Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File:                     4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier:          r22KS4DVqvqrszgCMOvl+7NysDo7vZm51zTCeTgHLhw=
Subject key identifier:   49:0D:1E:DB:FD:8A:02:D6:EC:61:99:11:48:C2:7F:35:F7:0F:3F:D4
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer:       /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial:       01A13D4A17B9FEE2AC7C6A83C42B04399761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number:          0E90
Signing time:             Thu 15 Oct 2026 02:00:28 +0000
Manifest this update:     Thu 15 Oct 2026 02:00:28 +0000
Manifest next update:     Fri 16 Oct 2026 02:00:28 +0000
Files and hashes:         1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: h2oAUhxUA9nsqaErBGUrYdSe+3TNiCh7qms34sacHbk=)
                          2: j_t_jFAta10RI31T6FonCloC3D4.asa (hash: Omact/OG1Vjza6tNA6dIAQIik0sg+Ex+j9k7Zm7x4yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:4a:17:b9:fe:e2:ac:7c:6a:83:c4:2b:04:39:97:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
        Validity
            Not Before: Oct 15 02:00:28 2026 GMT
            Not After : Oct 16 02:00:28 2026 GMT
        Subject: CN=490d1edbfd8a02d6ec61991148c27f35f70f3fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:3b:a6:5a:86:52:bc:14:8c:c6:32:60:48:f9:
                    4d:49:68:9c:b6:91:df:bd:79:97:59:ea:23:c9:66:
                    bd:11:9f:27:62:13:76:fc:3d:f3:cc:78:25:b3:ad:
                    2e:a7:dd:63:3e:ae:04:2e:25:5b:0b:11:ba:82:37:
                    24:de:f0:4e:15:e3:7d:5d:bc:6d:aa:f6:07:d7:6c:
                    57:f2:f5:8a:38:91:6e:6f:a9:a9:90:df:73:cc:7c:
                    5f:16:39:46:d3:03:05:81:c8:e8:68:48:37:12:59:
                    a5:a0:9e:56:45:bd:72:0c:c8:25:b2:ae:24:ae:da:
                    4e:e8:f6:c4:9d:a7:43:95:6f:17:b5:d7:c3:13:30:
                    b3:49:0d:52:cd:cd:90:a4:f7:62:44:c1:79:9c:b1:
                    75:be:da:ae:08:6e:5e:af:67:b2:87:b0:f0:52:d5:
                    57:ee:48:76:18:52:18:50:02:84:3c:a0:53:64:7c:
                    32:eb:eb:1d:78:63:de:5d:32:d3:89:0d:ec:f2:c4:
                    28:77:2d:2b:e6:49:14:99:2f:c7:7c:ba:95:6d:09:
                    54:5d:c3:2c:d1:de:99:8a:ff:13:8c:dc:69:91:82:
                    9b:c1:72:6e:3d:04:0e:b6:97:be:25:03:a3:46:83:
                    43:a0:e7:ef:52:39:a2:82:fb:1f:25:6e:68:d7:b1:
                    b1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0D:1E:DB:FD:8A:02:D6:EC:61:99:11:48:C2:7F:35:F7:0F:3F:D4
            X509v3 Authority Key Identifier:
                keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b7:90:9d:85:d0:a1:2b:af:a9:24:d6:56:8d:4c:2b:59:02:
         78:ad:49:fd:fe:55:0c:bd:5c:82:da:a4:f2:4f:67:9f:96:a4:
         14:99:f0:66:05:43:53:7c:bf:4f:ae:cb:ad:9d:97:47:96:11:
         6d:17:2a:a0:db:8f:ae:89:5a:c4:91:a0:1c:41:50:c8:32:1f:
         cc:09:76:fd:d2:6a:0a:c5:02:79:1f:f5:a1:84:a5:55:78:98:
         93:53:b7:b4:2d:85:fb:01:67:6e:5d:4d:e2:09:bd:1d:38:92:
         19:1c:2f:13:4a:5c:ab:db:72:c2:21:b4:8a:cf:a7:88:4e:ea:
         e3:96:46:9e:7a:e9:f4:dc:3e:1c:a7:bf:a4:3f:b6:1b:3f:88:
         ed:96:a3:ac:15:fd:d9:81:0e:bb:a8:65:40:dd:ae:78:47:fa:
         30:24:d3:f7:bb:93:f1:ca:1e:71:fa:ee:3e:2e:df:04:52:b7:
         82:0f:74:22:41:b2:50:35:ad:af:a9:f5:ef:bb:9c:07:e4:3d:
         35:a1:62:35:ef:e0:96:65:04:ae:4b:bd:ca:41:d1:c3:6f:35:
         5c:a2:ba:d0:9e:2e:a6:62:51:fa:4a:e3:3d:cc:13:2b:64:33:
         c4:a7:43:bf:2e:47:af:99:58:64:7a:89:98:5e:b6:30:aa:1c:
         67:f9:7e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:54 2026 by rpki-client