Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
File:                     4vX689OhJusn2TfR3mjgcumaJvI.mft (raw, json)
Hash identifier:          Tr17aAMadSwsJ/MfF7HqXNrfq2IxKv7uThYAwO9mDYk=
Subject key identifier:   9B:10:08:CC:0C:0E:D4:85:66:0B:B3:BC:7F:52:D8:3E:5D:61:7B:C7
Authority key identifier: E2:F5:FA:F3:D3:A1:26:EB:27:D9:37:D1:DE:68:E0:72:E9:9A:26:F2
Certificate issuer:       /CN=e2f5faf3d3a126eb27d937d1de68e072e99a26f2
Certificate serial:       01A17DE0F4BF5F0490AF2C4B49EAA8A0FBB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4vX689OhJusn2TfR3mjgcumaJvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
Manifest number:          013F
Signing time:             Tue 27 Oct 2026 15:00:57 +0000
Manifest this update:     Tue 27 Oct 2026 15:00:57 +0000
Manifest next update:     Wed 28 Oct 2026 15:00:57 +0000
Files and hashes:         1: 4vX689OhJusn2TfR3mjgcumaJvI.crl (hash: pUapK5QslH9lV2tfUK8+zygyjB2iNs8aYKUZIpQU2aU=)
                          2: JzQE4CrMRXQKVLS9q97TLQOr_Nc.roa (hash: E1WJtSiavBJi5tmLgKdSSq+WxQ67uQ350SN9jNFg9xI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4vX689OhJusn2TfR3mjgcumaJvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:e0:f4:bf:5f:04:90:af:2c:4b:49:ea:a8:a0:fb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2f5faf3d3a126eb27d937d1de68e072e99a26f2
        Validity
            Not Before: Oct 27 15:00:57 2026 GMT
            Not After : Oct 28 15:00:57 2026 GMT
        Subject: CN=9b1008cc0c0ed485660bb3bc7f52d83e5d617bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:99:bc:1b:75:66:9e:d0:af:66:0e:46:9d:53:
                    ba:71:02:3b:05:a9:18:27:6e:6b:a8:0b:59:90:93:
                    3b:2a:26:31:1b:13:d5:5f:a1:47:3a:db:00:bc:f5:
                    ca:55:79:c4:7f:b1:82:49:37:1d:11:ff:1a:6d:56:
                    82:51:fd:9a:51:85:b5:cc:96:77:31:7d:3c:4a:1a:
                    37:12:cb:92:bc:9e:aa:70:23:47:d0:35:a0:6a:35:
                    20:6d:72:99:df:4c:ab:22:9b:a4:87:04:3d:b4:c8:
                    54:70:f7:a0:1e:82:b3:39:d1:c8:55:a5:a5:22:40:
                    a5:ce:91:25:5a:99:65:de:0d:ed:1a:aa:7a:16:ab:
                    00:15:a3:e8:56:7f:bc:ed:6c:39:59:42:d8:f4:42:
                    e8:a7:37:ac:54:e1:35:02:18:ec:76:b1:d4:dc:ad:
                    47:de:4f:18:74:c7:03:db:11:ec:0e:fa:ce:29:27:
                    c4:15:12:e8:91:5d:3e:3f:d9:85:d1:6a:2e:8b:35:
                    07:01:a9:09:df:39:b7:7b:5f:c5:a4:08:9b:49:5d:
                    bb:0b:86:47:9f:af:69:70:5d:e2:1a:d5:7e:dd:09:
                    07:0f:70:dc:c1:27:cd:7e:17:db:3b:85:01:17:8a:
                    2a:e7:82:7d:52:eb:37:fb:db:94:b1:68:f0:63:20:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:10:08:CC:0C:0E:D4:85:66:0B:B3:BC:7F:52:D8:3E:5D:61:7B:C7
            X509v3 Authority Key Identifier:
                keyid:E2:F5:FA:F3:D3:A1:26:EB:27:D9:37:D1:DE:68:E0:72:E9:9A:26:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4vX689OhJusn2TfR3mjgcumaJvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:8b:33:af:2a:a0:77:06:ff:af:a0:25:65:72:f8:3a:88:
         03:92:cd:ea:4a:50:e4:6f:bf:bd:19:66:b0:ff:94:f4:ae:cc:
         5b:7a:fa:1a:f0:f9:98:40:4d:32:41:89:dc:a4:47:fd:19:3b:
         e3:2f:cc:4f:77:56:a9:02:b6:8a:ba:ac:9f:8b:51:d5:32:d8:
         38:b5:d2:d8:50:43:41:71:c0:c2:05:2c:d9:fc:52:63:e2:0b:
         9d:ec:fb:6e:a7:10:1b:ea:1d:12:00:8d:37:7e:ca:ba:84:6b:
         a9:c9:df:91:46:48:41:09:6b:7e:ad:21:59:18:f9:c0:d4:77:
         5b:68:7b:e5:e6:4d:28:ab:25:91:e3:40:37:a7:da:f7:42:d0:
         be:b2:d0:72:eb:21:a0:b8:30:a5:78:d0:86:40:5f:c2:8d:ce:
         b1:de:18:29:a4:72:10:aa:f4:5c:29:29:8d:81:6d:3f:03:b6:
         30:52:09:25:7d:14:20:c3:1f:41:bd:57:cd:27:5c:64:b0:0d:
         51:19:45:29:f6:d4:94:97:1d:8a:81:ba:da:7c:70:52:2f:67:
         32:b3:27:32:d0:c1:60:1b:b9:1e:73:b6:cf:9c:12:a9:1c:77:
         e1:49:01:dd:d2:af:93:66:b4:67:b7:31:cf:c5:ec:7f:4b:9a:
         55:f8:ad:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:07 2026 by rpki-client