Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File:                     1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier:          9U811RBHTGUjMCbGcIlAuBJBNorEGdVR09NwdInv5P4=
Subject key identifier:   03:49:67:F1:18:A5:CA:A3:DC:6A:FF:BD:3F:15:AF:A2:AF:EA:B3:A5
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer:       /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial:       01A14C18F2E5C49D754CE21127AD3F303D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number:          0E56
Signing time:             Sat 17 Oct 2026 23:01:05 +0000
Manifest this update:     Sat 17 Oct 2026 23:01:05 +0000
Manifest next update:     Sun 18 Oct 2026 23:01:05 +0000
Files and hashes:         1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: oY0GKsgB3jVKyOAZYtAideSl4bXVumcI2w+HzMbN0Xs=)
                          2: Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa (hash: 0p7ZxsSara0zAMrBMjKosv4Q0grMmOgXjOvvhV5ruz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4c:18:f2:e5:c4:9d:75:4c:e2:11:27:ad:3f:30:3d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
        Validity
            Not Before: Oct 17 23:01:05 2026 GMT
            Not After : Oct 18 23:01:05 2026 GMT
        Subject: CN=034967f118a5caa3dc6affbd3f15afa2afeab3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ee:d4:a7:0f:65:55:ef:c1:15:5b:03:9f:50:
                    f5:d3:3e:b0:84:ad:53:28:99:6d:54:80:13:46:34:
                    41:3f:09:25:18:dd:ef:82:e7:5d:1e:a4:00:70:e8:
                    5c:f8:5d:53:4e:37:96:8c:bd:85:e7:9e:84:00:b2:
                    f8:fa:cd:56:0e:79:bd:65:7e:fb:e6:3d:23:33:d2:
                    ec:1e:e7:25:f9:35:05:9d:08:08:ff:e3:2c:24:0f:
                    3f:1a:f3:96:a2:a6:8c:6b:d0:e9:e3:de:69:ac:17:
                    38:66:98:10:29:f9:46:81:be:c2:d1:01:14:a1:5c:
                    6f:06:13:b3:8f:b3:41:2f:43:63:c8:6d:63:7c:60:
                    6e:49:c5:84:fe:4e:9b:bd:ad:7d:bb:fc:3b:1a:ae:
                    bc:63:18:69:7a:ab:de:91:db:5e:27:09:b4:f6:87:
                    be:d6:79:7c:70:25:33:71:de:ee:05:90:78:b6:eb:
                    c5:0b:d2:5a:ba:69:43:05:a5:ab:f5:ba:c8:e2:d2:
                    1f:0b:f0:db:e0:0c:29:df:e3:62:66:fc:ed:5f:c4:
                    34:15:06:32:e6:6d:7e:43:72:99:2b:35:d4:ff:f8:
                    cd:d3:e8:6c:fa:9e:b2:19:8f:72:ee:69:54:46:d8:
                    d1:7f:a8:04:97:de:f2:e6:9b:b1:0c:7c:3d:ba:70:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:49:67:F1:18:A5:CA:A3:DC:6A:FF:BD:3F:15:AF:A2:AF:EA:B3:A5
            X509v3 Authority Key Identifier:
                keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:47:c9:65:e1:45:2f:77:0e:5c:f0:96:89:8f:cc:52:c2:48:
         68:33:86:fb:b2:84:80:c9:f2:14:c1:29:f9:6c:f4:a4:84:00:
         5e:c7:54:b8:21:51:a3:69:53:60:fa:20:b7:da:9c:41:ce:45:
         e1:71:cc:cf:81:fe:f5:ee:ec:1c:af:ac:9c:5f:c6:62:8d:b9:
         15:fd:55:9f:f6:f7:cd:a4:ea:fb:79:1e:e1:e9:c0:05:34:ce:
         c1:77:01:9a:c8:2f:2e:c9:cf:e1:d0:89:63:e8:09:9d:3e:3e:
         e3:26:61:56:50:d5:ec:87:14:39:eb:85:c3:5b:ad:49:66:86:
         fc:7a:b0:99:33:22:19:a4:f6:fd:27:98:87:5c:09:0e:dd:36:
         ad:b3:f3:0c:7d:ff:7c:fe:e8:f0:fe:cd:2a:b2:71:2a:01:aa:
         41:d5:9c:93:f1:94:06:f2:dd:80:00:61:72:90:fa:5d:cc:3c:
         5a:bd:78:ab:ba:8e:de:9e:e0:e5:9e:0d:63:9d:b1:d9:26:a8:
         43:22:b2:0d:59:2a:e3:74:32:95:59:9f:2d:3a:c9:8d:bd:5d:
         aa:e2:30:9c:e2:ef:81:05:8b:44:a3:57:99:84:af:a8:1a:60:
         d0:40:aa:9a:4b:14:6c:03:71:01:aa:b3:5c:18:97:37:18:59:
         9f:85:c3:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFMGPLlxJ11TOIRJ60/MD1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzRjNGUxYjAwY2U1YmZiMGQ5NmQ0YzIxZWZkMDU4ZDNi
NWNhNzkwHhcNMjYxMDE3MjMwMTA1WhcNMjYxMDE4MjMwMTA1WjAzMTEwLwYDVQQD
EygwMzQ5NjdmMTE4YTVjYWEzZGM2YWZmYmQzZjE1YWZhMmFmZWFiM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7u7Upw9lVe/BFVsDn1D10z6whK1T
KJltVIATRjRBPwklGN3vguddHqQAcOhc+F1TTjeWjL2F556EALL4+s1WDnm9ZX77
5j0jM9LsHucl+TUFnQgI/+MsJA8/GvOWoqaMa9Dp495prBc4ZpgQKflGgb7C0QEU
oVxvBhOzj7NBL0NjyG1jfGBuScWE/k6bva19u/w7Gq68YxhpeqvekdteJwm09oe+
1nl8cCUzcd7uBZB4tuvFC9JaumlDBaWr9brI4tIfC/Db4Awp3+NiZvztX8Q0FQYy
5m1+Q3KZKzXU//jN0+hs+p6yGY9y7mlURtjRf6gEl97y5puxDHw9unBMlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANJZ/EYpcqj3Gr/vT8Vr6Kv6rOlMB8GA1UdIwQY
MBaAFNZ0xOGwDOW/sNltTCHv0FjTtcp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4Nzgt
YmE1NTcyZTc3NGVkLzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4NzgtYmE1NTcyZTc3NGVk
LzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUfJZeFF
L3cOXPCWiY/MUsJIaDOG+7KEgMnyFMEp+Wz0pIQAXsdUuCFRo2lTYPogt9qcQc5F
4XHMz4H+9e7sHK+snF/GYo25Ff1Vn/b3zaTq+3ke4enABTTOwXcBmsgvLsnP4dCJ
Y+gJnT4+4yZhVlDV7IcUOeuFw1utSWaG/HqwmTMiGaT2/SeYh1wJDt02rbPzDH3/
fP7o8P7NKrJxKgGqQdWck/GUBvLdgABhcpD6Xcw8Wr14q7qO3p7g5Z4NY52x2Sao
QyKyDVkq43QylVmfLTrJjb1dquIwnOLvgQWLRKNXmYSvqBpg0ECqmksUbANxAaqz
XBiXNxhZn4XDcg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:41 2026 by rpki-client