Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
File:                     4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft (raw, json)
Hash identifier:          3o+kSwm/uSf7yqEKJ+cqMyWkBEBQeTmz8tgjuE0SGPc=
Subject key identifier:   3F:54:AD:55:AE:89:68:13:F8:96:97:BA:75:E4:D4:5A:EB:44:3C:65
Authority key identifier: E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
Certificate issuer:       /CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Certificate serial:       01A040F2C2AAC3D549D5B0B47474E46C62A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
Manifest number:          05BE
Signing time:             Thu 27 Aug 2026 02:00:46 +0000
Manifest this update:     Thu 27 Aug 2026 02:00:46 +0000
Manifest next update:     Fri 28 Aug 2026 02:00:46 +0000
Files and hashes:         1: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl (hash: dVhyv3LvifrS4uQsZo/tK8R3KDRPTUKEBmUZncxhR6A=)
                          2: FqEPqAF1w4Xbi11RnoaKy9R4Z40.roa (hash: GRwxJaIJLS4eVDlQIIx4t+X6+buzHRZw5GpMOZnwve4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:f2:c2:aa:c3:d5:49:d5:b0:b4:74:74:e4:6c:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e312f441382d5ba1d80df459bd46c0a31590e72f
        Validity
            Not Before: Aug 27 02:00:46 2026 GMT
            Not After : Aug 28 02:00:46 2026 GMT
        Subject: CN=3f54ad55ae896813f89697ba75e4d45aeb443c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bd:da:41:ad:6c:be:13:df:42:5d:3d:f4:aa:
                    a7:47:1c:f7:5c:cb:ed:50:f4:ff:9c:d1:3a:07:1d:
                    87:84:55:f9:84:35:71:96:0e:0f:4c:44:66:78:c4:
                    ae:fe:7f:39:b9:36:17:de:fe:eb:9b:f6:2e:3f:ae:
                    92:18:f2:90:1c:0e:11:2a:fe:fa:21:16:bb:f6:d9:
                    c3:2c:f3:2f:a8:c1:82:b8:c6:9e:f9:f3:a0:0a:ad:
                    79:e4:bd:f8:39:97:88:39:43:20:5a:3f:58:3d:c5:
                    60:6f:b6:c4:c3:82:cd:77:3a:83:97:91:a1:a8:30:
                    f2:54:3f:a5:d9:8a:9f:ed:be:46:4c:34:5e:ef:37:
                    97:5b:09:bc:fb:af:c3:f1:f0:1e:ea:d2:94:e1:99:
                    c9:c6:66:92:b5:1f:19:81:e0:df:38:e6:6b:df:b7:
                    fc:d4:5b:a6:32:2e:95:77:3f:7c:f2:3a:0d:5f:b1:
                    d9:39:3a:b3:31:38:4a:ef:78:f5:8e:b2:29:ff:bd:
                    53:63:f4:f0:76:12:a3:ed:3f:5c:8a:e5:d2:7b:7b:
                    56:c8:4f:da:dc:be:22:29:9e:d6:c8:df:b9:f9:27:
                    0d:25:62:d9:18:09:06:c1:db:8b:f2:5d:89:59:05:
                    33:b8:3e:96:35:1a:7f:ee:ce:1b:c1:de:e0:25:c2:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:54:AD:55:AE:89:68:13:F8:96:97:BA:75:E4:D4:5A:EB:44:3C:65
            X509v3 Authority Key Identifier:
                keyid:E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:42:95:ff:2b:8b:57:cc:4a:bb:b6:6b:e2:82:25:c0:9f:8f:
         0d:da:95:10:c1:7c:d6:cb:3b:5c:3a:4e:3b:d9:22:f8:43:34:
         80:69:33:d5:6e:ea:5f:dc:0a:bc:80:01:24:65:c4:f4:76:e0:
         88:f4:9e:e1:dc:f9:6f:23:70:bc:2a:4f:df:0c:aa:39:50:ad:
         e4:16:3e:c5:66:90:86:a7:7c:9c:96:e7:d9:06:f3:35:31:02:
         75:f1:21:e5:f1:ae:b8:37:cb:9d:29:03:26:b1:53:a0:5e:ca:
         fd:11:e1:eb:46:c1:44:88:53:3b:a0:91:eb:82:2c:5c:9a:2b:
         b5:52:34:93:86:09:09:67:b3:9e:6b:a5:b5:e4:a8:0a:36:8c:
         98:78:3f:fd:ee:23:67:02:34:05:b3:32:fe:88:fb:e7:ec:72:
         72:87:5d:c1:46:c9:fd:d5:35:7c:7a:72:ed:a8:fc:2e:72:3e:
         d1:0c:73:b4:66:c9:0c:3d:e6:96:77:80:2c:09:1e:2c:5b:76:
         8d:d7:4f:9c:c4:43:ec:05:68:12:33:df:37:34:41:12:8c:94:
         ef:e1:49:c4:ab:a4:01:bb:fb:4a:38:08:2e:62:b2:ef:e2:2e:
         0f:e4:d4:7f:ae:00:29:7a:e9:bf:fb:2b:85:eb:ce:d2:49:7d:
         95:f7:b9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:59 2026 by rpki-client