Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
File:                     e4jUpKsYpZtmTauv2ziA3DWyK5E.mft (raw, json)
Hash identifier:          Fx1jqTuzinpFCZTek20RnQt5MZAwDkzv64DFVCq+k8o=
Subject key identifier:   28:49:2B:53:03:0C:A9:AF:50:EF:DF:B9:E4:6B:0F:7F:0C:80:C9:1E
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Certificate issuer:       /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial:       01A123F8FDAC67D957024B6DEED4AA08187F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
Manifest number:          1A9D
Signing time:             Sat 10 Oct 2026 04:01:22 +0000
Manifest this update:     Sat 10 Oct 2026 04:01:22 +0000
Manifest next update:     Sun 11 Oct 2026 04:01:22 +0000
Files and hashes:         1: 4SDEWo-xQsKLEV5N5c74kcSp4oo.roa (hash: Mn5HgxK6d1bhThHGyve20eCsHoaIqihBEBC3lrXSKiQ=)
                          2: 9XmTiY_H8jaK8nxNmw6DCXZkrL8.roa (hash: qzv4sP0iawufJ5iQxd2v/qGGI7FMui/kqPe0/MuBNTw=)
                          3: YgTu92EMlSHH6hAx-wKAfH0f5HA.roa (hash: w4NEQ8Pa4tghHvqnWHIsU9oi0/GjMWGF/km3INOctDg=)
                          4: e4jUpKsYpZtmTauv2ziA3DWyK5E.crl (hash: ddEuxRCoEMt2viK6BR9OQeJTDyn+7CsDP7xkCR1PIqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:f8:fd:ac:67:d9:57:02:4b:6d:ee:d4:aa:08:18:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
        Validity
            Not Before: Oct 10 04:01:22 2026 GMT
            Not After : Oct 11 04:01:22 2026 GMT
        Subject: CN=28492b53030ca9af50efdfb9e46b0f7f0c80c91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8a:57:95:07:6f:bf:10:3a:7a:b1:4d:6b:65:
                    2d:7a:be:98:89:b2:91:0b:d2:11:a7:54:9b:5d:4b:
                    0c:7c:33:ec:0e:56:31:ab:64:a0:17:56:28:85:b7:
                    46:9c:05:02:b7:04:50:46:e1:e5:c8:37:f7:1e:9c:
                    68:bf:ff:ee:f1:1d:ef:71:80:6d:c8:86:b7:86:58:
                    f1:3e:e7:50:ff:7d:b8:d8:e3:a9:74:07:74:fb:9d:
                    98:e2:fc:00:47:ca:b8:cd:41:94:c5:23:95:38:68:
                    94:03:9b:a0:06:1b:4c:4a:31:72:d4:e3:23:2a:04:
                    33:03:8b:12:17:40:a6:72:d6:df:12:d3:51:39:d6:
                    71:26:7f:60:45:62:19:99:a3:9e:0b:1f:b4:e9:06:
                    02:65:63:ba:98:76:cd:96:e6:f9:1f:6a:11:89:ae:
                    c2:54:76:72:5d:7f:08:bf:53:ef:1d:56:a4:28:07:
                    fa:0e:e8:70:9f:0f:41:57:5c:e0:b7:f1:af:e0:2e:
                    16:76:f6:04:71:a1:45:c4:c5:3f:92:f5:4a:81:68:
                    06:1f:f6:9f:91:60:94:ef:62:7e:d1:9a:ed:de:5e:
                    d5:27:2a:60:09:ae:44:60:1d:3b:e4:47:f3:63:24:
