Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
File:                     46ttsqw26Ykzq5momk2cFp6l77s.mft (raw, json)
Hash identifier:          yErGOSVL9gF9YNFboiPPvaJGO829MW7gV//Uf5UkGiw=
Subject key identifier:   71:29:52:86:0F:EE:E2:B3:63:D9:08:C9:11:F6:3B:8C:72:6A:25:B5
Authority key identifier: E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
Certificate issuer:       /CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
Certificate serial:       01A0016FF79EF7076BBEFCBC0BAB3124B799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
Manifest number:          18E2
Signing time:             Fri 14 Aug 2026 18:01:50 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:50 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:50 +0000
Files and hashes:         1: 46ttsqw26Ykzq5momk2cFp6l77s.crl (hash: U9R0JS0zJ9JG6bpAFAOUd5rWV1VIyvitkLQ9ZoATsjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:f7:9e:f7:07:6b:be:fc:bc:0b:ab:31:24:b7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
        Validity
            Not Before: Aug 14 18:01:50 2026 GMT
            Not After : Aug 15 18:01:50 2026 GMT
        Subject: CN=712952860feee2b363d908c911f63b8c726a25b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:b6:aa:1e:9a:60:90:c9:29:20:04:ae:f4:
                    69:b2:8b:9b:27:51:44:eb:b8:ac:8d:42:dc:d5:0a:
                    78:54:90:cb:7c:a7:60:fa:28:7f:ba:4d:97:b9:66:
                    89:f5:c1:93:68:72:97:f7:5b:f8:3e:dd:14:51:dc:
                    c2:88:04:d2:e4:3c:bb:64:47:f2:6a:ee:c4:bc:da:
                    cd:a5:f8:0e:eb:b9:59:5e:8f:7b:04:9e:06:92:b3:
                    ac:76:60:a3:e1:75:91:52:c4:ac:50:b5:fc:91:36:
                    17:20:4b:ba:16:ad:d0:bc:f1:c6:d5:80:62:4a:3e:
                    1f:0b:c0:29:bd:48:11:5d:4c:59:13:fa:f5:a7:b3:
                    80:55:3d:5a:0b:a4:c2:7c:9c:cc:07:8f:50:58:86:
                    79:cd:fa:72:61:c7:4d:10:3e:a4:b5:01:f3:bd:9b:
                    07:ce:da:bf:74:69:f9:12:70:12:17:fd:e5:64:20:
                    5b:72:54:a0:58:9a:4f:ed:fd:18:de:48:c2:ee:4a:
                    95:af:8e:af:1b:e4:02:b2:e1:b7:eb:3b:62:da:d9:
                    77:73:46:3e:8d:bb:bd:98:2f:58:64:58:13:ad:b8:
                    bb:b1:b4:1e:11:ea:0a:cc:e1:84:0a:77:5e:f0:c9:
                    a3:94:dc:e7:81:35:2a:7e:49:eb:55:ac:52:cd:7d:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:29:52:86:0F:EE:E2:B3:63:D9:08:C9:11:F6:3B:8C:72:6A:25:B5
            X509v3 Authority Key Identifier:
                keyid:E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:1d:6a:7c:8f:8a:8c:a3:e7:32:d0:0c:15:6a:c3:37:fc:6b:
         81:1a:eb:0a:05:3c:37:f3:3d:53:06:28:d5:92:42:9d:44:62:
         7e:b7:4f:27:9f:21:01:57:a2:49:e2:64:76:c3:40:27:e9:ec:
         04:34:ab:d2:71:76:ba:d1:c8:9c:ba:95:61:22:55:65:3a:59:
         66:4c:2e:95:76:18:d5:1c:8d:62:8b:1b:24:41:5b:73:cb:40:
         dc:1b:3e:68:6c:27:ec:65:94:1a:48:80:7e:b7:12:41:08:95:
         c0:67:58:aa:4d:08:cd:46:46:9d:0c:9b:37:65:3c:81:ff:51:
         29:5f:96:e3:be:51:05:e4:b7:9c:78:e9:9f:a9:6b:37:a7:5f:
         d8:2c:ec:48:75:88:88:09:e8:4b:b9:cd:cc:99:42:a0:7d:89:
         09:5c:fc:c7:54:00:d8:90:73:f8:f0:0b:96:1c:42:a0:e6:99:
         51:ee:77:cd:81:9a:c5:db:69:f6:cf:46:a5:c2:14:53:bd:9b:
         e6:89:36:30:76:de:11:f6:a4:eb:93:42:a7:eb:02:15:a7:35:
         73:e0:14:89:f4:3f:e4:bf:ef:e9:6f:37:b2:b6:be:f8:60:ee:
         87:9d:f0:19:ae:19:46:28:c0:94:fb:51:a7:bc:19:38:22:63:
         fd:68:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:49 2026 by rpki-client