:be:f4:10:15:e1:
                    e5:a5:54:6b:98:c1:88:54:c9:aa:8e:41:7a:c0:33:
                    b9:c5:27:6b:97:cd:22:da:cd:11:ba:98:5d:ff:1b:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C0:50:24:5F:28:8B:09:99:B2:F2:41:F3:31:B3:EC:94:ED:72:AE
            X509v3 Authority Key Identifier:
                keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e3:0e:80:ff:ea:21:9e:12:3d:4f:6a:22:9e:df:b7:c4:06:
         d6:f1:21:38:30:f5:22:7a:68:1d:da:40:43:f7:65:b6:7a:ca:
         6f:5c:47:e1:4d:69:cc:90:44:83:d4:5d:61:fe:04:f8:e9:47:
         aa:0e:9f:4e:2d:99:9e:dd:e4:49:15:1f:46:f7:2c:9a:e3:42:
         ee:2f:af:ab:42:64:34:47:3b:63:57:c3:7c:a9:6b:fb:1f:52:
         08:92:0a:08:c8:71:72:0a:a8:f3:15:82:a0:71:91:be:e1:ef:
         6c:72:d0:ec:3d:47:a7:ab:01:55:6d:42:4a:07:a0:ed:82:e9:
         9b:71:11:44:b4:b3:e7:e5:c4:5a:9c:6c:a7:90:d1:f8:5f:bb:
         f5:10:b5:6e:03:96:16:fe:8c:d4:18:b4:0a:de:da:e5:fc:73:
         26:18:32:8e:72:dc:59:14:48:2c:a7:fb:f3:7d:f7:39:d3:bc:
         43:62:05:47:c9:77:4f:e7:4e:24:15:6f:21:10:f6:ee:28:66:
         6e:e2:91:64:d3:51:46:18:1f:e8:a6:5f:87:66:59:04:8a:38:
         6b:4a:29:5d:c4:c0:9f:8a:b3:c9:7f:1d:57:fd:f9:1c:27:7d:
         83:83:35:f9:4d:0c:0f:97:1c:0f:af:fb:03:15:c0:e1:60:fb:
         a0:28:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:53:44 2026 by rpki-client