Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File:                     mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier:          y1t6PCisrOkYgcVA9x9ZuOM1vRrvuadfOaBGxTs9FUs=
Subject key identifier:   4E:05:1E:3F:0C:A6:BD:58:22:FA:EA:C1:4F:99:D0:48:85:00:28:10
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer:       /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial:       01A12B44104CF624E5A541E535443A262733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number:          1924
Signing time:             Sun 11 Oct 2026 14:00:43 +0000
Manifest this update:     Sun 11 Oct 2026 14:00:43 +0000
Manifest next update:     Mon 12 Oct 2026 14:00:43 +0000
Files and hashes:         1: KEyhGh3u-Ad2U98qs53aKdB_GJc.roa (hash: jZXKizyeTSKszZt9XLRCfNj1B4xBpIyE3AIW1lpSBsI=)
                          2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: pTKr5WyV75K5DAZBbgSeWu7y6GdWiz2AYU7iRGM429I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:44:10:4c:f6:24:e5:a5:41:e5:35:44:3a:26:27:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
        Validity
            Not Before: Oct 11 14:00:43 2026 GMT
            Not After : Oct 12 14:00:43 2026 GMT
        Subject: CN=4e051e3f0ca6bd5822faeac14f99d04885002810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:3b:46:4f:c3:fd:a2:7b:f4:21:39:cb:e6:
                    62:1e:ee:30:87:70:fd:60:4e:f7:54:db:f6:a4:eb:
                    e1:35:7c:be:97:70:a2:47:ca:8e:b7:fb:1f:8a:5b:
                    97:37:26:99:3b:57:59:79:b2:17:e5:32:65:21:54:
                    97:65:57:21:3d:8a:4a:ab:b7:7f:80:47:54:ce:63:
                    3f:ab:3e:d7:c1:20:5a:44:11:65:ce:8a:50:39:5a:
                    17:62:c2:07:27:ae:75:08:44:e7:7d:68:bc:ca:67:
                    32:54:15:45:f5:6d:31:6e:06:ab:a8:bd:2e:98:50:
                    86:1f:ee:07:fa:f0:ba:fd:b2:a5:41:e1:1c:e6:09:
                    f5:d3:b6:61:af:56:4f:5d:1a:e2:dd:06:d9:98:0d:
                    d6:d5:76:32:15:b2:52:3d:63:96:33:43:f2:4c:17:
                    9b:3d:eb:bd:c5:9c:83:ce:ab:6d:fb:10:cc:fe:4f:
                    0f:4f:61:02:2a:df:6d:cf:cb:59:a4:cd:72:b2:26:
                    95:ba:51:5a:68:4c:69:4b:cb:63:66:6a:25:ae:3f:
                    cf:58:86:28:7d:af:99:77:21:2d:7d:3e:f4:c5:0a:
                    61:67:c4:92:6b:9c:f2:46:0d:30:0d:26:c3:10:d6:
                    b9:35:97:a6:d4:af:38:1f:97:40:b4:86:2d:de:13:
                    76:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:05:1E:3F:0C:A6:BD:58:22:FA:EA:C1:4F:99:D0:48:85:00:28:10
            X509v3 Authority Key Identifier:
                keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3f:fa:fe:aa:e1:ca:b8:9d:ad:49:90:a5:ba:08:90:48:04:
         0b:32:67:4d:32:2f:c5:13:ed:3d:29:43:f5:14:a0:09:00:11:
         b6:6a:0e:a9:26:36:84:44:5b:a0:3b:95:08:5b:99:06:71:df:
         35:9d:50:73:4d:90:64:74:51:20:7a:48:2d:24:70:10:8d:9e:
         e3:71:fd:6a:c2:dd:e8:89:f6:d9:80:f1:c4:72:f3:f3:b8:95:
         3d:6c:fa:8f:b8:e4:2a:03:0a:09:7f:d3:2a:ea:ce:cf:6f:ca:
         72:60:b6:30:d6:d2:0c:ea:b0:fd:3b:51:5c:b9:9f:a2:06:d8:
         69:44:7e:3e:23:51:5f:52:58:68:10:f5:e9:f0:9c:9f:bd:06:
         8c:e4:de:7f:63:a2:c6:13:5f:62:fb:0d:d1:0b:4b:8e:b4:d6:
         33:f3:7c:f7:b8:db:02:e0:91:cf:a2:63:5c:43:da:bb:cf:92:
         e6:a9:2d:4b:89:89:81:b4:bf:95:f7:a8:c7:9c:d4:af:d5:f5:
         af:90:18:27:b5:1e:2f:85:bf:00:2b:e0:2b:fe:9d:11:00:46:
         97:7d:b0:7e:9f:82:9a:4a:08:5a:0c:a7:61:b7:3d:38:b4:a1:
         ca:4c:66:92:71:ea:b7:e7:37:6a:c5:2f:7e:38:b4:ba:f1:e6:
         47:bd:0a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:29:26 2026 by rpki-client