Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
File:                     4YVsMIKrL8jdGzWaezmRNoU4tNA.mft (raw, json)
Hash identifier:          H+/ATqmS0CpszUq8OOEhdEJ/Gffu5bEHnf9vKhUwOO4=
Subject key identifier:   1C:B4:BA:E3:D5:E6:D3:B4:14:B7:8B:86:0B:15:28:2D:D3:BD:CF:9B
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Certificate issuer:       /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial:       01A162A115AFFB529CFC59CBA1910F18BCE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
Manifest number:          0F4F
Signing time:             Thu 22 Oct 2026 08:01:26 +0000
Manifest this update:     Thu 22 Oct 2026 08:01:26 +0000
Manifest next update:     Fri 23 Oct 2026 08:01:26 +0000
Files and hashes:         1: 4YVsMIKrL8jdGzWaezmRNoU4tNA.crl (hash: 7dRfnOo/OYFy97e1Mtcn2LnpuIpvjNFpNbb8WJlmn/c=)
                          2: 5t7LxZOnJ1oA36BSSTw5AEmUq20.roa (hash: VZXGO3QetxGEp6QAJJaHETqqkuTNwYe6IR9YcZcrEN8=)
                          3: DUFOdI0MJLd16wevd6DgPdxwIzU.roa (hash: nXtSWS+urCvGLUbnwlJ8n4pMdDI/4+YgmNdoFlD/saY=)
                          4: M57ZzgIoqmnX8oIrPnoBTIoTA_k.roa (hash: tqmWlBAseAGNPKJzRW1RJLsoEl9qzSRJUIXNz+O9tHk=)
                          5: QJhOBBoD1YkchNAMDZQWMaJK0oM.roa (hash: mVJR0mI/cQZVEGpyMlyefAYNQixaiWUH4CEW0sMy7oM=)
                          6: qp1FBJGBC3T0wFz_sf0nu2OPHrc.roa (hash: XU0Zg/9I708k3OyT919uPrErmEddz4YrPPmgHTVL7Lw=)
                          7: uS3aCBTCgmOFRR-e5Oa-GF9u58w.roa (hash: VFZbde4BpJH7vJHQREQUv2SxzTx2uzk4zvtDcg8reBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:62:a1:15:af:fb:52:9c:fc:59:cb:a1:91:0f:18:bc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
        Validity
            Not Before: Oct 22 08:01:26 2026 GMT
            Not After : Oct 23 08:01:26 2026 GMT
        Subject: CN=1cb4bae3d5e6d3b414b78b860b15282dd3bdcf9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:5d:a5:1b:ed:e9:d6:2a:01:09:7c:14:b9:
                    25:d7:8d:f2:71:db:27:6c:88:c3:d1:65:a2:ad:1b:
                    99:5f:ea:80:64:0c:dd:1e:50:23:b4:f0:37:98:99:
                    78:73:2b:50:b4:10:34:64:7d:88:70:d9:69:e3:22:
                    48:a8:3e:7f:50:86:d5:3d:3b:6e:39:a0:f4:42:85:
                    3b:2a:cc:97:31:dd:a0:6e:5c:6e:af:10:8a:67:e4:
                    b2:00:6b:22:2e:ce:6d:38:fc:d0:05:5a:b9:a0:02:
                    0e:5c:94:0b:f2:44:18:07:05:13:89:11:50:5f:8d:
                    2d:7d:ea:a8:2a:40:b0:ed:04:d9:51:d0:1c:70:8e:
                    50:5e:95:bf:fb:2b:f7:ee:43:a6:b8:0c:80:c6:89:
                    f5:af:eb:4e:5f:9a:c8:05:57:f9:3c:2d:c8:e2:56:
                    69:12:1e:1a:df:38:ee:24:d6:89:99:97:2b:1b:16:
                    41:66:1c:b6:8b:3c:07:47:8d:fb:f9:44:63:fc:92:
                    d1:5b:a5:fc:e2:fb:b8:a7:58:c9:42:2a:f4:42:b6:
                    8b:b9:35:ef:99:6d:33:70:73:67:51:32:5b:a6:a9:
                    7d:93:66:dc:67:78:38:fc:26:92:7d:8d:7a:5b:be:
                    cc:f2:2f:b3:28:b5:81:e2:4b:7b:61:7e:7d:50:d4:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B4:BA:E3:D5:E6:D3:B4:14:B7:8B:86:0B:15:28:2D:D3:BD:CF:9B
            X509v3 Authority Key Identifier:
                keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1e:89:73:6e:97:28:ca:29:01:c4:81:be:91:e6:ae:0b:df:
         cd:53:24:c5:1a:ba:af:a8:de:66:9f:71:bd:18:ac:73:09:e2:
         a9:ea:04:b8:1d:51:73:c7:b0:cf:ff:f9:06:79:c8:51:bf:c0:
         27:3d:0a:d9:75:a1:8e:9e:cd:95:dd:57:e0:b3:9a:a5:de:8f:
         12:f8:f9:37:36:4f:65:a1:6b:44:b4:4f:de:75:ac:b7:94:d5:
         57:23:bf:1b:10:17:52:b3:13:fc:42:c1:a1:06:c8:02:02:2f:
         bc:a3:f2:6e:b1:2a:b5:ab:7d:a5:78:43:dc:33:cf:13:61:a3:
         c6:70:ea:af:24:60:71:08:39:23:96:03:59:50:71:24:d0:e3:
         20:78:d0:59:6e:0d:6e:a8:11:be:c2:7e:2b:d7:77:19:11:28:
         51:01:75:e8:ee:15:79:0b:7e:b3:ac:4c:53:48:d9:11:3b:48:
         60:a5:fd:43:91:fb:a3:22:29:bd:4b:ac:94:b1:0e:8e:8d:5b:
         97:5d:dc:93:62:e2:a9:54:ee:e5:85:85:ef:59:54:c8:68:a2:
         1f:43:e3:8e:bd:66:1a:9d:58:e5:17:2c:63:01:17:fd:0d:69:
         2f:4e:30:c3:64:0f:17:fc:b0:94:91:5e:06:3c:34:34:44:85:
         e0:25:88:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:29:31 2026 by rpki-client