Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File:                     4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier:          Sak3dsJ6Mx+v7Rkk9AGt54wXjjV5kvIR902ZKcfI0lM=
Subject key identifier:   4E:05:17:E7:F3:21:53:15:77:44:71:2F:D7:B1:A3:3F:1D:35:85:21
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer:       /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial:       01A14E0782CA2770CA301FFF723C80B81A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number:          1AAB
Signing time:             Sun 18 Oct 2026 08:01:17 +0000
Manifest this update:     Sun 18 Oct 2026 08:01:17 +0000
Manifest next update:     Mon 19 Oct 2026 08:01:17 +0000
Files and hashes:         1: 1OhU1ba4r4lAxG-v3HBo5kpowjY.roa (hash: uhi47WtmC1HtS+uzfaoWnsMLVST1oI2GfXGXB1P0CWo=)
                          2: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: fb0rk4ZlXS9T72tCj73v6L/2K4hGmr2P1jd6ZvDCvRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4e:07:82:ca:27:70:ca:30:1f:ff:72:3c:80:b8:1a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
        Validity
            Not Before: Oct 18 08:01:17 2026 GMT
            Not After : Oct 19 08:01:17 2026 GMT
        Subject: CN=4e0517e7f32153157744712fd7b1a33f1d358521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:e7:17:34:d0:48:cb:71:ba:ad:af:f7:eb:
                    5d:3f:5a:7a:30:1d:40:72:c5:23:ce:c5:82:80:7e:
                    3a:15:81:62:1e:98:86:bf:51:bc:b7:18:41:34:74:
                    b0:c9:66:9d:a0:dc:fa:0e:82:2d:ee:b5:69:3e:c8:
                    83:d9:cf:02:d1:10:94:62:51:de:67:8c:7d:c4:e8:
                    37:85:b7:e1:0b:8d:52:3a:2c:bf:b8:f2:ef:87:6a:
                    35:74:d8:aa:9f:2d:5f:d2:65:b2:13:a7:3e:9d:c5:
                    18:86:f5:45:15:ad:6a:cb:8f:d6:8b:f0:40:44:39:
                    0b:08:01:f2:e7:dc:86:c2:06:33:e9:7b:80:05:d5:
                    dc:7d:f8:24:ae:88:b2:6b:4e:6c:76:dc:cb:89:0a:
                    b6:72:80:d6:ea:25:a7:42:69:fe:7a:96:87:7e:70:
                    3a:9d:43:6d:a3:a1:44:a1:31:e7:aa:d3:b0:f3:b1:
                    3b:b0:d0:f0:95:e3:c2:4a:79:c7:87:1f:7b:ad:1e:
                    84:68:9e:70:fa:4e:92:05:be:82:97:04:53:6b:b8:
                    dd:50:c7:b7:63:79:82:c2:bc:8f:35:ee:2f:a8:a3:
                    f2:63:0a:13:3d:65:4f:03:bc:21:49:ff:6a:19:2b:
                    d4:47:04:0f:07:ca:71:d1:13:9e:0b:cf:1a:eb:2e:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:05:17:E7:F3:21:53:15:77:44:71:2F:D7:B1:A3:3F:1D:35:85:21
            X509v3 Authority Key Identifier:
                keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:f9:3d:ad:3e:02:5e:65:62:95:09:73:bd:52:39:fa:0d:
         7a:9f:4d:b3:79:3c:8d:ed:27:5d:7d:18:f6:d1:f4:2d:a4:76:
         96:3a:73:88:19:a0:2e:80:a2:bd:4e:28:ce:92:1d:1c:88:96:
         80:53:d5:00:a3:ba:34:59:bb:fe:28:10:0d:0e:c3:54:46:53:
         53:cf:dc:ef:53:81:1a:b5:4e:b4:b6:55:ab:7e:12:03:b8:5d:
         60:54:40:1c:f9:7c:77:c3:ae:1a:95:55:83:7a:0a:75:cc:f8:
         89:22:a0:8d:c1:81:f1:1b:f8:6a:2c:91:a1:b8:95:14:d4:e4:
         e0:df:5c:4c:37:ef:d7:fd:dc:b3:4a:37:ad:59:a9:84:ea:18:
         cc:a0:37:70:d9:56:b5:97:ff:78:8f:c2:67:ec:28:ab:af:01:
         5f:3d:ab:95:6b:88:89:de:f1:74:4c:be:b1:5a:95:0e:5e:8c:
         b1:22:a4:e0:5b:22:1e:f3:63:91:5c:2f:78:a2:47:bd:2d:8d:
         1d:a0:38:97:d5:80:56:89:aa:0d:57:ef:32:2f:a6:b6:f7:10:
         3b:45:90:dd:76:d3:1b:32:cd:0d:ea:80:78:7e:b1:36:4b:5a:
         96:57:7a:b3:73:69:00:2e:21:8e:74:8c:3f:35:6d:e9:59:e2:
         22:77:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 17:44:54 2026 by rpki-client