Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File:                     4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier:          ycyZQRp9wu8osYd8MUa7qoMTsAZIcsxgKeK7VXAIkJs=
Subject key identifier:   5B:C5:25:F8:72:DD:00:2F:F1:35:BB:10:2D:13:5A:A4:19:4A:8C:84
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer:       /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial:       01A140B9CB1D216A208340546CFA76DEC27E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number:          077B
Signing time:             Thu 15 Oct 2026 18:01:20 +0000
Manifest this update:     Thu 15 Oct 2026 18:01:20 +0000
Manifest next update:     Fri 16 Oct 2026 18:01:20 +0000
Files and hashes:         1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: iEU/XESLX9Bxe2f9x+F0ICmhE+K5JGE1F1X4soyo3VI=)
                          2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:b9:cb:1d:21:6a:20:83:40:54:6c:fa:76:de:c2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
        Validity
            Not Before: Oct 15 18:01:20 2026 GMT
            Not After : Oct 16 18:01:20 2026 GMT
        Subject: CN=5bc525f872dd002ff135bb102d135aa4194a8c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2d:9d:d6:e6:3b:f4:b1:b9:9b:b1:fd:99:72:
                    4d:75:13:be:38:0d:d1:88:1c:35:16:0c:bc:57:0a:
                    75:f2:82:31:94:3b:49:cc:ee:19:44:50:b5:ec:18:
                    cc:57:c3:52:a8:99:74:03:e3:78:be:0f:2d:07:e8:
                    9b:24:75:ce:2e:bf:9a:c0:31:b8:07:ae:4e:74:9e:
                    e3:ed:5e:23:65:be:17:51:70:ba:1f:03:b6:d5:92:
                    5e:2c:08:12:23:63:b5:a7:58:23:82:19:65:24:06:
                    00:0d:e3:68:46:0b:fc:cf:a6:4f:80:6b:57:73:7c:
                    23:74:04:e0:0a:c8:cd:4e:db:53:2c:74:b2:0b:73:
                    db:fe:8b:de:99:66:00:6e:62:95:fa:03:2c:8b:60:
                    5d:92:fe:93:5e:bc:d1:31:1c:01:ea:3b:82:64:ac:
                    56:71:d1:16:f7:11:b0:9f:f2:ed:47:75:c4:81:16:
                    e4:7a:45:ef:4a:92:28:c0:b0:39:06:b9:aa:fc:50:
                    fd:99:05:fa:bf:93:e8:dd:dc:f3:32:9c:73:42:9f:
                    5e:e3:ee:d7:e0:15:1a:56:44:a3:a7:6b:dc:b3:4b:
                    cc:ef:88:79:5a:1c:00:fb:fd:28:04:df:0b:c9:d3:
                    ef:7b:94:c6:8d:6b:2d:e7:52:a6:64:52:00:d1:eb:
                    1f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C5:25:F8:72:DD:00:2F:F1:35:BB:10:2D:13:5A:A4:19:4A:8C:84
            X509v3 Authority Key Identifier:
                keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:22:74:43:f8:b8:99:8f:f8:48:60:a7:fd:45:7b:c5:29:cf:
         05:35:a3:d4:56:3a:cb:4e:fa:ef:3c:c6:29:3e:d4:2f:57:2f:
         6a:8c:d0:24:2d:02:3b:f5:73:27:6b:d2:87:10:48:81:4e:7f:
         0e:e9:ba:d7:85:4c:99:3b:77:58:d6:fc:d0:66:3d:ac:59:07:
         d7:14:ff:2c:4a:1f:c4:e1:c6:c2:05:eb:69:96:a6:cf:42:d3:
         63:e4:75:1a:94:c2:cd:63:8d:5e:8f:49:22:56:b0:05:0b:57:
         82:2c:20:00:3f:66:b0:c9:f1:d3:ce:20:de:fa:68:93:40:bc:
         41:2a:5b:b5:63:8d:6b:2d:c4:c5:4c:1e:32:0e:33:26:df:9f:
         46:a5:b5:8b:c1:90:39:10:23:11:e7:97:a4:ff:30:fc:31:dc:
         ff:44:63:7c:dc:ba:36:05:c7:b1:5e:ab:57:dc:a1:13:44:57:
         f6:89:22:ac:5c:3c:b1:6d:9c:f8:3a:10:2d:46:ff:aa:f0:2c:
         b1:2e:f6:d2:e3:e9:e3:b9:46:1c:b7:14:96:8f:57:c7:a8:29:
         af:61:a9:40:9a:80:0b:9b:33:52:ab:81:1b:ba:50:ce:de:df:
         f6:e9:04:1b:1b:1b:ab:c2:49:b0:fb:0d:da:88:e8:47:aa:35:
         cb:12:3f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:56 2026 by rpki-client