Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
File:                     Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json)
Hash identifier:          Bev9qSukH7SP96NeJBIoKOXWpztRzzyi/ZK4va+A94A=
Subject key identifier:   5E:80:DF:A1:8D:B0:70:08:40:8A:44:B2:1D:14:5C:35:86:28:A4:BD
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Certificate issuer:       /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial:       01A14C86E0FB1296E3F391330E91B64B5867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
Manifest number:          1442
Signing time:             Sun 18 Oct 2026 01:01:10 +0000
Manifest this update:     Sun 18 Oct 2026 01:01:10 +0000
Manifest next update:     Mon 19 Oct 2026 01:01:10 +0000
Files and hashes:         1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: LFZZfQxeuHwoDgsY3yF8eYbSavvxQclwG23i+zd+JL4=)
                          2: oPW1SGwP91H4COCpUVzVXa2p0W0.roa (hash: sJ80Hmwvt2BZ4Ckn8z2EQlXDh6xgPaM8/fsDXZd71pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4c:86:e0:fb:12:96:e3:f3:91:33:0e:91:b6:4b:58:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
        Validity
            Not Before: Oct 18 01:01:10 2026 GMT
            Not After : Oct 19 01:01:10 2026 GMT
        Subject: CN=5e80dfa18db07008408a44b21d145c358628a4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:d0:a9:54:18:9e:81:70:5d:57:43:a9:ec:
                    61:b9:ff:a2:32:5c:26:6e:55:9e:97:9c:2e:e3:51:
                    f2:5c:03:e1:43:65:61:37:60:40:39:e1:bc:f6:6f:
                    19:fa:e1:3f:5f:65:a7:06:2a:f3:59:da:06:78:c7:
                    b6:33:bd:02:c7:d6:37:5d:ff:b7:37:74:35:89:72:
                    2d:45:15:15:aa:8b:13:38:a1:5d:1d:15:2b:a3:0b:
                    7e:cd:ef:8e:fa:09:1e:52:f7:fd:35:35:14:da:fe:
                    6f:00:58:02:46:7a:b9:af:b8:fa:f3:e9:c8:c7:5c:
                    25:64:b7:30:02:71:c7:b3:82:8e:7c:f7:de:b7:9d:
                    3c:f0:1b:99:d6:35:d8:58:16:0a:39:9f:d5:83:cd:
                    4e:3b:85:37:12:51:b3:0d:26:5e:ae:ae:6d:f0:f8:
                    55:32:61:1c:af:a2:60:5a:1c:c0:c5:51:54:68:49:
                    68:ec:f6:0d:ae:84:09:1a:02:76:f0:97:1f:50:14:
                    47:d2:16:04:ef:6d:5d:ea:a6:7a:cf:b2:4c:07:62:
                    5e:73:8c:41:35:e4:76:be:d8:c0:54:27:18:ca:f4:
                    03:2c:e5:77:40:cf:29:f5:71:ba:38:b2:f0:b0:fd:
                    bb:3d:bf:06:54:b7:35:dc:1c:0c:d3:b7:dc:b6:64:
                    45:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:80:DF:A1:8D:B0:70:08:40:8A:44:B2:1D:14:5C:35:86:28:A4:BD
            X509v3 Authority Key Identifier:
                keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:da:63:4d:ec:77:4a:eb:7e:c7:b6:b0:7d:9c:c1:32:4f:9a:
         00:78:bc:7a:78:79:1f:cd:79:1b:59:e9:02:30:2d:64:7d:88:
         30:6b:8f:19:f8:77:37:d9:2e:b1:29:98:54:5d:5e:36:3c:2b:
         5e:72:5a:66:27:d4:d6:fa:00:67:66:94:be:d4:43:95:45:73:
         1d:da:e9:83:cf:b6:45:c8:22:09:84:13:ca:b5:fc:2c:f1:1b:
         9f:d7:c3:97:db:24:55:e8:52:53:53:04:9c:d4:f4:07:dd:7e:
         45:64:88:97:0b:c8:16:5d:0f:90:19:5e:d5:b3:ec:a5:86:f4:
         ba:a0:2e:f9:1f:06:c5:d2:57:b4:c1:6a:2c:49:1a:32:c3:45:
         11:cd:0a:df:31:0d:39:99:36:f5:7f:13:b7:cd:5d:f6:cc:ae:
         3a:23:b5:27:a7:b8:b6:79:26:fc:ba:b4:db:e3:79:16:09:d5:
         1d:7d:96:aa:38:4a:ca:12:34:60:61:1d:95:97:b8:32:cb:26:
         ba:44:24:a5:f7:7f:dd:af:56:23:72:11:95:6f:1e:a0:9d:72:
         a8:50:c9:2a:f1:d3:de:81:24:49:e8:de:66:3f:44:a4:c4:15:
         86:d7:62:38:02:df:f9:9a:df:7c:2a:91:fb:03:ff:4a:95:b4:
         3c:f7:83:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:34 2026 by rpki-client