Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
File:                     gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft (raw, json)
Hash identifier:          wZuxr70xajgNbVStA1PDzFYekT37st0cFDDx53W8RG8=
Subject key identifier:   8A:CF:4F:42:82:CE:CF:CD:EA:9D:A1:C6:9D:A3:E5:22:8E:AD:32:07
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Certificate issuer:       /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial:       01A17D73CC4CA7394B523DB11520E71D4580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
Manifest number:          1AD2
Signing time:             Tue 27 Oct 2026 13:01:43 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:43 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:43 +0000
Files and hashes:         1: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl (hash: LoocIBXimKIEPUyRBDs6MucSxhsQm+QZFXPwzlmb9t4=)
                          2: hI6blJ5kjyHb7biy4lfSirS37zs.roa (hash: mqWBp2AFnHxwb8q7BdrL6WW9+Na4SaPzQGePE+5iXFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:cc:4c:a7:39:4b:52:3d:b1:15:20:e7:1d:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
        Validity
            Not Before: Oct 27 13:01:43 2026 GMT
            Not After : Oct 28 13:01:43 2026 GMT
        Subject: CN=8acf4f4282cecfcdea9da1c69da3e5228ead3207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:4f:56:68:b1:84:aa:1e:48:d4:b3:5d:4d:
                    48:64:90:a0:13:69:34:ea:09:f5:bf:a2:01:59:0d:
                    4b:91:18:a9:df:c0:ce:10:69:69:cf:d4:0b:75:6a:
                    78:bd:91:56:41:d3:44:eb:08:0b:ad:ff:06:0f:7d:
                    e6:7e:4a:fc:eb:34:6f:80:fc:c5:f7:9b:1d:b4:a4:
                    da:15:05:d5:04:56:0c:22:1d:38:b7:f6:bf:a3:52:
                    ec:56:64:c4:56:8e:af:b8:1b:cb:68:74:15:b1:e5:
                    1d:f8:40:6b:e0:20:a9:35:13:5f:da:06:54:5a:26:
                    e1:e5:37:3e:5b:b0:e3:cc:2e:b8:b0:14:2a:a7:fd:
                    e2:3b:8c:3e:f1:f2:fa:f9:16:84:f0:e0:10:f0:13:
                    28:24:2a:17:4d:dd:07:e6:3e:79:47:c9:c5:05:cc:
                    a5:c7:f5:ca:3b:e9:9a:f5:a8:b5:b2:66:94:a2:d3:
                    84:2d:b7:f3:bb:dc:b9:97:ef:3f:e1:92:af:9c:c4:
                    63:54:62:53:43:56:86:ca:95:11:8b:d1:48:00:ac:
                    9e:24:15:cd:27:b9:40:80:00:65:ff:c9:f8:dc:99:
                    41:f8:56:ee:32:cd:2b:98:54:ad:1b:99:50:4a:c3:
                    e5:d5:37:8c:29:89:37:9d:dc:a9:f2:c5:c6:3c:98:
                    47:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CF:4F:42:82:CE:CF:CD:EA:9D:A1:C6:9D:A3:E5:22:8E:AD:32:07
            X509v3 Authority Key Identifier:
                keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:44:3a:28:8a:20:2d:8d:06:e4:c1:98:f3:fd:01:fd:29:4b:
         bb:b3:16:3b:0d:91:55:db:46:bb:60:2c:d1:2e:ae:8e:29:6a:
         96:47:f6:47:d1:05:06:fb:a1:bd:0b:64:92:9d:3c:09:93:5f:
         ef:87:1d:47:fd:08:19:fc:ca:da:c4:61:e5:6f:49:d7:39:fb:
         3e:f3:56:a4:59:c3:4c:c8:f7:99:af:e7:a0:0b:44:99:b9:ce:
         d5:16:eb:72:67:2b:b3:db:d2:f1:db:d1:9d:fb:cc:e4:ac:db:
         1d:1f:62:48:65:e1:92:d5:53:0b:fd:77:ec:62:62:35:42:9f:
         d1:54:d7:65:9a:9a:cd:88:e3:45:82:e9:72:c9:41:1d:29:05:
         36:32:23:1d:47:a9:17:51:61:77:6b:b4:e9:93:ed:6b:20:ce:
         2e:ad:9d:52:14:8d:71:61:f2:2c:be:7f:38:75:81:72:b0:e7:
         64:74:47:d8:ca:fa:a7:66:d1:a7:54:02:ca:32:48:95:a9:e8:
         8c:d2:6b:2b:b8:9e:1c:93:31:2a:88:de:a4:3e:9b:32:f5:3f:
         56:6c:06:6e:4d:ad:18:4e:cc:60:66:5c:2d:46:c1:84:23:44:
         ab:b4:07:05:7d:98:c4:a8:d5:4a:f8:47:50:8c:4f:08:d4:ff:
         c9:33:00:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:43:27 2026 by rpki-client