Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File:                     CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier:          MGHDWHWahYFg1LohpMUW0PA8EakzFDE1sU+rY151Ehk=
Subject key identifier:   29:7B:92:95:6E:4F:B6:E4:AB:C1:AB:EA:03:C6:BA:80:15:01:31:BA
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer:       /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial:       01A1404BA02C78E8CFFBCC8F4FAB8A7005AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number:          176D
Signing time:             Thu 15 Oct 2026 16:01:00 +0000
Manifest this update:     Thu 15 Oct 2026 16:01:00 +0000
Manifest next update:     Fri 16 Oct 2026 16:01:00 +0000
Files and hashes:         1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: 4q2PmKAraU80nQ2sUZTRG5gjAAcW0KUTbpcNmlItu3k=)
                          2: KtMqQnXaTgjktxdZ9isOcMNd_ow.roa (hash: EvEd1Dr3LRZFLdIp6Wy0JVab3CsirxaKCwus40x7MwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:4b:a0:2c:78:e8:cf:fb:cc:8f:4f:ab:8a:70:05:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
        Validity
            Not Before: Oct 15 16:01:00 2026 GMT
            Not After : Oct 16 16:01:00 2026 GMT
        Subject: CN=297b92956e4fb6e4abc1abea03c6ba80150131ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ff:5b:d3:c7:12:ef:f2:92:7a:06:d1:7b:d5:
                    cf:b8:e4:b2:d4:62:bc:d4:25:59:29:a4:75:a0:39:
                    69:c8:d1:a5:bf:31:0f:c8:b4:a8:8f:9a:47:2e:52:
                    01:be:eb:d1:e9:35:0f:91:de:75:3d:1c:20:a6:da:
                    d1:ee:92:46:68:b4:49:68:ed:eb:57:76:c8:47:b2:
                    20:1c:d6:de:90:5b:40:26:22:14:2f:fc:e3:b8:33:
                    b5:52:cd:b6:f9:b5:12:54:0b:8c:58:27:4d:74:c7:
                    ce:05:f2:94:50:60:19:a9:cd:cb:69:ca:c6:10:c2:
                    7e:77:e8:33:89:9c:6e:c7:fd:94:3f:39:e6:d2:dc:
                    46:e7:92:7e:00:e5:c0:ef:8a:c1:62:cb:cb:3c:a9:
                    3e:8a:15:c6:95:61:29:5e:65:9f:11:15:78:17:9d:
                    31:87:12:be:74:0b:81:8c:e6:37:29:fb:b1:6c:db:
                    8e:b1:1e:d4:c2:18:89:93:d9:d9:86:77:41:d6:a2:
                    a0:2c:22:1d:b2:bd:94:8d:e2:4d:12:87:90:29:43:
                    ba:97:da:e6:3a:82:ad:ba:41:05:33:8f:ca:17:08:
                    6b:46:d3:88:f2:eb:7b:7d:da:98:56:6b:58:36:fd:
                    dd:46:2c:39:db:3d:c5:4e:d1:d9:16:b0:28:12:82:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7B:92:95:6E:4F:B6:E4:AB:C1:AB:EA:03:C6:BA:80:15:01:31:BA
            X509v3 Authority Key Identifier:
                keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c9:9b:6a:44:f2:38:d3:89:81:4a:eb:fe:50:43:0c:03:68:
         13:80:4f:ad:c1:cb:f6:93:40:41:e9:92:7c:3c:b7:fd:38:03:
         9b:1b:ac:19:07:72:4c:ba:63:da:5d:1f:6c:b0:a3:40:ae:90:
         5d:74:f2:b1:6e:1f:c7:87:a0:d3:71:23:7e:fc:14:30:18:47:
         8e:fc:94:7b:63:91:dc:c7:22:54:77:f4:29:86:ec:d9:05:04:
         41:2d:a9:f5:ff:d7:77:32:78:6d:93:4c:c4:45:01:3f:39:be:
         30:1c:8c:10:00:db:ab:93:0a:02:e5:2f:4f:17:41:b8:5f:25:
         a1:40:47:47:f1:e2:51:d2:b1:25:05:d0:79:94:92:c1:1e:ef:
         23:0b:bf:ac:41:96:af:82:e2:2c:f1:e7:0c:5c:af:f8:44:65:
         f7:57:21:b9:ae:1a:b9:07:ae:f6:ca:b5:d1:2c:c1:64:d1:d5:
         16:fc:f0:c5:cc:c4:d4:62:52:34:69:7a:e5:1b:14:d2:cf:93:
         17:7b:5d:68:8f:d5:59:6e:81:9e:bb:c6:ee:94:98:ac:1d:5a:
         c2:ed:3c:e1:32:5b:88:a5:cf:8b:50:4c:fd:eb:d7:06:08:52:
         6b:0a:ab:a6:72:32:56:01:93:c4:63:4d:2b:f0:1f:00:c5:c9:
         a0:a6:1e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:04:45 2026 by rpki-client