Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
File:                     4TbBQNV8BgOYHZBG1McqrcZJe48.mft (raw, json)
Hash identifier:          1/cEA9cYfvS41iCs+2f62xyT426MsHs78Ab8rXc7tEA=
Subject key identifier:   69:B4:DA:85:2E:1D:21:41:BB:A4:01:92:94:AD:9E:CA:B2:01:C7:3B
Authority key identifier: E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
Certificate issuer:       /CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Certificate serial:       01A12DA0E71DCDE8EA5ED0CA8F925FE6C7A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
Manifest number:          022B
Signing time:             Mon 12 Oct 2026 01:01:22 +0000
Manifest this update:     Mon 12 Oct 2026 01:01:22 +0000
Manifest next update:     Tue 13 Oct 2026 01:01:22 +0000
Files and hashes:         1: 4TbBQNV8BgOYHZBG1McqrcZJe48.crl (hash: j9P6gIxBtCXxOPKIv/6jqhGGpxT3K8epMjSGtmNdecU=)
                          2: flO6XJpnIFOsdZyjDNefmOQ-G_w.asa (hash: MR9nPjOlXBd3N+fXKFHrapKtNEWrnTEaOnHmqRgXcfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 22:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2d:a0:e7:1d:cd:e8:ea:5e:d0:ca:8f:92:5f:e6:c7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e136c140d57c0603981d9046d4c72aadc6497b8f
        Validity
            Not Before: Oct 12 01:01:22 2026 GMT
            Not After : Oct 13 01:01:22 2026 GMT
        Subject: CN=69b4da852e1d2141bba4019294ad9ecab201c73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:1a:3c:9d:23:b9:01:31:c9:49:58:d2:46:
                    84:18:26:6b:63:46:95:bd:c4:c8:ac:af:59:80:7a:
                    65:53:0f:6b:8b:37:4c:dd:b8:b6:c2:95:ac:86:6a:
                    06:82:8e:9f:a0:c2:73:a8:92:a8:aa:66:3b:26:89:
                    0b:09:3e:50:21:58:04:dd:aa:c0:61:7f:c8:1d:a9:
                    7a:c9:e4:8a:43:b8:a2:68:ad:95:65:6c:b6:20:a0:
                    be:3d:50:06:0f:98:46:10:9c:24:0f:37:e9:af:55:
                    62:db:b0:f3:db:b1:89:ec:0f:e0:95:39:01:be:6f:
                    08:a8:46:8d:26:ee:9c:b3:e9:90:e5:10:10:d5:98:
                    0a:05:8c:60:9b:86:41:6b:45:34:59:84:cf:53:ed:
                    c3:b6:f6:80:dd:ee:6c:db:47:69:83:56:8d:d2:ef:
                    e2:9c:c7:28:5e:86:37:30:02:bf:87:8c:3e:93:33:
                    b0:43:7a:eb:0a:97:b3:23:f2:bf:b6:a3:c3:56:8d:
                    80:6c:f7:60:ec:02:f4:89:d1:58:a0:72:db:86:70:
                    ce:d0:bf:47:3a:51:8c:5d:91:37:a2:ad:97:18:56:
                    41:70:ab:2c:4b:d2:ac:b1:27:ab:55:73:65:e7:2e:
                    28:49:f0:f1:31:23:96:de:02:32:4e:e5:a9:36:78:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B4:DA:85:2E:1D:21:41:BB:A4:01:92:94:AD:9E:CA:B2:01:C7:3B
            X509v3 Authority Key Identifier:
                keyid:E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:f0:77:c7:28:58:da:cc:a0:98:eb:24:3f:a2:54:9d:dd:
         ce:bf:70:ba:2f:4c:8a:ba:92:bd:98:49:f6:a8:7a:48:b9:20:
         2d:fc:6a:36:da:09:04:3b:2e:d7:1b:d9:d4:94:7c:6a:a2:6f:
         0e:6a:05:3b:ce:ae:3b:3b:06:ce:5f:bd:c1:a5:7a:f5:79:b1:
         7e:db:fc:1b:d6:0e:48:2a:a0:89:6c:a6:0c:ef:51:33:6b:5a:
         85:5c:da:70:78:be:21:83:57:10:2d:3f:6a:26:c5:b8:87:14:
         87:15:36:70:89:98:63:25:e6:c9:a3:6f:39:53:ff:eb:a1:4b:
         bf:0a:d9:ec:68:00:27:f9:06:03:07:89:80:4f:92:b4:64:09:
         0c:e2:a2:59:f2:57:9d:4a:cf:e3:7e:7f:d2:7c:db:95:b4:89:
         f5:30:0e:a2:1f:a7:e5:06:18:38:15:5b:54:26:f4:e0:fd:54:
         67:36:e4:8d:65:b6:f8:6b:c9:fe:e1:75:e3:64:d0:9c:50:b2:
         eb:30:15:b2:b0:99:36:5f:5f:83:2d:fe:9d:9a:f5:d6:0d:41:
         2e:8f:f0:9d:b4:24:90:f8:d0:d4:7d:9e:08:dc:e2:41:e8:43:
         2d:f2:0d:6b:27:4e:74:6a:1f:49:b2:9a:9a:64:09:b5:61:2b:
         f8:bf:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:49:49 2026 by rpki-client