Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
File:                     P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft (raw, json)
Hash identifier:          wx7Mj5mfO/Qu2dGHG7rVob1Sl9XCvlpgZeY1bsC2Sp4=
Subject key identifier:   E5:8C:CA:A5:91:90:E8:13:0B:F4:1B:0D:28:DF:F9:AB:A4:6A:9D:F7
Authority key identifier: 3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
Certificate issuer:       /CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Certificate serial:       01A15A421C299C34B7CF5C87B956F961D5C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
Manifest number:          1AB4
Signing time:             Tue 20 Oct 2026 17:00:44 +0000
Manifest this update:     Tue 20 Oct 2026 17:00:44 +0000
Manifest next update:     Wed 21 Oct 2026 17:00:44 +0000
Files and hashes:         1: P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl (hash: hSXNxnXmz5BVhL+xHZrF+bTrQgwBlYlospNUufjqyFs=)
                          2: ncPNkpuerXDPVvhOagmz6DGK4F4.roa (hash: EzW2eYsud+NOEa0rR95TqZjMJsbs++g10GjrVu+pH+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5a:42:1c:29:9c:34:b7:cf:5c:87:b9:56:f9:61:d5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
        Validity
            Not Before: Oct 20 17:00:44 2026 GMT
            Not After : Oct 21 17:00:44 2026 GMT
        Subject: CN=e58ccaa59190e8130bf41b0d28dff9aba46a9df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:12:6a:7b:77:97:3d:23:f8:b4:89:89:54:
                    32:9a:62:78:0f:b3:ab:aa:36:4a:0a:09:a3:18:83:
                    04:01:ad:32:6c:6d:08:0b:14:94:d8:8a:e4:ac:ab:
                    88:a2:a5:86:75:be:65:10:ae:a8:29:59:2b:09:9d:
                    ae:b3:8e:73:1e:f0:44:ca:3a:48:f6:93:0e:27:9f:
                    ae:52:b1:c8:74:6c:68:99:fb:45:fa:ef:46:4d:0b:
                    fd:18:64:f9:35:2d:ac:3e:40:17:62:43:7f:63:47:
                    17:ce:26:26:94:03:81:1c:1f:fa:c7:5d:ca:65:79:
                    0c:e1:b5:34:f1:f1:ac:bd:00:db:f2:c3:1e:97:69:
                    12:90:10:b6:71:74:39:42:37:b8:c4:73:f7:da:3e:
                    94:c5:ed:2a:17:8f:86:64:53:e0:28:f4:c3:c9:93:
                    74:a2:2f:29:72:cd:3d:19:24:f9:63:ec:fd:cf:14:
                    b9:f2:fb:fa:ad:c7:42:54:9b:1d:c0:85:a4:2e:87:
                    30:7a:b0:b4:a9:8f:00:37:4d:01:9c:ed:7f:b3:9d:
                    e9:af:86:a7:b9:c1:e5:7b:4d:26:2e:73:cf:2d:5a:
                    04:8d:d8:96:26:7f:eb:7b:9c:7e:8b:66:d2:af:af:
                    f1:4d:f1:ce:cf:93:bc:d8:88:cf:ef:9c:59:c2:fb:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8C:CA:A5:91:90:E8:13:0B:F4:1B:0D:28:DF:F9:AB:A4:6A:9D:F7
            X509v3 Authority Key Identifier:
                keyid:3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:63:18:3b:29:42:70:65:06:ef:5a:6a:ad:fd:1f:17:99:5b:
         95:61:6c:5a:ae:eb:2f:f0:d7:2c:8f:ca:3d:20:da:45:45:7e:
         43:1e:29:7f:53:c6:f4:27:33:45:0b:02:47:43:e0:4d:39:6d:
         d5:4f:c5:25:e4:11:15:14:ec:a5:7b:39:8d:39:3c:10:34:aa:
         84:a0:10:3b:25:2f:6e:13:f9:98:45:6e:9a:9e:2b:74:51:e9:
         ad:c0:55:eb:0b:48:58:3c:a2:0f:c5:df:80:f8:02:42:d7:ed:
         a2:83:33:15:42:56:06:b8:de:db:66:c5:e5:e2:da:0d:37:ca:
         26:29:d1:53:30:a3:c5:43:91:79:27:9e:f2:cb:32:22:3b:8b:
         34:2f:6c:7d:ca:c0:a7:d9:af:9b:e8:db:58:84:eb:5e:55:2f:
         9c:7d:f8:ef:5c:24:87:25:c0:8a:50:e9:c9:41:2c:70:f5:91:
         cf:53:da:ea:8d:2a:28:ef:80:af:3f:5d:df:d6:99:bf:f6:81:
         56:a4:b1:88:dd:c7:6e:43:79:02:f7:8d:ed:64:69:f5:79:80:
         f5:27:5d:4d:fc:ab:93:e1:60:0a:ee:b0:5e:88:69:0c:25:9b:
         e3:18:77:1b:d0:28:e6:35:ba:49:bf:6e:aa:ab:d6:fc:3a:ac:
         69:31:44:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFaQhwpnDS3z1yHuVb5YdXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmODFhOGU4Yzc1YjU4ZjdkMWVmZDRjM2U2NTIyZDI3ODYz
ZjljY2YwHhcNMjYxMDIwMTcwMDQ0WhcNMjYxMDIxMTcwMDQ0WjAzMTEwLwYDVQQD
EyhlNThjY2FhNTkxOTBlODEzMGJmNDFiMGQyOGRmZjlhYmE0NmE5ZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3ASant3lz0j+LSJiVQymmJ4D7Or
qjZKCgmjGIMEAa0ybG0ICxSU2IrkrKuIoqWGdb5lEK6oKVkrCZ2us45zHvBEyjpI
9pMOJ5+uUrHIdGxomftF+u9GTQv9GGT5NS2sPkAXYkN/Y0cXziYmlAOBHB/6x13K
ZXkM4bU08fGsvQDb8sMel2kSkBC2cXQ5Qje4xHP32j6Uxe0qF4+GZFPgKPTDyZN0
oi8pcs09GST5Y+z9zxS58vv6rcdCVJsdwIWkLocwerC0qY8AN00BnO1/s53pr4an
ucHle00mLnPPLVoEjdiWJn/re5x+i2bSr6/xTfHOz5O82IjP75xZwvt3GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWMyqWRkOgTC/QbDSjf+aukap33MB8GA1UdIwQY
MBaAFD+BqOjHW1j30e/Uw+ZSLSeGP5zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lYjdmN2UtYTg4MC00OTdiLWI1NGMt
YjcwOGM0MGE2NjdmLzEvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lYjdmN2UtYTg4MC00OTdiLWI1NGMtYjcwOGM0MGE2Njdm
LzEvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmMYOylC
cGUG71pqrf0fF5lblWFsWq7rL/DXLI/KPSDaRUV+Qx4pf1PG9CczRQsCR0PgTTlt
1U/FJeQRFRTspXs5jTk8EDSqhKAQOyUvbhP5mEVump4rdFHprcBV6wtIWDyiD8Xf
gPgCQtftooMzFUJWBrje22bF5eLaDTfKJinRUzCjxUOReSee8ssyIjuLNC9sfcrA
p9mvm+jbWITrXlUvnH3471wkhyXAilDpyUEscPWRz1Pa6o0qKO+Arz9d39aZv/aB
VqSxiN3HbkN5AveN7WRp9XmA9SddTfyrk+FgCu6wXohpDCWb4xh3G9Ao5jW6Sb9u
qqvW/DqsaTFEHw==
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:47:02 2026 by rpki-client