Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File:                     4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier:          AVjlErS3zzuBOUlvs9KcH/iSUYLPMqaX93lbjMriq58=
Subject key identifier:   34:C8:67:FC:49:3D:4B:DA:55:AB:48:3E:4C:70:83:20:0A:B7:AE:BD
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer:       /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial:       01A13F700C67DCAAC43A5E99B8E3C4273987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number:          1613
Signing time:             Thu 15 Oct 2026 12:01:10 +0000
Manifest this update:     Thu 15 Oct 2026 12:01:10 +0000
Manifest next update:     Fri 16 Oct 2026 12:01:10 +0000
Files and hashes:         1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: 5ZKOF6MKsZPGvY9IV/mTApUQ5zLL8fX2hSvSMqklRc0=)
                          2: eE7il2_XdwS5_JtxMq2pvAz1LIU.roa (hash: wpN1KIlOzEFCJRu+ipfs4OChRIy+MI7uehA6+KAIz84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:0c:67:dc:aa:c4:3a:5e:99:b8:e3:c4:27:39:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
        Validity
            Not Before: Oct 15 12:01:10 2026 GMT
            Not After : Oct 16 12:01:10 2026 GMT
        Subject: CN=34c867fc493d4bda55ab483e4c7083200ab7aebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:4e:ba:eb:95:9f:58:67:11:6e:d5:90:da:
                    46:9c:ba:2b:85:35:ba:55:60:7a:da:c3:cc:73:26:
                    c5:25:88:8a:a7:d1:5e:4d:0f:53:ff:00:7c:02:ff:
                    7a:88:18:77:ff:da:56:4b:39:24:b4:5a:39:30:74:
                    fa:78:33:9f:7c:de:83:47:3b:e6:1b:89:9b:5e:ae:
                    b9:61:aa:fd:9c:6b:6e:ee:41:d9:d9:09:7b:ce:ff:
                    72:5f:b4:46:05:12:b1:24:35:1a:50:b7:c8:10:b1:
                    6f:1d:bf:a3:04:09:c4:3f:83:e4:08:e1:d2:e5:7b:
                    ff:ca:8e:99:73:1b:ff:95:df:b7:d9:36:1a:7a:0c:
                    40:a9:fa:a8:85:c0:d9:5b:6e:fc:40:ff:8b:d2:12:
                    30:c0:4c:cc:15:43:ce:8f:34:4f:45:f9:f3:e6:35:
                    57:1f:e3:06:7b:ba:fe:bd:0b:20:19:ff:a7:92:c7:
                    d0:ec:94:d4:2d:ef:7d:b2:fc:73:96:ba:b5:6d:55:
                    a8:e7:47:de:6f:b3:6e:0d:0f:50:d2:13:a8:94:63:
                    ec:a7:34:f9:d3:37:d5:03:b2:a6:10:1f:bf:0f:39:
                    ac:af:15:c3:00:ba:fd:43:25:2e:35:43:48:e1:1d:
                    78:1e:35:a8:6f:d6:2a:bb:10:87:e8:c8:7d:44:63:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C8:67:FC:49:3D:4B:DA:55:AB:48:3E:4C:70:83:20:0A:B7:AE:BD
            X509v3 Authority Key Identifier:
                keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:bd:42:5d:6b:3f:d7:d7:fa:14:fb:44:df:8c:29:07:ca:43:
         f6:e3:ac:66:cc:9b:f5:98:85:8f:50:2e:b6:e6:fe:53:44:08:
         71:09:2a:c4:c6:e7:02:5d:ab:41:3e:29:de:2a:cf:50:c2:3e:
         47:e1:4f:e2:c8:82:ca:c6:f5:80:d2:dc:c8:13:32:ab:2f:fb:
         d9:4c:53:01:0b:87:64:40:4a:e9:eb:13:15:42:86:30:7d:b8:
         77:66:50:6a:eb:4d:45:44:c7:1b:75:b1:42:c6:1f:61:a0:20:
         30:83:19:fb:a0:58:da:84:be:b9:ca:9b:3d:92:53:7e:bb:a7:
         f8:d8:c9:86:25:ef:67:02:f1:25:62:b8:5a:b0:77:ed:b8:46:
         8e:02:ed:1f:09:94:c7:f0:95:2e:ef:51:59:2e:a4:63:8c:38:
         55:3c:20:99:d3:8d:63:cc:c0:b3:c1:5f:5e:68:df:a6:ec:1d:
         c6:35:3a:0e:ea:22:93:a2:c7:b6:49:fb:b3:25:e0:be:21:5b:
         58:a9:e5:fe:ed:de:d2:60:f3:95:32:f5:74:ed:b3:8c:f4:16:
         45:93:2a:09:be:dd:ce:3c:d4:cd:b2:20:1e:9e:27:35:5c:eb:
         08:1d:7f:68:96:46:9c:02:53:75:f0:9c:df:31:81:27:b1:5e:
         b4:a0:7a:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/cAxn3KrEOl6ZuOPEJzmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTQ2ZTJjNDAxNmE4ZDczOTJjODU3NDEzNGZkNDc5M2I5
NDE1YTQwHhcNMjYxMDE1MTIwMTEwWhcNMjYxMDE2MTIwMTEwWjAzMTEwLwYDVQQD
EygzNGM4NjdmYzQ5M2Q0YmRhNTVhYjQ4M2U0YzcwODMyMDBhYjdhZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8dOuuuVn1hnEW7VkNpGnLorhTW6
VWB62sPMcybFJYiKp9FeTQ9T/wB8Av96iBh3/9pWSzkktFo5MHT6eDOffN6DRzvm
G4mbXq65Yar9nGtu7kHZ2Ql7zv9yX7RGBRKxJDUaULfIELFvHb+jBAnEP4PkCOHS
5Xv/yo6Zcxv/ld+32TYaegxAqfqohcDZW278QP+L0hIwwEzMFUPOjzRPRfnz5jVX
H+MGe7r+vQsgGf+nksfQ7JTULe99svxzlrq1bVWo50feb7NuDQ9Q0hOolGPspzT5
0zfVA7KmEB+/DzmsrxXDALr9QyUuNUNI4R14HjWob9YquxCH6Mh9RGMsDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTIZ/xJPUvaVatIPkxwgyAKt669MB8GA1UdIwQY
MBaAFOPkbixAFqjXOSyFdBNP1Hk7lBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYzgtNzQ1Ni00ZTU1LWI3NzYt
ZDhlY2UyNmFmZWMwLzEvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81NzJlYzgtNzQ1Ni00ZTU1LWI3NzYtZDhlY2UyNmFmZWMw
LzEvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbL1CXWs/
19f6FPtE34wpB8pD9uOsZsyb9ZiFj1Autub+U0QIcQkqxMbnAl2rQT4p3irPUMI+
R+FP4siCysb1gNLcyBMyqy/72UxTAQuHZEBK6esTFUKGMH24d2ZQautNRUTHG3Wx
QsYfYaAgMIMZ+6BY2oS+ucqbPZJTfrun+NjJhiXvZwLxJWK4WrB37bhGjgLtHwmU
x/CVLu9RWS6kY4w4VTwgmdONY8zAs8FfXmjfpuwdxjU6Duoik6LHtkn7syXgviFb
WKnl/u3e0mDzlTL1dO2zjPQWRZMqCb7dzjzUzbIgHp4nNVzrCB1/aJZGnAJTdfCc
3zGBJ7FetKB6nA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:44 2026 by rpki-client