Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File:                     4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier:          5IVjTxC28EVB/udJLeCqk7BDxUeZcBKQZMD3/qSN0vc=
Subject key identifier:   24:C9:5C:E5:F6:CE:23:DF:19:07:EA:2E:2E:4F:FC:EE:79:D8:9F:27
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer:       /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial:       01A13ECBC6149F2E9FD14107AEE7EE65E371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number:          0E4A
Signing time:             Thu 15 Oct 2026 09:01:44 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:44 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:44 +0000
Files and hashes:         1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: KyDtcjb8qcPX1IXhoR7YTb+vQWsYYOJkYpBBPcqLC2s=)
                          2: UWX8SxCjwL_qmxdOe6nySrZQC84.roa (hash: D5R5Nyowo4jjOW+4uW1uT9NqCdmsnMIgdkwB6H1oOfI=)
                          3: vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa (hash: 8oO/bPo+96+JLDumliudhdJVxtG8gpJVeHN/Dwo+7JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:c6:14:9f:2e:9f:d1:41:07:ae:e7:ee:65:e3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
        Validity
            Not Before: Oct 15 09:01:44 2026 GMT
            Not After : Oct 16 09:01:44 2026 GMT
        Subject: CN=24c95ce5f6ce23df1907ea2e2e4ffcee79d89f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:08:85:42:88:2b:52:ba:7c:17:ed:aa:4a:
                    5c:76:14:3c:ba:a5:bf:71:58:b7:55:e9:ef:12:85:
                    e5:e3:de:c1:55:53:8c:04:2b:8b:14:d7:dd:7f:78:
                    06:81:57:81:3e:6b:65:b5:0c:48:10:db:1a:09:94:
                    ca:a0:aa:c4:34:82:47:1a:04:20:82:91:24:18:f3:
                    07:31:ef:48:4a:0f:1c:d8:97:f8:94:b9:66:d7:0b:
                    78:38:f6:a0:4e:74:85:d9:b8:6a:fb:dd:40:95:7f:
                    1c:a4:92:38:22:73:a7:f9:88:ce:c8:a2:85:d2:ae:
                    b7:9f:bb:ff:ca:fe:95:89:5f:25:ee:7c:a2:fd:b3:
                    e2:b1:e4:75:88:f6:da:7c:26:92:83:ab:48:86:8d:
                    00:1e:d1:47:05:7d:a0:dc:c6:20:60:ae:c6:bc:f3:
                    dd:ce:d1:e3:76:25:f9:85:92:98:29:75:32:97:a8:
                    fb:0c:b1:22:bc:d5:d4:02:68:b4:d9:6a:d1:ad:5f:
                    ce:86:40:f2:2a:42:7a:f5:56:5b:40:17:e6:cf:a5:
                    35:7a:9f:d6:cc:34:05:33:0b:5a:84:e4:e7:39:ae:
                    58:e0:66:ad:11:7e:ac:3d:36:82:94:83:1b:1b:40:
                    8c:66:05:12:22:20:2b:61:3c:10:5b:e7:2e:56:d6:
                    fe:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C9:5C:E5:F6:CE:23:DF:19:07:EA:2E:2E:4F:FC:EE:79:D8:9F:27
            X509v3 Authority Key Identifier:
                keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:be:29:1e:23:eb:42:79:b4:21:bc:b0:a9:22:d0:c1:6f:b1:
         9b:18:06:90:bd:55:6c:db:6b:26:ef:bf:82:97:f4:12:3c:01:
         9d:59:5a:f5:1d:20:dc:1a:c1:95:f5:01:6b:42:c5:1d:67:39:
         e4:56:bb:4c:97:93:75:84:3a:2f:3b:56:25:67:d8:65:ff:99:
         2f:2a:af:bb:f3:9a:ca:44:ab:e2:48:3e:c8:d4:11:d8:d6:43:
         b7:a2:40:c4:35:81:71:84:9d:8a:f2:b2:8a:7d:29:77:f7:56:
         84:1f:6a:1d:d4:6f:29:92:a4:3b:19:f5:3e:e0:62:4a:9d:2e:
         34:6f:bc:46:44:ee:27:f8:44:4f:c1:3c:f1:bf:44:e0:99:63:
         8b:75:54:ee:12:49:bf:d5:43:68:de:24:e7:87:4d:3f:bb:36:
         f1:6f:8c:c0:1b:7e:99:b2:67:52:90:4e:12:26:b4:06:8c:69:
         1c:11:b6:23:48:f6:cd:2c:01:41:0f:3e:a7:97:7b:44:3e:1b:
         93:c3:5c:f2:d3:19:7b:d9:83:a1:9f:18:e2:f0:2f:1f:c5:a0:
         c7:74:13:cc:42:96:98:ae:56:42:62:18:95:87:11:92:b3:69:
         81:87:51:4a:8e:0b:47:1c:d6:6e:bb:7e:df:35:46:97:e8:be:
         29:80:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:02 2026 by rpki-client