Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft
File:                     4H4P7Wh4uZCgYJWJih2QakdN910.mft (raw, json)
Hash identifier:          4Z9ehLa8ej4Jb54v55b/yG+te+QUTNj0slFFaLn+pbA=
Subject key identifier:   53:EB:56:F8:97:73:FC:B4:EC:DA:3E:B1:72:E2:6A:06:77:5B:C7:DF
Authority key identifier: E0:7E:0F:ED:68:78:B9:90:A0:60:95:89:8A:1D:90:6A:47:4D:F7:5D
Certificate issuer:       /CN=e07e0fed6878b990a06095898a1d906a474df75d
Certificate serial:       01A10813BEA76A1032FA374148145478EC72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft
Manifest number:          0102
Signing time:             Sun 04 Oct 2026 18:01:14 +0000
Manifest this update:     Sun 04 Oct 2026 18:01:14 +0000
Manifest next update:     Mon 05 Oct 2026 18:01:14 +0000
Files and hashes:         1: 4H4P7Wh4uZCgYJWJih2QakdN910.crl (hash: P6ODGWrP2bz7xXO5TppNE1v09u1XhzceKYxgzCwgSxA=)
                          2: PVwPhYKLtJ1NqdIeINS1i-PMklo.roa (hash: LLpYJpjoR2ZiSBq/lFV1+fNxk1oL13m8O/kJtCUEbxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:13:be:a7:6a:10:32:fa:37:41:48:14:54:78:ec:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e07e0fed6878b990a06095898a1d906a474df75d
        Validity
            Not Before: Oct  4 18:01:14 2026 GMT
            Not After : Oct  5 18:01:14 2026 GMT
        Subject: CN=53eb56f89773fcb4ecda3eb172e26a06775bc7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:41:33:72:e9:57:d9:29:f0:ed:3f:60:98:
                    12:af:96:9b:9f:f8:f9:c3:2c:7d:84:99:bb:dd:9a:
                    10:33:55:81:99:36:a2:11:2e:5c:76:bc:45:43:bd:
                    ce:4e:90:d8:29:ec:bd:be:42:ff:74:e9:5b:a5:d7:
                    25:83:ed:dc:3d:19:8c:84:51:95:10:45:00:7e:e9:
                    8f:b2:bc:4a:d0:34:88:39:f0:cf:f9:5e:59:34:4b:
                    0d:43:13:77:2e:03:19:84:d7:ec:43:27:70:b7:46:
                    9b:94:16:2c:4f:01:44:fa:9d:90:10:3d:70:59:7a:
                    64:2c:cd:20:a9:60:51:c0:64:f8:24:56:e2:03:d4:
                    14:c3:ad:ee:ec:e9:cd:65:72:66:03:09:f3:dd:c1:
                    73:9f:70:d9:d3:d7:86:e3:10:b2:db:db:fe:ad:77:
                    6a:26:41:42:76:65:53:9f:57:7e:34:ff:7b:3e:66:
                    78:cf:f6:bb:c3:86:b8:2e:e6:ca:5f:f6:11:b1:4b:
                    c0:41:0a:c8:3b:df:c1:b0:26:87:c1:09:37:4b:a3:
                    50:28:64:0f:3e:95:9d:d4:cc:9f:e7:5b:04:be:da:
                    b0:eb:70:56:27:e0:79:ac:21:fa:ca:61:98:37:9b:
                    be:14:10:dc:c5:06:18:08:09:99:fc:3b:20:15:76:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EB:56:F8:97:73:FC:B4:EC:DA:3E:B1:72:E2:6A:06:77:5B:C7:DF
            X509v3 Authority Key Identifier:
                keyid:E0:7E:0F:ED:68:78:B9:90:A0:60:95:89:8A:1D:90:6A:47:4D:F7:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:14:18:9a:2e:53:5d:3f:01:30:60:29:3f:7a:1d:03:95:38:
         08:bc:aa:53:82:b3:ad:2b:5b:52:4c:e9:36:83:e0:4f:86:e2:
         8f:03:2b:84:b7:74:26:53:0f:31:fc:ca:3f:be:31:a7:25:28:
         b2:a2:02:1e:26:03:54:31:06:e9:f4:54:c5:be:1b:6f:86:1b:
         a6:84:d4:30:46:fe:d8:9f:2e:aa:00:2e:36:22:4c:4a:96:b4:
         23:d9:51:ea:34:e6:b1:fe:7c:56:ea:ba:86:da:5b:00:29:ac:
         0b:70:06:0c:a3:1f:6b:b2:bc:c6:b9:4a:af:90:08:23:ca:98:
         b0:d2:a6:dc:06:d1:a6:40:e5:71:0b:ed:a4:94:dc:12:9c:2d:
         9e:f8:3f:34:08:37:11:65:a8:13:7a:44:fe:80:b6:f3:03:58:
         86:61:cb:dc:46:5c:7b:d4:75:5d:a8:c5:46:e8:dc:7b:2e:c2:
         82:01:31:76:4e:6c:a0:e6:52:a2:5e:62:9d:50:10:c5:dc:ac:
         81:2e:4a:44:87:ee:62:3f:a3:f1:02:d8:e1:53:1f:a7:9e:fe:
         27:e5:b6:a4:b0:2f:6f:12:ef:bd:c8:41:08:3b:7f:ae:9f:77:
         16:c8:23:c8:cd:38:f9:a8:82:a9:b3:de:d1:67:9a:f7:54:41:
         53:56:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:58:32 2026 by rpki-client