Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          SxGhtpU6+dzjVlzjKEiHg40GPE+ouSit3WDtIhuq9oE=
Subject key identifier:   2D:C2:41:2F:13:4A:8D:49:4F:CB:30:6D:D4:6A:A3:C5:6F:DF:09:49
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       01A180AAECACF7D973FA07FFE88861406DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          0C04
Signing time:             Wed 28 Oct 2026 04:00:47 +0000
Manifest this update:     Wed 28 Oct 2026 04:00:47 +0000
Manifest next update:     Thu 29 Oct 2026 04:00:47 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: 9FTnAu/7bj2Wx5pavc6Wb0m9iZ4g+4/1/NtBvgG5g6s=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:aa:ec:ac:f7:d9:73:fa:07:ff:e8:88:61:40:6d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Oct 28 04:00:47 2026 GMT
            Not After : Oct 29 04:00:47 2026 GMT
        Subject: CN=2dc2412f134a8d494fcb306dd46aa3c56fdf0949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:be:c6:90:98:b2:29:7e:38:73:d9:72:35:
                    fe:66:65:53:8d:20:9a:a7:86:67:0e:a0:ef:92:2e:
                    bf:c1:05:2e:38:62:9d:f7:61:4d:c1:5d:27:fe:2a:
                    5c:b3:9c:03:68:6e:6c:5d:38:e1:aa:8b:d4:91:e3:
                    13:90:7e:43:ef:ff:35:5f:19:6e:af:42:08:82:cd:
                    b7:f8:49:aa:ec:f1:a7:47:77:d8:f7:38:68:00:08:
                    41:83:97:02:e1:f9:0e:34:8b:6b:7f:a5:db:7f:1f:
                    6d:f3:db:f7:7d:4a:0f:bb:6b:4b:1d:8a:7b:8d:8e:
                    b4:43:e7:53:d7:a9:89:a0:31:d3:22:00:28:23:c6:
                    00:a8:cc:28:d0:ac:a4:76:ec:a5:7a:52:a5:f5:ac:
                    02:fe:7a:94:d2:f0:5a:e7:19:9c:a2:68:bb:34:26:
                    6a:b5:ad:ac:c8:b7:c7:c9:32:87:63:7a:21:e8:3b:
                    0b:8f:45:c6:11:3d:e3:92:f6:9a:4d:b0:78:e1:16:
                    01:fb:d5:fd:4b:33:d7:eb:17:ba:1e:f8:84:2b:6f:
                    8f:99:72:65:19:b0:41:2d:84:d9:bc:5e:28:c6:46:
                    85:c7:4e:cb:6c:c3:4a:0b:52:d9:4e:9d:a4:87:fe:
                    ab:a9:61:41:bf:08:eb:d0:8d:79:16:f6:4b:4c:02:
                    62:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C2:41:2F:13:4A:8D:49:4F:CB:30:6D:D4:6A:A3:C5:6F:DF:09:49
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f1:fe:7a:a4:b9:3b:a3:d9:34:46:c9:10:05:9c:85:62:d1:
         43:f1:34:b7:53:b7:5d:7e:cb:fd:c9:42:b8:bc:fa:ee:be:d2:
         b7:80:6c:0e:34:bb:90:fe:55:ef:0a:b4:dd:ee:eb:04:11:d8:
         68:f1:75:d9:00:0d:2a:9b:b5:b8:04:9a:d0:4f:de:76:fa:3e:
         92:0c:c9:ab:20:3e:aa:94:e3:09:95:9c:ba:91:4c:c2:96:20:
         ce:1a:c8:c9:50:11:f4:35:1a:a1:69:89:d2:88:20:f0:49:47:
         64:43:a1:4c:ef:a4:3c:db:b2:0f:0c:37:47:5f:4c:15:b9:01:
         d0:db:ce:30:ad:9a:56:65:30:d2:96:6a:5e:cf:af:89:c1:c3:
         84:ec:88:f6:ca:be:a6:c2:eb:41:26:c2:bf:0b:4d:ed:ef:03:
         b7:ab:85:75:14:8b:87:4f:81:38:37:68:a8:49:a8:12:33:bf:
         a7:9a:89:45:09:44:06:57:df:7d:f3:1b:32:2d:a7:73:51:c8:
         b1:ea:48:da:ff:af:95:35:1e:bc:15:bc:f4:c1:63:31:fc:99:
         e9:86:dd:c5:6f:88:12:25:7f:67:12:b1:c1:0b:f5:1c:e6:f8:
         e2:74:42:be:85:8a:13:9f:7b:ff:19:fe:9d:9d:31:9d:f2:b4:
         b5:fe:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:05:58 2026 by rpki-client