                    06:03:aa:b1:cc:78:f2:b0:34:29:18:52:1c:17:8a:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:49:2B:53:03:0C:A9:AF:50:EF:DF:B9:E4:6B:0F:7F:0C:80:C9:1E
            X509v3 Authority Key Identifier:
                keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:8a:b5:34:ab:55:db:d4:61:e3:e7:36:25:ba:1d:b4:d9:41:
         5f:4b:78:c6:25:eb:d1:1f:1e:12:00:49:7d:bb:88:1a:4c:22:
         35:3a:33:11:1d:d6:59:29:38:cd:1d:f9:2a:9d:d6:a5:a7:8e:
         89:7a:b6:43:2c:6b:b3:a9:5f:2c:4e:78:bc:02:f4:17:58:f7:
         73:63:e6:ea:85:6b:f3:85:52:78:0f:24:82:75:93:96:8a:49:
         fe:a0:d5:c5:57:f3:d3:eb:86:33:88:e8:47:03:bd:41:c7:89:
         29:e1:70:a9:8e:0f:0d:31:08:82:7f:47:f4:25:05:56:82:e8:
         da:e0:42:69:2b:11:74:b6:d6:b1:c7:d3:fc:b2:d0:d3:a0:db:
         95:d6:07:8f:27:79:77:ba:72:57:b4:67:95:8d:f7:56:bd:31:
         a7:b7:46:63:c0:1b:d4:87:48:87:d0:b2:6a:ff:cb:93:06:4b:
         33:ec:5b:fb:61:e0:c4:2a:d4:44:49:a5:fd:f9:cd:a6:85:cc:
         5c:4c:2c:0b:75:d9:26:68:47:69:84:97:4f:c7:c9:54:f3:af:
         d3:6c:e6:08:55:80:5f:c5:80:c8:72:cb:5a:67:08:73:b2:1b:
         7d:b4:4f:60:27:9a:47:3a:bd:1c:4c:d4:26:ac:7d:d0:a8:c7:
         93:ec:05:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEj+P2sZ9lXAktt7tSqCBh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODhkNGE0YWIxOGE1OWI2NjRkYWJhZmRiMzg4MGRjMzVi
MjJiOTEwHhcNMjYxMDEwMDQwMTIyWhcNMjYxMDExMDQwMTIyWjAzMTEwLwYDVQQD
EygyODQ5MmI1MzAzMGNhOWFmNTBlZmRmYjllNDZiMGY3ZjBjODBjOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24pXlQdvvxA6erFNa2Uter6YibKR
C9IRp1SbXUsMfDPsDlYxq2SgF1YohbdGnAUCtwRQRuHlyDf3Hpxov//u8R3vcYBt
yIa3hljxPudQ/3242OOpdAd0+52Y4vwAR8q4zUGUxSOVOGiUA5ugBhtMSjFy1OMj
KgQzA4sSF0CmctbfEtNROdZxJn9gRWIZmaOeCx+06QYCZWO6mHbNlub5H2oRia7C
VHZyXX8Iv1PvHVakKAf6Duhwnw9BV1zgt/Gv4C4WdvYEcaFFxMU/kvVKgWgGH/af
kWCU72J+0Zrt3l7VJypgCa5EYB075EfzYyQGA6qxzHjysDQpGFIcF4qCfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChJK1MDDKmvUO/fueRrD38MgMkeMB8GA1UdIwQY
MBaAFHuI1KSrGKWbZk2rr9s4gNw1siuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMt
NzQzNzY1YmQwZjNlLzEvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMtNzQzNzY1YmQwZjNl
LzEvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAroq1NKtV
29Rh4+c2JbodtNlBX0t4xiXr0R8eEgBJfbuIGkwiNTozER3WWSk4zR35Kp3WpaeO
iXq2Qyxrs6lfLE54vAL0F1j3c2Pm6oVr84VSeA8kgnWTlopJ/qDVxVfz0+uGM4jo
RwO9QceJKeFwqY4PDTEIgn9H9CUFVoLo2uBCaSsRdLbWscfT/LLQ06DbldYHjyd5
d7pyV7RnlY33Vr0xp7dGY8Ab1IdIh9Cyav/LkwZLM+xb+2HgxCrUREml/fnNpoXM
XEwsC3XZJmhHaYSXT8fJVPOv02zmCFWAX8WAyHLLWmcIc7IbfbRPYCeaRzq9HEzU
Jqx90KjHk+wFoA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:29:13 2026 by rpki-client