Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
File:                     4WgoY-mYep64ZougfJbJmhst_mk.mft (raw, json)
Hash identifier:          OC8KlY7ds54jbB+of+EKdtP91f75sZcq9LCr8iaGo14=
Subject key identifier:   3D:66:0A:B5:C3:A7:44:66:F2:3D:03:B1:CB:09:E2:CE:51:59:30:B6
Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
Certificate issuer:       /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Certificate serial:       01A159D4373A8B16CACF031329FBF5F76B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
Manifest number:          0425
Signing time:             Tue 20 Oct 2026 15:00:42 +0000
Manifest this update:     Tue 20 Oct 2026 15:00:42 +0000
Manifest next update:     Wed 21 Oct 2026 15:00:42 +0000
Files and hashes:         1: 4WgoY-mYep64ZougfJbJmhst_mk.crl (hash: xO82icVUmza7Y8SWeQud/GxXnPredxd1HRWCJIUOVLk=)
                          2: Ac2bylIr7B437ec52nmYNkxcBLU.roa (hash: NVzCCl4oqQBqLlnzk4NHLtjdOZIYGTwFiCs0i6US8YQ=)
                          3: VurYQADeNAyQZfVqHtE93Y07CDc.roa (hash: zo7Q7XfiMqpPBNsTQ58E9qm/cSZ4esMUjH52zOEyenA=)
                          4: ey-McRgW79AZU_fzpE-27yI2jAk.roa (hash: pO+sInd8rxx8H+MS6Ps1T/UlLYjOIIjg8OASDn/RsGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:59:d4:37:3a:8b:16:ca:cf:03:13:29:fb:f5:f7:6b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
        Validity
            Not Before: Oct 20 15:00:42 2026 GMT
            Not After : Oct 21 15:00:42 2026 GMT
        Subject: CN=3d660ab5c3a74466f23d03b1cb09e2ce515930b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:7d:c2:16:29:13:f4:1a:d4:77:d7:a5:ad:
                    07:6f:4a:87:3e:dd:3b:31:92:ad:ff:82:a4:fa:d0:
                    74:ab:e4:7d:22:31:3c:b9:d2:41:25:65:90:42:ce:
                    42:73:ca:a3:a1:68:b8:71:27:90:7d:b1:73:c9:33:
                    64:76:fc:c9:ea:cc:8e:35:18:c3:a8:98:2a:80:17:
                    c0:16:e8:d0:ad:6b:89:88:33:e6:b4:71:73:27:8f:
                    4c:f1:e3:c8:d5:f9:3f:82:5d:67:ce:95:26:23:7f:
                    7b:eb:b4:19:89:99:24:97:d2:63:e5:e6:44:93:36:
                    c0:83:1b:6b:ed:42:e7:26:44:e8:25:c2:f4:79:2a:
                    08:36:f1:16:1b:e9:53:55:c7:09:ce:f7:20:d7:63:
                    64:8d:a2:fb:b6:83:96:83:59:87:46:37:35:3a:23:
                    eb:89:f3:92:c8:d8:08:d6:2f:d6:4e:cf:7f:38:ef:
                    19:5d:6d:40:71:ce:f1:75:5a:b2:e4:f9:30:b4:a5:
                    81:94:a4:f7:61:a9:c7:1f:75:90:e9:f5:2c:eb:28:
                    d7:e6:2e:ac:7a:bb:93:47:89:76:17:67:88:25:3d:
                    8f:19:83:12:89:e6:bf:a5:72:21:7b:57:33:30:3b:
                    cc:ae:a0:81:32:03:db:56:0a:e3:ec:b4:f0:aa:cc:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:66:0A:B5:C3:A7:44:66:F2:3D:03:B1:CB:09:E2:CE:51:59:30:B6
            X509v3 Authority Key Identifier:
                keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f1:85:b8:0a:4b:87:34:d2:c1:5e:c0:8d:d3:c7:87:6a:11:
         13:52:2c:09:f8:31:6b:1a:6e:e0:d0:95:53:fc:57:71:fa:34:
         d8:fd:fd:65:3d:6f:dd:86:32:62:ef:ab:20:e3:fd:2d:94:79:
         48:d4:25:a0:66:f4:81:37:9f:04:61:03:46:82:59:66:a2:5d:
         20:92:58:d4:66:5f:ef:ae:3b:f2:dd:46:22:2e:b7:ca:92:36:
         c2:70:ff:ec:ba:0c:91:aa:25:84:62:11:18:21:ca:51:ce:ed:
         44:de:32:ef:0c:52:d2:42:02:49:55:1c:56:c7:e0:89:1a:86:
         69:85:e9:d0:ca:ab:dc:e3:13:28:b8:5e:e7:aa:94:1a:a9:13:
         9b:06:a3:6d:b9:a3:e0:f6:12:8b:74:1d:22:39:cb:0d:0e:88:
         5c:55:42:dc:6b:47:73:d3:cd:7c:8d:31:85:e0:40:43:d9:ac:
         66:96:92:c2:71:60:f4:fd:c6:59:11:64:87:6a:37:9e:60:ef:
         9a:76:66:bf:f1:03:ed:7a:5b:ec:81:d4:33:a2:0d:a6:f1:b2:
         11:8f:f5:c6:e1:dc:49:dc:a1:bb:9c:14:78:76:3a:4a:f5:28:
         ed:21:c6:1a:83:35:3d:d1:4a:35:e8:83:92:f4:91:1b:86:2d:
         df:dc:ef:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:47:46 2026 by rpki-client