Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
File:                     4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json)
Hash identifier:          OA7+pEYHYDWzk6i4YELyvldqZjCJDSGDtnH4aElz9sg=
Subject key identifier:   23:28:AF:C2:9D:DA:7D:14:DE:DA:5C:40:27:F3:84:5B:02:32:D4:41
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Certificate issuer:       /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial:       01A145DF937CDB14C28D24F9731123E4C323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
Manifest number:          09A5
Signing time:             Fri 16 Oct 2026 18:00:42 +0000
Manifest this update:     Fri 16 Oct 2026 18:00:42 +0000
Manifest next update:     Sat 17 Oct 2026 18:00:42 +0000
Files and hashes:         1: 0SKx4uHIUqJCwzbuDVDzDNGPsb8.roa (hash: mtyUt15yu+f0GpFvD8FnDUSV4lO4SlvX/nIEW6w5cbU=)
                          2: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: 5hx5JNh1RexDrzhedJR9lv/b1L2A1LnQ03C9uptW1q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:45:df:93:7c:db:14:c2:8d:24:f9:73:11:23:e4:c3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
        Validity
            Not Before: Oct 16 18:00:42 2026 GMT
            Not After : Oct 17 18:00:42 2026 GMT
        Subject: CN=2328afc29dda7d14deda5c4027f3845b0232d441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:46:c3:9a:51:bb:0c:8e:5d:3c:c1:7e:40:b3:
                    a3:32:cc:d6:67:70:8b:00:d2:b8:fd:60:55:16:69:
                    cc:bc:60:29:43:fa:dc:0b:cb:d3:ce:c8:92:bf:5b:
                    f3:c1:ee:7c:43:85:bd:79:01:7e:64:6b:70:c8:a7:
                    f4:d1:d8:2d:0f:c2:e5:33:60:5f:aa:d7:11:f7:17:
                    57:16:c0:6e:a8:7a:57:41:1d:71:23:c3:9b:27:d6:
                    f2:d9:6b:dd:48:5e:d6:59:b8:6b:74:d2:ff:04:8c:
                    f0:47:16:eb:7d:da:da:aa:b2:02:a8:e3:9c:8f:9b:
                    f6:99:7d:c1:44:37:de:5b:e5:28:ed:d5:86:cc:30:
                    ad:59:f8:07:d3:ee:52:9f:a8:80:74:f0:18:04:c2:
                    28:28:94:38:a4:2b:0c:3d:90:6c:c7:06:a5:f6:c5:
                    77:3a:86:d9:9d:d9:16:50:e5:e5:53:78:29:7a:0c:
                    84:a4:ec:30:b1:3c:79:f3:1f:c0:26:c5:d4:1d:85:
                    fd:43:57:a9:70:46:91:76:54:95:62:37:6d:36:39:
                    c8:82:24:fc:76:3d:8a:77:ec:87:aa:bc:f5:46:8b:
                    29:8c:2e:29:e2:0b:28:48:83:6a:1f:1e:c8:eb:19:
                    d0:12:cd:79:e8:2a:e9:11:c7:33:98:59:37:0e:0a:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:28:AF:C2:9D:DA:7D:14:DE:DA:5C:40:27:F3:84:5B:02:32:D4:41
            X509v3 Authority Key Identifier:
                keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:dc:34:75:a8:63:8b:b4:9d:3b:d6:c6:2c:2f:83:c7:00:e1:
         32:62:c7:1d:8a:1d:90:fb:2a:46:bf:6b:2d:ba:3c:d8:af:e3:
         f8:5f:e8:9e:50:a4:5b:bf:a0:cf:14:e9:74:44:94:01:d0:26:
         36:94:b4:9d:f3:55:9e:60:0a:e8:24:6e:25:5d:b0:b7:ae:bd:
         36:a5:23:d0:09:de:2b:48:de:13:1e:b9:37:df:15:e3:0d:03:
         31:8e:df:ca:9e:67:89:77:93:d7:10:bc:94:e8:01:0f:d2:0c:
         cc:75:ae:bb:d0:c1:3b:41:f5:4d:77:d9:7e:22:53:e7:5c:30:
         8a:00:02:97:4e:6d:d6:64:67:57:97:ae:81:47:db:32:c3:3d:
         41:2e:5e:81:e9:ad:0a:80:55:fd:cf:88:e7:53:cc:9b:0b:61:
         10:fd:22:6b:6d:77:69:10:db:ba:50:cb:f9:7b:d2:ed:45:a4:
         9c:4f:6d:99:90:f0:cd:18:b3:d2:c7:8f:88:dd:8c:f0:ff:00:
         69:46:d7:5b:3d:3a:86:8b:64:d4:33:7c:f0:92:29:fc:08:6d:
         da:75:27:4a:33:6d:1b:60:b7:ea:e0:79:a7:71:8a:a0:84:92:
         d5:d4:5d:41:98:e0:72:23:a8:8e:e4:7f:ee:bc:07:0f:07:2f:
         34:3e:8e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:54:01 2026 by rpki-client