Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File:                     l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier:          78x1NAFc6m8VuLVkKuFnvNXOakbZOv4w3MYHp+esSjk=
Subject key identifier:   D3:90:24:8C:DC:FC:7F:92:9F:2E:E3:B0:E6:75:D5:93:74:97:08:CA
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer:       /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial:       01A15AAFD4346F628FE9079E880315252EE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number:          098E
Signing time:             Tue 20 Oct 2026 19:00:34 +0000
Manifest this update:     Tue 20 Oct 2026 19:00:34 +0000
Manifest next update:     Wed 21 Oct 2026 19:00:34 +0000
Files and hashes:         1: Ul6xnaloPJqarA71Lp8dEgaZCiY.roa (hash: TaAyvUHi9RSjwAuHu0afyte32UNxt8tXqYjbQRr7Gpg=)
                          2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: TTp+iFtIW+qQhlcgXNwauAWQBIpPRqt0AxXsziWVkNg=)
                          3: o07AL4hoPWhIQ_PilCKmUZTA81o.roa (hash: dz2qz7xDuDCVAKsXdQvYhNbSC2RVScmT9UhnlSmU23E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5a:af:d4:34:6f:62:8f:e9:07:9e:88:03:15:25:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
        Validity
            Not Before: Oct 20 19:00:34 2026 GMT
            Not After : Oct 21 19:00:34 2026 GMT
        Subject: CN=d390248cdcfc7f929f2ee3b0e675d593749708ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:9c:0d:08:14:fe:39:b0:b1:5e:99:d8:c0:
                    cb:e0:28:33:ca:20:78:b9:36:f9:f8:74:2d:80:50:
                    80:5c:fa:d1:e7:35:16:1a:44:d6:c3:68:a7:96:52:
                    9d:5a:93:b1:2f:74:77:dc:0f:b7:87:cf:14:90:22:
                    bc:52:0e:04:ca:f7:fd:4b:cc:3a:e8:a0:6f:4a:66:
                    a3:9f:88:f1:fe:ae:eb:36:ec:a4:6f:51:d3:77:3a:
                    d9:71:95:c7:2f:1f:24:d9:6e:b1:32:5b:e3:c9:6b:
                    ea:55:18:47:27:a8:f5:bb:3b:39:11:07:6b:87:4e:
                    c0:df:6e:03:f7:53:02:c9:62:e7:9d:ab:f2:6f:fd:
                    76:f1:45:63:51:6f:3b:77:ca:07:55:4a:91:5c:71:
                    7b:e0:48:6c:46:f9:d5:18:76:a2:5d:0a:d7:43:22:
                    c0:bb:f7:91:f6:4b:42:4b:d9:0a:37:12:9f:a1:03:
                    bd:e1:fc:fa:c5:72:05:6f:f6:85:38:16:89:89:f6:
                    fe:72:ed:e1:8e:5d:1a:5b:f3:b9:89:e8:53:37:fa:
                    9c:74:92:5e:79:6c:ca:27:d0:bf:36:d9:90:70:c2:
                    7c:e4:50:d7:bc:ed:65:9c:c6:7a:70:e0:c3:fc:60:
                    51:a5:fc:7f:a8:23:40:77:09:5f:5b:cb:dc:1c:12:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:90:24:8C:DC:FC:7F:92:9F:2E:E3:B0:E6:75:D5:93:74:97:08:CA
            X509v3 Authority Key Identifier:
                keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:91:6d:0d:ef:a2:4c:3c:ed:9d:60:e9:97:4e:cd:6d:f6:79:
         cd:e6:53:58:c7:39:df:4f:4a:49:39:e9:d0:94:1a:30:e2:b8:
         bb:16:27:70:ae:40:73:20:ef:16:af:e8:88:74:5a:6d:d5:b1:
         3e:92:54:41:86:2c:1a:1e:df:d8:22:fe:e1:2a:99:a6:f8:44:
         9c:a4:29:aa:7d:9a:1d:e6:8f:9a:ec:d1:d8:da:80:35:ad:cf:
         78:a0:8d:8e:eb:a6:63:d6:27:6b:50:93:b4:14:ae:01:24:01:
         2d:ea:a7:46:cd:0a:ae:0a:b7:ba:f0:e3:6a:e1:93:20:d8:f9:
         bc:0f:4d:80:f1:8c:78:56:a5:a4:af:95:e3:98:62:f2:b0:25:
         3e:eb:ff:ab:96:aa:88:bc:51:00:35:21:dd:aa:66:1c:a3:aa:
         d5:c7:3d:6d:a0:a2:34:99:d2:15:b7:04:1f:f9:a0:a5:2e:d6:
         ca:47:50:8f:77:ed:61:1c:70:cd:68:b6:fd:82:25:c7:01:e0:
         1c:50:5f:86:5f:ca:a0:84:e0:ce:18:a5:af:cc:20:df:37:94:
         40:14:91:e1:ec:69:09:76:af:11:92:cc:cf:ad:b8:50:2f:7d:
         b5:c7:8d:bd:3d:a7:1c:be:8c:7a:e6:c4:21:b2:5b:85:3e:e3:
         ef:1d:ac:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:32:39 2026 by rpki-client