Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File:                     484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier:          eFXORX7yd6rALzzpymyyRkWJXaaaMTRNUQ3fHZHSIpg=
Subject key identifier:   E9:FC:78:85:4A:99:AC:7F:C5:43:3C:B7:A4:5E:AE:0B:32:10:F3:EB
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer:       /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial:       01A15553A0355E62091268310751BF76FD26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number:          1143
Signing time:             Mon 19 Oct 2026 18:01:46 +0000
Manifest this update:     Mon 19 Oct 2026 18:01:46 +0000
Manifest next update:     Tue 20 Oct 2026 18:01:46 +0000
Files and hashes:         1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: Dswn/XgOC+jRPI12K988s9Tgz2Ih8nHY5bvPbfHbcsU=)
                          2: Sb27fx8W2Bv1m1pEAWpcbW-vK10.roa (hash: ClUudBc4gF5lYIHf+aYM1gznaI2Os4gu/iEuZ8iqJzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:53:a0:35:5e:62:09:12:68:31:07:51:bf:76:fd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
        Validity
            Not Before: Oct 19 18:01:46 2026 GMT
            Not After : Oct 20 18:01:46 2026 GMT
        Subject: CN=e9fc78854a99ac7fc5433cb7a45eae0b3210f3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:6f:d3:81:04:1d:0e:2a:34:c7:45:85:6b:
                    d1:0a:af:61:59:ee:03:d9:1c:b3:9f:a5:73:07:26:
                    a8:42:ce:2b:63:11:14:3b:ec:f9:e6:a9:c8:5d:c0:
                    ea:2b:79:55:ad:be:11:b3:d7:8e:29:e0:5a:24:f7:
                    1b:11:82:ec:20:01:af:d3:43:95:f6:f2:09:69:c5:
                    05:1a:09:0e:92:29:7d:a6:dd:4a:f3:d6:d9:6e:34:
                    f1:86:80:7d:02:8b:29:14:41:ee:1f:0d:93:8f:1b:
                    02:21:15:60:f9:3f:6e:cf:e8:0b:cb:ec:66:b9:48:
                    3e:39:67:db:4e:70:c7:82:68:ab:73:3d:6e:ac:09:
                    9b:15:c6:0b:1f:0f:66:e0:d3:7e:d5:e9:f4:9f:a7:
                    a4:a0:75:56:83:b9:2a:98:d2:27:20:b9:8f:d1:e0:
                    1f:93:b8:90:d3:02:7d:d0:88:5c:d0:d5:e8:25:5b:
                    d3:b7:f0:bc:a2:a5:4e:f8:5a:b0:a4:f2:15:ec:32:
                    3c:00:2d:a1:aa:e3:a0:c9:63:c4:37:ec:d4:c2:36:
                    14:c7:de:17:ec:c7:2e:52:9c:4b:2e:b1:1e:3d:fd:
                    2f:f5:63:a6:2e:7b:57:42:5a:4d:dc:92:af:bd:e8:
                    dc:50:53:3d:81:03:6f:5e:d7:db:26:86:7b:60:a3:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FC:78:85:4A:99:AC:7F:C5:43:3C:B7:A4:5E:AE:0B:32:10:F3:EB
            X509v3 Authority Key Identifier:
                keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:cf:8d:ac:8c:da:a8:62:da:4b:40:ed:7d:86:2f:26:b6:5e:
         f3:9e:eb:58:08:f2:1e:38:c6:94:c8:c3:3c:a1:8b:f3:80:6b:
         5a:04:f7:a5:59:ab:1d:e5:6f:ee:81:20:0c:2b:b2:61:8f:a1:
         32:7c:44:ca:4c:14:df:29:8c:43:09:cf:14:f7:30:75:02:c0:
         81:8c:3f:c6:2e:aa:1b:66:19:b0:b2:83:52:0c:d6:38:b4:8b:
         fd:90:ef:44:4e:57:f9:92:c7:d1:d3:c2:09:06:68:b6:20:25:
         89:df:40:a4:e8:83:b8:8b:96:ea:34:2a:9f:85:46:b8:b9:aa:
         69:f5:9b:6c:8f:9c:7e:de:3d:03:9c:65:88:0f:44:2b:57:c3:
         79:eb:a3:10:f0:01:b0:7a:dc:f3:a5:19:bb:2d:f1:96:09:ae:
         d2:54:bd:0d:2a:f9:ed:a0:19:02:86:ff:a4:f0:7b:c5:20:aa:
         fb:8b:21:3e:71:4f:5a:72:a2:75:74:df:29:57:9a:74:a2:f7:
         42:d3:5f:e2:94:5f:64:13:4c:c6:bf:53:b5:d4:78:2a:97:31:
         33:1c:0e:ae:06:20:ce:4f:93:4d:64:8e:4f:1b:85:f4:35:e0:
         fa:b1:aa:e6:d5:8b:d8:14:51:57:c1:e0:70:79:b4:1c:f2:39:
         28:35:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:52:13 2026 by rpki-client