Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File:                     S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier:          t4CFfMKQ78bHhCgn5F7/zqLZpBBP5PPFr0jGcQQuw9A=
Subject key identifier:   FE:FD:BB:44:30:61:35:01:3B:9C:E5:35:E9:4F:55:52:3F:94:EB:0E
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer:       /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial:       01A13E9456304FC12A314C3BDCC9939FE58A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number:          0A40
Signing time:             Thu 15 Oct 2026 08:01:11 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:11 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:11 +0000
Files and hashes:         1: Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa (hash: N2GUp/A12YuOzgdEUjTB8syXYjaMrKhtAtS9ZwORjp0=)
                          2: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: 7I2GmKVcfy2fA+31Z31+kBO/ADblXCbjhFKH7UjVv8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:56:30:4f:c1:2a:31:4c:3b:dc:c9:93:9f:e5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
        Validity
            Not Before: Oct 15 08:01:11 2026 GMT
            Not After : Oct 16 08:01:11 2026 GMT
        Subject: CN=fefdbb44306135013b9ce535e94f55523f94eb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:38:55:2d:67:a0:09:30:37:cf:ab:5c:18:f4:
                    b9:24:fd:80:ce:d2:b7:88:35:8a:7b:55:d7:bb:fd:
                    bd:13:15:f0:99:b1:9b:00:bd:0a:8a:8c:05:43:99:
                    8c:7d:da:a8:73:b1:c3:60:b1:e7:72:90:e5:ef:87:
                    e7:d3:49:2c:f3:11:52:c5:a1:31:da:69:2a:b9:04:
                    41:d8:b3:55:b9:97:21:5b:49:68:b6:0d:0c:ea:89:
                    91:bb:de:1c:67:81:91:6c:7c:8c:74:07:63:ca:70:
                    cc:bd:00:ac:33:c0:bd:1e:9f:ae:6b:23:78:28:29:
                    7d:6f:27:6e:6d:e0:15:84:d0:2c:bd:21:de:7a:ff:
                    84:9e:ae:e6:86:43:1e:b4:1e:46:0d:c6:f1:e2:62:
                    a0:8f:c8:8a:97:5e:80:f0:ac:6b:46:d5:0c:32:3d:
                    20:2e:84:d7:25:67:5b:1d:d9:0b:ff:b4:9e:ec:3d:
                    59:c2:cf:cf:e2:10:20:0f:cf:98:be:8b:b7:49:a8:
                    96:60:6e:1d:13:58:41:ac:42:6c:16:07:4e:68:77:
                    80:f6:ec:87:77:69:55:52:c6:90:2a:28:b6:f8:7e:
                    88:97:3b:43:41:b2:e2:62:1e:05:16:32:7c:0d:e9:
                    75:88:d7:4e:6a:90:02:f0:1c:41:13:e1:13:1e:00:
                    15:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FD:BB:44:30:61:35:01:3B:9C:E5:35:E9:4F:55:52:3F:94:EB:0E
            X509v3 Authority Key Identifier:
                keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7c:24:1f:61:1b:f7:de:13:8a:80:38:ed:15:c9:76:19:9e:
         66:bd:9a:f0:cd:4c:9c:12:88:d3:8b:55:c4:1e:6e:22:09:35:
         03:cd:08:8d:00:14:69:29:aa:19:54:8d:ad:fc:31:b0:62:b2:
         aa:86:dc:bc:d3:b3:11:bd:85:9b:65:d8:12:65:03:f8:9a:e1:
         77:e9:27:4e:c2:4b:5c:8b:bc:13:bf:26:18:e7:08:ae:2f:66:
         72:ea:f1:2a:c8:0a:f2:d5:9d:cc:4d:d0:ce:e6:0c:3c:03:1d:
         a8:d3:7b:da:68:b7:8e:09:68:fe:c2:76:9b:82:68:52:9b:34:
         66:c3:ae:67:6b:13:e4:ad:90:4f:ba:6f:d0:ba:26:6a:12:2a:
         a8:75:17:02:b8:2b:e6:b2:f4:a9:13:3a:d0:16:3b:c9:cf:72:
         9e:9b:5d:d9:c0:65:f8:7f:43:18:9f:91:0a:3c:4a:12:56:96:
         a9:e4:5e:88:8c:08:db:a7:58:c2:4c:da:34:8e:7a:d8:03:52:
         30:a5:26:2c:2c:f9:bb:a3:2c:46:8e:b6:7d:d3:d4:b3:37:6f:
         97:9f:2d:05:9d:3b:fe:be:c9:9d:a8:4a:a9:9f:b7:cc:a6:a4:
         43:2f:70:62:da:33:dd:6a:96:45:6f:13:23:71:34:61:f7:09:
         0b:74:56:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:15 2026 by rpki-client