Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/e2e249-1ac7-4129-9b03-e937e1a4c9c2/1/4bdDICtRqPPs4CmUxLLsyoVvlEc.mft
File:                     4bdDICtRqPPs4CmUxLLsyoVvlEc.mft (raw, json)
Hash identifier:          UcdP5FVmCacaBh8bEK0M1zwXD1pQkFgph1JivzJY/Ts=
Subject key identifier:   CA:67:83:FC:77:97:53:61:9B:F6:81:99:6E:92:9A:7F:BE:04:1F:0F
Authority key identifier: E1:B7:43:20:2B:51:A8:F3:EC:E0:29:94:C4:B2:EC:CA:85:6F:94:47
Certificate issuer:       /CN=e1b743202b51a8f3ece02994c4b2ecca856f9447
Certificate serial:       01A17B16BC994A191B662ABE91DD2B534996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bdDICtRqPPs4CmUxLLsyoVvlEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e2e249-1ac7-4129-9b03-e937e1a4c9c2/1/4bdDICtRqPPs4CmUxLLsyoVvlEc.mft
Manifest number:          0161
Signing time:             Tue 27 Oct 2026 02:00:49 +0000
Manifest this update:     Tue 27 Oct 2026 02:00:49 +0000
Manifest next update:     Wed 28 Oct 2026 02:00:49 +0000
Files and hashes:         1: 4bdDICtRqPPs4CmUxLLsyoVvlEc.crl (hash: QyT+pG913JICGQ3a0fJm+e8/11Otp7Ytie8E294WyFQ=)
                          2: MoTJON4zfAAs86dhpRA8DMjBYds.roa (hash: lRQcvGIsxFIeX7X8wUkxLIMmqy/PrMCPXFkWBmHz8p4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e2e249-1ac7-4129-9b03-e937e1a4c9c2/1/4bdDICtRqPPs4CmUxLLsyoVvlEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e2e249-1ac7-4129-9b03-e937e1a4c9c2/1/4bdDICtRqPPs4CmUxLLsyoVvlEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bdDICtRqPPs4CmUxLLsyoVvlEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:16:bc:99:4a:19:1b:66:2a:be:91:dd:2b:53:49:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b743202b51a8f3ece02994c4b2ecca856f9447
        Validity
            Not Before: Oct 27 02:00:49 2026 GMT
            Not After : Oct 28 02:00:49 2026 GMT
        Subject: CN=ca6783fc779753619bf681996e929a7fbe041f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:0f:e5:a4:c7:3f:85:01:4b:fd:f3:51:85:
                    c2:91:22:c1:c5:9d:eb:64:12:32:eb:b8:9a:c9:c9:
                    46:5f:98:4f:64:1c:17:6a:e3:8c:72:f7:36:34:0c:
                    33:80:1a:8c:51:c6:0c:3c:94:c8:1c:58:f3:f5:57:
                    c5:5a:6c:78:bb:8b:bd:8b:f6:3d:a5:29:7e:cd:de:
                    3f:1a:c6:5e:4b:9c:e4:99:1b:05:ca:b8:1c:0a:a3:
                    40:29:ae:97:28:6f:4b:8b:8a:13:04:a4:08:d0:e4:
                    ff:d3:76:f6:26:c3:e6:09:2c:3f:9b:5a:68:3f:76:
                    5b:ab:84:5b:22:4e:b0:6d:f0:40:cf:4c:e9:0d:fa:
                    2e:11:b0:f7:ec:37:a0:8f:ff:82:ff:11:65:2e:c8:
                    d1:2a:11:bf:67:64:d8:58:20:33:31:3a:b8:25:01:
                    f1:11:8b:20:fd:af:a1:8e:f8:4a:27:90:48:3e:6a:
                    ac:3f:fb:79:ff:d9:97:f9:9d:b4:d3:6a:0e:d8:7f:
                    cd:bc:5d:35:f8:e2:58:8b:3b:36:ed:c3:c1:97:41:
                    a9:17:ce:09:c2:d5:e5:e7:0b:97:c8:99:83:aa:75:
                    5f:07:0c:e4:d8:31:de:1a:3b:58:76:f3:85:1d:11:
                    ab:34:aa:83:65:5e:f8:af:65:2b:75:f0:58:53:8f:
                    15:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:67:83:FC:77:97:53:61:9B:F6:81:99:6E:92:9A:7F:BE:04:1F:0F
            X509v3 Authority Key Identifier:
                keyid:E1:B7:43:20:2B:51:A8:F3:EC:E0:29:94:C4:B2:EC:CA:85:6F:94:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bdDICtRqPPs4CmUxLLsyoVvlEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e2e249-1ac7-4129-9b03-e937e1a4c9c2/1/4bdDICtRqPPs4CmUxLLsyoVvlEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e2e249-1ac7-4129-9b03-e937e1a4c9c2/1/4bdDICtRqPPs4CmUxLLsyoVvlEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:81:b3:29:6b:e8:a5:3f:48:3d:ba:5c:a1:c3:64:b7:a8:17:
         24:e3:75:8d:a9:a0:4d:b9:1b:e6:f4:a5:01:01:0b:54:c7:25:
         81:48:c5:6a:82:de:ff:1e:e7:ed:c6:de:85:55:90:ea:0c:d2:
         24:44:ce:0b:ab:76:b7:bc:b0:9c:81:e3:6e:e7:6b:21:a1:fe:
         51:e9:40:23:32:2a:92:3b:c2:3a:48:59:5e:51:1c:3a:a7:5e:
         7d:a3:94:4f:9d:1a:8a:e2:66:6f:50:ff:4f:79:86:5b:94:4e:
         b8:9a:11:bc:c6:3a:9a:6c:36:f2:98:bf:0f:a0:03:6a:68:d7:
         bf:e3:28:18:25:f5:37:68:12:a6:8c:af:71:29:26:aa:88:7a:
         9e:79:80:b6:01:86:33:16:4c:06:fc:7b:f7:89:80:0b:30:1e:
         22:6b:1d:fc:36:2e:3c:4d:e4:a0:60:9a:31:30:87:0a:8c:e1:
         e3:0b:e7:4f:dc:c4:73:a0:f6:f2:c8:21:0f:84:bf:0e:12:0f:
         95:cb:2a:95:5a:ee:03:ea:a1:aa:b7:34:1b:1a:2a:32:78:1b:
         83:af:d9:7e:55:80:c7:7d:9d:91:95:6f:56:5f:53:15:e3:7a:
         3f:f6:6a:7e:54:4c:f7:7d:15:8c:85:13:c7:a5:de:df:29:67:
         0f:f6:c6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:14:39 2026 by rpki-client