Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File:                     L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier:          ZvqDGsmhB2Q0ndX0WQsBWaxQTe+9FhGBjrK53WcvVPY=
Subject key identifier:   14:AB:CD:D6:08:B4:12:9E:3C:58:50:C9:F0:44:E9:9D:92:E2:71:22
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer:       /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial:       01A1660FBE991D963BD23311914709BED692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number:          1B08
Signing time:             Fri 23 Oct 2026 00:01:10 +0000
Manifest this update:     Fri 23 Oct 2026 00:01:10 +0000
Manifest next update:     Sat 24 Oct 2026 00:01:10 +0000
Files and hashes:         1: 1trGtYwQIfgKe-NMvZ_3L-OEiwI.asa (hash: cyg4byY89k9M+dKyRxrNqSKtUSke7l4RnAZku93H+zw=)
                          2: 2BKAXtln8KzReY8_THzqrmmiyM4.asa (hash: Sc3aPkbPjVsQ6j/oD90t2utIy322EBG1ZVdIGT6gJ+c=)
                          3: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: n+tu5Von/m17oSRNLccPb2VAmEhjAVmkHefKyDDqfJA=)
                          4: N4cB8WWtysbWqDi87bGAQQ2rt4E.roa (hash: S3j7rc4gR5B77q9DRMpITCq3BO39bGjWQciU5Aajs0Y=)
                          5: vgZTkNH9EhrtEt7Ls7ZQVtiF_EA.roa (hash: 2+LYx0b1ohhezJYmEr08X78XCAC8VVPktKsrgYtWVpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:66:0f:be:99:1d:96:3b:d2:33:11:91:47:09:be:d6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
        Validity
            Not Before: Oct 23 00:01:10 2026 GMT
            Not After : Oct 24 00:01:10 2026 GMT
        Subject: CN=14abcdd608b4129e3c5850c9f044e99d92e27122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:47:d2:4c:01:21:0f:7e:97:6b:4d:f4:9e:
                    fb:13:d8:27:46:44:ef:40:98:f6:bf:f1:05:f7:f2:
                    e5:1f:b1:36:1e:d7:47:bb:47:e9:86:08:c0:b9:b9:
                    93:11:43:be:48:58:70:d1:e0:93:57:56:dc:8a:c5:
                    47:65:88:23:7f:b3:6d:3e:9b:0c:79:a8:2f:34:5d:
                    48:3c:20:a6:3a:5b:dc:26:00:ff:f7:f9:4e:9c:cf:
                    d8:2b:d5:65:25:24:00:6f:e1:df:00:33:f1:9c:07:
                    a6:47:f9:0b:a1:ae:30:92:23:64:f7:e9:03:4b:d0:
                    71:e1:61:37:d7:6a:e8:5d:92:bd:6b:24:69:27:06:
                    6a:77:91:4f:07:3c:aa:ab:c3:4b:19:09:9d:63:7d:
                    f9:ae:cb:ec:f2:3b:04:17:9f:bd:f6:e1:73:c3:03:
                    dd:29:ec:f5:c8:ce:fa:20:d2:72:5f:a4:07:3b:ac:
                    4a:0c:7c:5b:a3:37:6b:a4:ca:39:1a:ee:17:95:b3:
                    57:62:22:69:1e:69:c1:34:5d:08:35:b2:66:26:6e:
                    3a:51:8a:9b:43:3b:14:17:28:ec:4d:04:21:73:82:
                    d8:bd:af:71:47:f0:ac:24:ed:70:27:a4:29:1d:fe:
                    06:f7:24:a5:81:59:85:51:d2:d0:58:40:79:94:96:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AB:CD:D6:08:B4:12:9E:3C:58:50:C9:F0:44:E9:9D:92:E2:71:22
            X509v3 Authority Key Identifier:
                keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:10:90:53:2a:21:7b:06:09:f6:a1:8c:08:0c:3b:1d:39:95:
         b9:10:46:f7:41:a8:a1:f6:e7:be:42:ee:e3:b1:b9:f4:b4:08:
         13:8b:06:26:2f:f4:7d:d0:38:b9:aa:d2:28:fd:10:73:88:ce:
         e2:df:f2:b0:91:c8:d4:83:cb:f5:a0:c1:25:cb:05:51:20:3b:
         5e:88:e3:63:34:c3:87:0c:6f:95:b8:a1:b1:12:99:63:7f:2d:
         10:41:ac:41:11:dc:4b:c2:5c:ee:47:0e:d7:27:40:a4:c4:8e:
         9f:ed:d7:3e:e1:43:f9:49:b7:2d:ba:d1:b7:6e:78:87:32:ce:
         63:24:f3:cc:9f:06:77:7c:88:dd:43:13:2d:39:51:b7:ab:db:
         a7:fb:54:8e:ff:bf:64:66:52:b8:c2:9c:5b:86:c7:c6:f3:48:
         a9:2e:12:92:e2:e2:4a:92:47:93:78:22:38:4b:6e:5e:55:4d:
         42:4f:a4:5d:ff:e0:04:33:2c:86:4c:93:e2:53:69:24:6f:e3:
         47:fa:f4:a0:4a:ba:21:b1:b4:b6:4d:50:43:c5:ee:c6:ec:35:
         14:6f:f8:a8:84:d7:1a:bc:70:10:96:8e:68:d2:50:05:76:cc:
         f9:80:5b:bc:6e:81:ec:d1:85:36:5c:9e:56:b4:c3:cf:23:9e:
         84:9e:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:18:01 2026 by rpki-client