Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
File:                     4te3649H5Sd5Ev8FjP7X2Jn8abk.mft (raw, json)
Hash identifier:          xKwNCGj5a/++ds/Rk8Eam25AM1vs2h5wkWrEe6jbLuQ=
Subject key identifier:   30:75:D0:A4:00:FC:9D:E3:ED:64:E7:E0:D2:64:53:20:C0:20:77:81
Authority key identifier: E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
Certificate issuer:       /CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Certificate serial:       01A13E26B838DDD8610C848C1FAF8962DEE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
Manifest number:          1A34
Signing time:             Thu 15 Oct 2026 06:01:27 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:27 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:27 +0000
Files and hashes:         1: 4te3649H5Sd5Ev8FjP7X2Jn8abk.crl (hash: KYNFIn/+oi9ml4twCgaGk3KgB4vUSJrnzNU37u+aSA8=)
                          2: yPdEnBlETthfb3n2w6_5p1naims.roa (hash: FMus24cOQ5H8kqoUzdVY1kxUQ7CnaxtzdvTHW/XwsqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:b8:38:dd:d8:61:0c:84:8c:1f:af:89:62:de:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
        Validity
            Not Before: Oct 15 06:01:27 2026 GMT
            Not After : Oct 16 06:01:27 2026 GMT
        Subject: CN=3075d0a400fc9de3ed64e7e0d2645320c0207781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:40:5c:6f:e5:7d:12:a5:3e:48:b8:50:58:8f:
                    b5:22:00:49:78:22:d7:a3:62:c2:4d:4a:5d:22:a6:
                    f8:a4:42:a1:2f:74:e2:ab:de:12:fd:7b:5a:73:d8:
                    58:f9:15:9b:99:3d:c7:83:b9:d4:f2:51:1f:46:d3:
                    53:14:ec:51:fd:60:6b:fa:76:00:8f:13:64:c9:66:
                    9b:3e:a8:18:27:43:9f:d8:ea:03:c6:b1:a0:8f:79:
                    c0:47:08:b4:ae:b9:04:cc:95:5a:57:1c:35:87:0d:
                    79:14:c7:17:97:02:fc:b9:70:c2:9d:08:73:dd:a4:
                    ee:51:71:d2:94:f2:ff:25:6c:45:96:4d:10:00:12:
                    be:4b:0c:56:58:75:2a:44:67:64:87:0b:a1:60:8a:
                    46:47:1b:27:db:49:7c:0d:78:e4:ff:bc:c3:62:af:
                    76:83:f6:e8:9f:5c:80:e8:3a:35:5d:12:15:0d:6d:
                    34:62:a9:e1:35:9c:b3:58:e5:3b:1a:c6:cc:45:7b:
                    c4:9c:53:db:33:52:8a:42:33:20:11:fa:ae:ad:5a:
                    e4:4f:06:4f:89:5b:98:66:fd:6e:e9:2a:5e:40:87:
                    c9:1b:34:6b:31:ac:28:5c:c3:6d:cc:fe:78:47:f8:
                    f3:82:88:71:27:ff:df:21:e0:26:6a:de:c8:0d:92:
                    a6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:75:D0:A4:00:FC:9D:E3:ED:64:E7:E0:D2:64:53:20:C0:20:77:81
            X509v3 Authority Key Identifier:
                keyid:E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:41:95:ae:8e:91:73:c4:46:fa:d3:cb:d8:35:99:33:34:39:
         ec:d4:e5:b4:7c:d8:18:bf:7a:5e:b3:a5:ff:0e:65:a5:20:21:
         38:8a:57:d2:e2:36:26:f7:7f:cc:bf:8e:ec:e9:22:44:89:59:
         5b:5a:80:3a:f4:0d:0b:7b:78:e6:26:d0:ca:fd:fb:be:b1:eb:
         04:5f:3f:cf:97:f7:80:74:83:ce:c3:aa:56:99:1c:15:5a:20:
         c6:b8:f5:eb:9c:17:2c:94:cb:47:96:52:12:a9:f7:af:85:b2:
         7d:e8:84:6c:76:3c:8d:55:e8:c3:01:49:b3:b3:8d:ee:6e:d7:
         2b:5e:ac:ae:6f:33:07:b4:22:b1:65:40:3b:e1:b6:50:73:b6:
         f0:f7:a6:6d:26:33:be:87:01:0e:48:2a:f5:17:38:bd:2f:22:
         dc:75:81:ce:96:6e:fd:4e:01:71:ee:66:f8:46:01:59:95:54:
         73:8c:e2:92:19:64:bb:cf:91:d3:65:d5:f7:7c:17:27:91:0f:
         0f:58:f5:1d:ab:fe:4d:a9:3f:c1:c0:d2:b3:94:9b:20:4e:6c:
         82:61:6f:77:c9:3e:fa:50:2c:a1:fc:52:0a:ed:b4:97:d2:b6:
         fc:df:b7:83:d4:ec:cf:f1:84:5e:12:6b:36:a1:b8:cd:23:21:
         78:40:42:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:32 2026 by rpki-client