Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File:                     4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier:          vmy8XyiO/vcRfghk3nMOjLbxDEWzH21mEd6BmFJcsN0=
Subject key identifier:   94:A8:26:F3:B4:E7:26:89:58:F0:12:6E:83:D6:2D:96:66:28:0B:60
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer:       /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial:       01A1765E0A9E7E3E81483EFFEFEEC5A936C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number:          0D77
Signing time:             Mon 26 Oct 2026 04:00:36 +0000
Manifest this update:     Mon 26 Oct 2026 04:00:36 +0000
Manifest next update:     Tue 27 Oct 2026 04:00:36 +0000
Files and hashes:         1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: FBSdVlHCA9ZeBURs/MtsZlagiLQrjBMFExj0phwPtNg=)
                          2: YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa (hash: zJ9iDYD1yuxkbyK8khRTA4UqxwT49qevZssCV62H0OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:5e:0a:9e:7e:3e:81:48:3e:ff:ef:ee:c5:a9:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
        Validity
            Not Before: Oct 26 04:00:36 2026 GMT
            Not After : Oct 27 04:00:36 2026 GMT
        Subject: CN=94a826f3b4e7268958f0126e83d62d9666280b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:23:73:e3:46:5a:c3:a8:c6:bb:52:51:1a:
                    49:9f:d7:d2:f1:f3:ee:ab:fe:39:60:6a:3c:77:05:
                    66:c0:44:44:e3:f1:61:4e:77:dc:a7:79:29:ff:19:
                    5d:c0:a4:da:a0:af:3d:3b:ee:95:d7:10:b2:76:cb:
                    aa:5c:9d:63:2b:dd:b7:5a:1b:24:fb:f0:17:53:4f:
                    2e:5d:c3:02:0a:d8:75:bd:fd:66:d2:ca:18:48:4a:
                    2a:4e:0b:a5:4a:9e:b9:86:9b:1b:cb:4b:58:3a:2d:
                    35:1a:1e:e3:26:e4:41:73:03:49:b7:e6:5d:84:25:
                    3f:13:e1:67:65:04:83:3a:66:34:68:78:a5:b2:f7:
                    77:ca:4e:34:ce:5a:84:c7:15:8b:83:df:1b:14:7d:
                    39:59:7d:ed:0f:d3:3e:4f:a2:d7:6c:c4:1c:de:b7:
                    30:87:45:62:69:7c:f4:ee:b8:32:07:2d:bc:15:cb:
                    c7:23:7f:c3:77:87:35:9c:d3:aa:70:0e:23:d7:a3:
                    b3:34:ea:89:28:57:e1:cb:56:23:d2:24:54:da:d7:
                    03:6d:d0:86:7c:39:14:03:18:4c:a6:0b:e8:2e:79:
                    e1:b8:69:ec:68:cc:3e:43:bb:bb:16:f6:7a:0e:e2:
                    a7:ef:ac:a2:3a:ae:47:71:70:a4:be:74:49:b2:d4:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A8:26:F3:B4:E7:26:89:58:F0:12:6E:83:D6:2D:96:66:28:0B:60
            X509v3 Authority Key Identifier:
                keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:83:e6:11:6d:c2:4e:ba:8a:f9:77:dc:71:fd:41:2d:79:a2:
         10:08:9b:a0:f0:91:10:d1:ec:bc:69:15:51:98:c6:0d:e9:3f:
         5b:e3:cd:b7:2f:14:7c:11:3f:00:5e:83:1f:a5:e2:25:5c:0c:
         ef:17:ef:db:de:e1:d4:17:57:d3:1d:4e:44:5b:ed:ad:2a:d7:
         cf:c8:a9:60:cb:56:61:07:13:36:2b:fe:47:9a:a0:17:f7:19:
         4c:65:60:9b:ba:d6:31:f4:99:85:47:5b:13:b2:8f:9e:8c:b7:
         08:7b:2a:fb:98:0c:e3:f2:3d:98:e0:44:be:6c:40:f1:64:c0:
         1d:04:e7:5a:41:73:d9:f5:b2:6f:85:da:a8:e6:cd:f5:9a:04:
         48:22:ea:26:2b:2b:c0:e9:b5:f0:3b:c9:f4:ea:52:ea:bf:a0:
         e3:05:af:c0:87:bb:64:ec:17:e0:33:12:23:4d:1a:61:29:b5:
         af:81:b2:77:93:cf:33:d2:4a:7f:a4:54:7c:30:61:0f:11:b6:
         5e:d0:f2:a6:0b:cd:20:7d:50:35:0a:9f:31:6c:03:3d:74:b0:
         9c:35:94:c8:68:54:a2:03:1c:9c:eb:d1:56:17:be:9f:6b:98:
         01:7b:1e:08:7e:1c:f6:27:28:b9:fa:d1:7b:8e:22:e4:e8:2b:
         e8:42:8f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:10:30 2026 by rpki-client