Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
File:                     4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json)
Hash identifier:          4qHmivCOuC1yyrk4s7JTGp6+oouulToye7EwNEDiUpQ=
Subject key identifier:   83:0A:90:18:7C:46:E5:4F:1F:3E:6F:D1:33:67:AD:61:B2:58:E3:BE
Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
Certificate issuer:       /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Certificate serial:       01A13DB8C397A22BD6D8A19751337C71E95A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
Manifest number:          13A7
Signing time:             Thu 15 Oct 2026 04:01:20 +0000
Manifest this update:     Thu 15 Oct 2026 04:01:20 +0000
Manifest next update:     Fri 16 Oct 2026 04:01:20 +0000
Files and hashes:         1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: uwSKIoFk+V/3CxDRV3fibZAkgmP9la/6Jrk9LD/AFms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:c3:97:a2:2b:d6:d8:a1:97:51:33:7c:71:e9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
        Validity
            Not Before: Oct 15 04:01:20 2026 GMT
            Not After : Oct 16 04:01:20 2026 GMT
        Subject: CN=830a90187c46e54f1f3e6fd13367ad61b258e3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:52:3a:de:93:76:b2:a2:6c:ea:c5:3b:c7:
                    31:f5:25:32:e5:b8:75:a6:f9:08:f4:f5:52:ec:85:
                    2e:e5:db:e4:d0:95:f1:58:49:e8:41:63:27:be:8c:
                    10:d3:83:df:52:30:fb:7a:7b:ce:8a:2a:5c:46:15:
                    5b:d0:45:3d:45:9f:d3:aa:41:7a:88:0d:1c:b3:75:
                    a0:1b:ce:e6:c6:4a:d1:14:9a:85:94:7f:e2:1a:70:
                    09:e8:89:6d:16:db:83:e5:16:e4:2d:b7:d6:b3:a2:
                    da:51:99:81:fb:a4:53:e7:ba:70:82:2e:5d:c9:80:
                    fc:e2:05:bd:ca:e0:fe:e8:0e:eb:16:7f:52:63:24:
                    10:50:26:2f:2f:10:fa:e4:40:18:54:d5:ba:64:1a:
                    e3:24:fe:20:1c:99:f9:d4:88:7b:38:41:65:e4:02:
                    66:1d:61:a6:1b:d8:a5:f7:28:96:98:8a:04:93:0c:
                    f6:4e:5a:52:5b:ff:fa:60:63:1d:e9:ee:21:6d:86:
                    e4:14:e8:12:07:8b:e2:94:84:e3:4b:3f:27:5d:39:
                    ef:09:68:c2:92:44:4a:02:1d:17:1d:aa:89:63:b7:
                    7c:db:5b:9a:ad:97:ee:b4:f4:48:69:19:ef:3b:dd:
                    7f:23:40:eb:66:47:8a:10:43:57:03:f7:23:45:f0:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0A:90:18:7C:46:E5:4F:1F:3E:6F:D1:33:67:AD:61:B2:58:E3:BE
            X509v3 Authority Key Identifier:
                keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9b:d6:a6:03:de:53:30:7c:0e:13:41:f1:b1:f2:31:a3:33:
         2c:ff:3d:fa:7b:6c:58:c1:47:b4:e6:94:f7:20:1b:97:91:e7:
         12:9c:57:c7:58:0b:43:c2:5e:87:ae:ee:a8:63:d6:9c:4c:27:
         49:b8:dc:69:d0:26:fc:87:52:ab:45:38:f7:50:c5:0b:34:be:
         40:63:ba:ab:98:d6:f1:34:ab:d9:c3:14:8c:11:02:98:ea:76:
         6b:26:d1:c6:89:9d:e4:31:28:cc:2d:33:29:7a:47:85:79:4f:
         52:fc:b6:dc:a5:8c:f2:9e:a5:1d:20:9f:f8:4e:c0:6b:70:54:
         0a:26:80:c7:35:a5:e5:8a:f3:08:84:cd:45:a5:68:0e:5c:6e:
         cc:1b:69:f2:4a:19:c5:ea:ea:a3:91:a0:0e:8b:2f:35:b5:3a:
         57:13:72:d2:d1:3c:fa:44:c9:56:55:71:77:cb:d3:be:44:b7:
         f6:4d:50:ae:d3:aa:4a:5b:6b:61:2a:c1:48:d2:f0:39:c9:48:
         39:4b:65:42:95:59:a8:fb:b1:ac:bb:8d:b2:ca:67:15:09:aa:
         a6:4c:2a:ad:89:2a:94:01:35:12:e7:4b:76:88:0e:98:6d:1b:
         4a:0f:4a:4a:c8:a9:41:4d:e5:ed:04:de:ec:bc:e1:f3:14:bb:
         49:87:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:21:13 2026 by rpki-client