Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File:                     4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier:          g9nhYZkpkBupCBLyEOfZcHzb/GYuvGYHuXqMNW6vuD4=
Subject key identifier:   5F:7C:2B:3B:8C:72:A2:AA:6B:5F:D4:42:BA:D7:D2:A1:B2:27:5D:CF
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer:       /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial:       01A13E94BE844F1DAE84C5351DF9AEFC2A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number:          1AA7
Signing time:             Thu 15 Oct 2026 08:01:37 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:37 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:37 +0000
Files and hashes:         1: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: Vp9eAgSPUWS7sp7kNdFSjflKBxB7AMOdTmzXq67ACDw=)
                          2: TglFPGNOO08n6CcIWPtZA1IiMQ4.roa (hash: /q1UZrCdKL66jU2/r5RlUBwTKqwDKZiHeHHzwJ0UJjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:be:84:4f:1d:ae:84:c5:35:1d:f9:ae:fc:2a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
        Validity
            Not Before: Oct 15 08:01:37 2026 GMT
            Not After : Oct 16 08:01:37 2026 GMT
        Subject: CN=5f7c2b3b8c72a2aa6b5fd442bad7d2a1b2275dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d6:c2:4f:c6:88:22:0a:dc:75:95:e0:56:73:
                    94:a0:ec:5e:36:ca:fa:6a:4e:a7:bd:0a:c4:ac:9a:
                    65:76:e0:73:06:9a:b7:da:84:d8:0b:3b:8e:92:55:
                    30:03:a9:57:99:b2:ed:f2:96:23:12:d6:7c:7c:6d:
                    2e:04:0a:81:d9:ad:c7:e1:7e:a4:09:58:45:ce:49:
                    05:b8:e3:88:fe:b1:f6:0f:81:99:be:de:fb:52:a5:
                    8a:e1:42:e5:35:0f:8b:fd:37:ba:d5:4b:1f:a2:59:
                    a7:05:dc:fc:e0:0e:b8:fb:24:bb:9a:94:c4:c1:00:
                    a1:76:1f:4d:61:41:a5:23:08:af:94:c5:71:5f:81:
                    8f:4c:7e:1b:25:b7:46:90:09:19:0d:bd:ef:52:56:
                    d8:68:f7:bb:f4:53:c4:8c:54:8b:30:1b:d7:81:50:
                    6d:24:9a:94:45:3f:2f:d8:86:93:b9:69:2e:29:81:
                    05:cf:7a:7f:f3:f5:3c:b6:3e:97:8b:bf:b8:7d:15:
                    51:92:c6:65:cb:4a:4d:1d:16:52:ae:ee:f2:90:10:
                    95:a6:57:28:c3:0c:9b:ca:b8:e3:f3:74:d9:f4:96:
                    48:b6:41:5f:8d:21:ef:3d:34:7e:f9:83:1b:12:4b:
                    13:d7:89:b0:18:6f:81:36:b0:5f:92:99:fd:6a:30:
                    80:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7C:2B:3B:8C:72:A2:AA:6B:5F:D4:42:BA:D7:D2:A1:B2:27:5D:CF
            X509v3 Authority Key Identifier:
                keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a4:26:76:b3:05:f4:cf:2f:d8:8c:7c:ef:a8:e5:d5:ee:f6:
         c2:c6:1b:47:c2:0c:10:68:d7:0d:f9:c7:c1:25:4d:dd:16:bd:
         0b:d4:61:aa:bf:cc:18:48:4a:8a:61:80:ec:84:51:1c:90:f1:
         94:94:be:c8:f3:18:9e:d3:34:7d:23:04:1d:5f:d1:d5:17:b5:
         d0:02:3a:6c:fe:16:7f:67:b6:37:ad:9f:e0:ea:5e:70:ec:a0:
         17:9d:4a:80:a8:1b:18:f9:c5:63:25:5d:19:5c:70:3c:b2:dc:
         5d:15:4d:ce:49:45:98:94:a2:25:36:89:35:d2:10:37:40:28:
         51:8c:d9:d5:82:3e:4a:f8:60:f0:1a:9c:8b:66:62:28:94:43:
         32:2b:f2:3c:2d:d1:9c:d4:69:9b:6c:28:85:bb:ec:1a:08:7c:
         3a:d6:f2:43:2f:05:1a:e4:87:e3:9d:0c:da:07:cf:34:b4:3e:
         64:f5:e6:3c:56:57:1d:ed:8c:c2:19:3b:c2:5a:7a:34:11:4b:
         f3:24:6d:bb:48:8a:f8:17:f7:c8:f6:62:04:bf:0f:47:5e:a2:
         b7:f9:27:f6:d8:0b:84:0a:76:b2:85:7f:a7:bf:c8:a0:63:01:
         d1:33:a3:45:d3:36:95:81:d6:1e:f2:a3:45:78:60:f0:39:55:
         09:8e:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:14 2026 by rpki-client