Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File:                     4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier:          ERr9Y+vEJdupLwXixiT1hjzJADFQtGXfTt+PSwCj/6w=
Subject key identifier:   CE:18:7D:32:AA:27:8B:12:A0:F9:8D:13:DE:6B:10:30:F0:B4:E6:91
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer:       /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial:       01A13DEED87A4B3E3BEAE316CC1CDAA4673F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number:          18C0
Signing time:             Thu 15 Oct 2026 05:00:25 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:25 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:25 +0000
Files and hashes:         1: 348GlYel7WKf7j6VpPBbdI2F0AY.roa (hash: 8CB29xF2GvA/FLxPFcEF5rA4l97+T5SM5ICvhUC1S3w=)
                          2: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: R1FFvYGZtIutSYmGzPBdeiE9yAdtyXh20EVmjfLkP4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ee:d8:7a:4b:3e:3b:ea:e3:16:cc:1c:da:a4:67:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
        Validity
            Not Before: Oct 15 05:00:25 2026 GMT
            Not After : Oct 16 05:00:25 2026 GMT
        Subject: CN=ce187d32aa278b12a0f98d13de6b1030f0b4e691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b7:8b:7e:7d:29:17:76:79:8d:44:d1:c5:e3:
                    e5:8e:75:88:9f:98:0e:5a:c5:ab:93:05:d0:31:7c:
                    33:a2:2b:f4:7a:11:0f:90:05:64:ba:82:cb:56:64:
                    1f:51:8f:7c:96:1f:a3:c2:a6:83:1a:a8:df:1a:d7:
                    7b:23:36:34:b8:1c:bf:68:8b:c6:9c:f7:84:ff:64:
                    7f:e4:34:8a:f5:aa:90:df:ce:45:82:0d:9c:10:16:
                    5a:f1:47:73:d8:ff:78:f6:59:59:81:79:3d:b0:7c:
                    1c:9d:62:33:f4:bf:ae:80:2f:17:e3:38:f7:8d:a4:
                    5a:f4:6a:92:e4:f8:af:d1:4e:65:ad:ff:c5:ab:08:
                    a1:5f:c6:a7:61:3b:28:bf:2d:d7:ff:9f:3a:b5:af:
                    fc:b6:e6:56:dc:74:2a:f9:7d:f5:32:77:42:16:13:
                    64:b2:34:bd:1f:ab:56:60:3e:74:5e:3f:cd:d2:48:
                    1d:fe:f0:e5:9a:9a:1c:53:d9:17:a3:65:e6:81:aa:
                    c7:b4:ad:dc:c5:68:04:79:e9:ba:38:6e:af:e9:13:
                    6e:b4:80:5a:11:0e:af:d3:c5:0a:34:6a:11:7e:7c:
                    68:1b:94:98:a9:31:88:6f:4a:bf:50:b3:fb:fb:8e:
                    ea:4d:9a:2c:c7:39:27:e3:5f:da:1c:68:f1:cb:ea:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:18:7D:32:AA:27:8B:12:A0:F9:8D:13:DE:6B:10:30:F0:B4:E6:91
            X509v3 Authority Key Identifier:
                keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8a:c9:b4:27:46:7f:a4:27:3f:25:1e:0f:24:62:cf:28:55:
         da:35:39:a7:89:bd:ba:35:81:a9:12:e3:c8:cc:11:d2:bf:cc:
         24:d5:a3:aa:d1:56:b9:28:44:c6:5f:b9:32:a5:50:bf:7a:8f:
         50:b8:3c:9e:6f:38:f7:19:59:3f:01:ed:d8:77:5c:b3:b8:82:
         05:48:20:cb:60:85:b0:75:73:1d:ce:ec:4d:a4:b7:fe:ad:61:
         07:3c:38:fa:99:59:e5:38:3b:c5:f5:90:c5:e9:88:92:15:8e:
         35:b9:f4:5d:04:83:80:c1:4f:b2:2e:d8:09:b6:96:16:a2:19:
         1c:6e:cf:3a:02:50:28:07:7f:4e:7f:30:a7:4d:33:27:0f:f5:
         13:7b:c0:a6:d4:35:c5:bb:fd:6d:7e:10:07:42:39:d1:2d:c1:
         e4:1d:1e:71:e4:3f:77:8f:c7:e7:77:ba:f7:f8:6b:70:16:c3:
         5e:84:ff:da:a9:c8:8f:79:85:81:a4:4b:74:cb:e2:44:4b:8d:
         ff:66:c7:9a:ee:09:78:01:6b:0f:17:38:24:e5:e9:2d:34:b8:
         1c:49:73:fe:74:93:08:27:af:f7:be:8a:b7:50:90:06:3f:3f:
         6d:d2:8e:bf:c7:44:b5:61:df:b2:fc:e5:93:40:4e:db:80:4e:
         b3:f0:d6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:26:02 2026 by rpki-client