Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File:                     49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier:          7mKl06Gho+ujRB4z/fZ0OzCroypRIhBou0XvTnOd9xQ=
Subject key identifier:   54:02:F5:5F:F7:AD:27:C9:3B:90:93:D6:17:42:9D:99:3E:A9:BE:8F
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer:       /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial:       01A13ECB9F91A34C84893BD9757D15B6AE52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number:          0F2B
Signing time:             Thu 15 Oct 2026 09:01:34 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:34 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:34 +0000
Files and hashes:         1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: zxZlNxIeTfwINyGU4RICCwJUPRh4UcUTW1AqQiM3L4A=)
                          2: hD5yM-bTRcXqw7hsAje6CKQSULU.roa (hash: BoKM+q4JQCN0QltCSwaO5romaCSLzyBz/YnHCsh+0Uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:9f:91:a3:4c:84:89:3b:d9:75:7d:15:b6:ae:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
        Validity
            Not Before: Oct 15 09:01:34 2026 GMT
            Not After : Oct 16 09:01:34 2026 GMT
        Subject: CN=5402f55ff7ad27c93b9093d617429d993ea9be8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:bc:6c:28:cc:3e:62:c5:42:8c:84:70:34:
                    a1:2e:d7:70:2b:b3:04:99:c7:59:08:6f:2f:e4:61:
                    9b:93:96:34:62:28:34:e3:4e:17:35:55:d2:c5:66:
                    d8:d9:70:e4:07:c1:38:ec:7f:de:f5:8f:c1:ab:2b:
                    49:4f:5a:03:83:5c:84:de:00:63:87:70:5d:63:77:
                    b8:82:34:bf:46:de:35:35:dd:53:10:90:29:86:5a:
                    f7:29:f8:63:4c:b4:5d:3e:b7:ef:a6:1f:04:74:53:
                    f5:3b:db:d7:25:46:55:55:44:05:9c:b0:d3:34:3b:
                    25:42:a4:53:bc:3a:2e:5f:a2:05:b0:e1:10:35:e4:
                    a1:52:ec:3b:2a:0a:f1:2e:89:e0:4e:b0:cc:93:a5:
                    05:3d:a8:d3:c1:e7:14:d6:4d:c1:25:4c:f8:9a:8a:
                    4e:2c:b6:7a:db:37:31:00:ff:d4:00:7f:c1:5a:60:
                    c1:7a:65:16:43:e6:43:57:87:17:b7:4e:ca:27:6e:
                    ab:5e:7f:be:91:88:86:af:c7:db:d9:91:c4:93:ea:
                    30:9e:0b:26:52:94:f2:a6:57:2f:4a:02:77:a2:9c:
                    0e:50:1a:6c:14:06:c2:8e:0b:71:02:0c:14:87:b2:
                    1f:7d:cc:c6:05:9f:aa:da:aa:03:e6:5b:e2:e6:57:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:02:F5:5F:F7:AD:27:C9:3B:90:93:D6:17:42:9D:99:3E:A9:BE:8F
            X509v3 Authority Key Identifier:
                keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:4b:61:b7:f4:db:ce:c9:4c:3b:41:01:f5:4a:2e:09:65:04:
         4e:0b:f8:62:05:71:b8:a7:88:f5:ca:3d:54:dd:84:6e:55:17:
         32:95:c5:c8:19:03:fe:b8:05:73:91:e1:58:fc:44:41:db:50:
         6a:8f:54:82:a5:72:9e:95:d6:77:ad:5f:d2:04:32:da:75:ae:
         70:4e:df:a5:ab:ef:10:c6:61:fe:e8:cf:4e:6c:0b:fd:1e:70:
         a8:3b:85:24:f0:01:d4:9f:c4:37:96:8b:f7:62:9d:ad:d6:ee:
         f2:b0:a8:03:95:03:e1:a1:72:8f:80:e1:35:c3:7c:f8:68:45:
         de:74:14:35:21:ca:60:0d:fc:b3:76:24:80:08:67:ef:e9:78:
         72:83:20:2b:18:29:50:df:da:ca:50:38:19:5e:b4:62:61:3e:
         8d:76:3c:6a:b7:3b:92:b1:ae:3b:d2:28:9f:15:b3:01:ca:5c:
         a6:5d:f7:a6:4a:71:e5:17:9a:d7:ba:27:e7:f8:18:79:b2:6f:
         95:83:86:b6:45:38:b9:1b:89:dc:03:28:87:d9:1e:ac:a2:14:
         78:e3:2c:a4:d9:ad:13:97:c5:bc:e8:4b:b7:a1:09:e5:5f:4a:
         e1:5c:82:cf:2e:96:5b:54:1a:06:5f:35:51:6a:1e:f2:1e:f6:
         09:11:ca:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:12 2026 by rpki-client