Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File:                     4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier:          nX4SjkPC5lBZOuJmOBXohOyxjcZyeDJEzq5NR9Cet9I=
Subject key identifier:   C8:E9:C7:A6:32:75:C6:34:B3:57:32:7C:B6:4B:4D:2E:AC:DA:4A:17
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer:       /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial:       01A0D4CB441418D98F88F0B6364025C9A07C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number:          0A31
Signing time:             Thu 24 Sep 2026 19:01:26 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:26 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:26 +0000
Files and hashes:         1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: stOUCu7LwBtXlcS1ZN4QnI71VugecBc6uxrDYo9oPTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:44:14:18:d9:8f:88:f0:b6:36:40:25:c9:a0:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
        Validity
            Not Before: Sep 24 19:01:26 2026 GMT
            Not After : Sep 25 19:01:26 2026 GMT
        Subject: CN=c8e9c7a63275c634b357327cb64b4d2eacda4a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:a8:c9:f1:87:eb:ab:2f:a8:0a:59:e8:94:
                    95:64:f5:5c:e2:5b:e0:f5:05:d4:14:cd:d5:15:cd:
                    21:d5:66:96:56:67:2a:c0:dc:d1:98:1c:4f:6e:8b:
                    19:28:ba:ad:ec:c3:0d:28:b9:5a:ac:21:d7:89:e0:
                    46:7d:06:ad:c1:a4:78:59:49:cc:05:e3:64:c0:34:
                    ab:6e:cb:a5:55:c9:cb:05:66:e1:bc:c2:d7:7c:d7:
                    fe:2b:68:5f:f0:e0:a2:37:cb:f1:2a:e4:fd:cb:cd:
                    41:5d:83:da:93:3d:13:a1:b1:b4:0d:e7:2f:58:04:
                    e1:04:05:13:15:c4:9a:9c:44:a5:ab:62:8a:e0:00:
                    94:9c:fc:a2:ae:4c:c1:1b:79:55:9f:30:b1:6b:04:
                    14:e0:77:4c:38:74:1e:ae:73:8f:24:24:0c:51:a6:
                    70:39:d0:5d:89:74:6e:6c:46:e4:9e:f4:b1:d7:fc:
                    fd:fb:a3:f8:a2:a5:5c:ae:9b:bd:31:a2:83:e0:79:
                    47:f2:a4:d9:c6:98:fe:90:c3:2a:1c:6d:b8:44:0e:
                    ee:34:e8:d6:c0:00:bf:4d:5e:77:a6:3f:00:79:32:
                    1d:31:c2:96:5f:db:3b:14:cc:1c:27:8f:f3:62:98:
                    5f:87:79:85:1b:cf:94:23:f2:10:34:3d:3a:4b:2f:
                    6b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E9:C7:A6:32:75:C6:34:B3:57:32:7C:B6:4B:4D:2E:AC:DA:4A:17
            X509v3 Authority Key Identifier:
                keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8c:fb:ce:3a:83:68:96:b3:45:e9:94:46:7e:44:a1:98:35:
         f5:77:fe:3c:d6:91:58:a6:cc:ac:ea:32:49:1c:66:ef:7d:39:
         ac:19:62:4b:0e:06:fa:20:d6:6e:ae:2f:4b:6f:8c:c3:64:de:
         83:11:c6:99:4d:f8:b1:c7:5c:76:a8:7d:d3:49:33:2d:69:4b:
         f8:1e:66:47:bd:f0:cd:5e:d9:5e:19:32:b0:a0:a4:e3:c9:10:
         bf:a8:ce:78:2b:d3:89:4b:c9:71:f5:2e:34:83:df:ea:e2:63:
         47:01:0c:2a:ae:82:10:e8:ca:31:43:8d:6c:2a:ef:6d:23:43:
         d2:66:19:1a:3e:87:32:72:39:fe:f3:84:6a:2c:3b:b2:83:8a:
         45:25:23:ea:09:a8:3d:d2:16:6e:6f:8f:af:c8:61:2d:69:3e:
         f2:fc:a3:70:3b:68:f6:8c:81:3a:29:a2:76:55:d0:09:5a:f1:
         1e:4c:cf:05:58:76:0b:ae:20:0a:03:a6:5d:5b:48:03:b3:65:
         e2:a1:d1:cd:f3:dd:5b:89:15:30:9f:51:91:bf:ad:88:36:23:
         0a:66:7e:8c:72:66:e2:b5:81:20:6b:c9:5d:2f:9b:c5:44:a0:
         ce:11:c8:3c:fc:c2:0d:83:b2:02:80:29:5d:c2:17:a3:99:59:
         03:a4:a1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----