Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File:                     e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier:          nAlfns6UWjdXnPEVzozJzkuIb4iTVt+8RHtOVH0gKoE=
Subject key identifier:   62:C1:4C:10:B6:EC:72:EA:39:65:E4:4B:95:6D:DE:9D:C5:36:2E:10
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer:       /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial:       01A142042F1B211BC63DCF458B538AA15BA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number:          1AAA
Signing time:             Fri 16 Oct 2026 00:02:12 +0000
Manifest this update:     Fri 16 Oct 2026 00:02:12 +0000
Manifest next update:     Sat 17 Oct 2026 00:02:12 +0000
Files and hashes:         1: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: eUZyJ5ZTsSF8gHqEa6ygHr7zqHS8DtoG74SnpbPgZp8=)
                          2: rBb-Zp2DN1YryszXlTcGsxUi8kg.roa (hash: VjavbSWKLaeBoYTEkUDvu679eNkgyVWO00COvRWyhp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 00:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:42:04:2f:1b:21:1b:c6:3d:cf:45:8b:53:8a:a1:5b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
        Validity
            Not Before: Oct 16 00:02:12 2026 GMT
            Not After : Oct 17 00:02:12 2026 GMT
        Subject: CN=62c14c10b6ec72ea3965e44b956dde9dc5362e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fa:59:64:d2:62:dd:da:41:17:bb:7f:60:96:
                    db:43:92:aa:c5:b4:16:bf:3d:5d:f9:8b:2e:1b:f8:
                    1a:fd:77:5b:4d:7e:3b:92:5a:a2:30:bd:dc:04:f8:
                    cb:ab:68:63:41:64:da:77:f7:c0:65:5a:22:35:e6:
                    ed:9c:81:b7:46:8a:c9:ee:e4:70:2e:64:43:d7:92:
                    d2:6d:f7:04:8d:e9:e7:61:f9:f3:07:5a:96:5f:85:
                    3f:03:3e:ac:79:35:3c:bf:0e:fe:68:1f:a7:e4:52:
                    f5:ac:28:2c:73:10:57:75:45:cb:cc:2e:30:4f:40:
                    c4:17:1a:32:59:51:b1:12:b0:d7:e8:a5:67:61:ff:
                    b3:69:da:d6:d3:fb:8f:a9:e8:a5:1d:95:52:5a:59:
                    06:a7:7f:0f:35:76:23:ce:66:42:b0:b4:05:03:93:
                    00:8e:38:23:89:8b:11:21:16:57:09:4e:8e:05:fe:
                    61:6d:70:67:7a:02:a3:7c:9a:bc:22:a5:c6:f9:de:
                    24:d3:08:3c:16:74:5b:e5:3e:f3:0a:7f:d3:38:f6:
                    3c:87:dc:1c:9c:1d:87:0d:f9:01:45:5f:4a:d9:01:
                    fc:be:d8:b3:8e:39:5f:f8:be:46:6e:6d:45:81:49:
                    23:d2:ce:aa:89:ce:22:0e:62:96:9c:b9:64:70:fa:
                    9f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C1:4C:10:B6:EC:72:EA:39:65:E4:4B:95:6D:DE:9D:C5:36:2E:10
            X509v3 Authority Key Identifier:
                keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:50:ab:b1:70:58:a7:a3:18:e7:fc:f9:7d:a3:f0:eb:47:8b:
         e4:cb:3e:9a:cd:bd:84:bd:75:79:c5:23:82:77:c7:cf:65:56:
         34:05:83:4a:3b:f5:eb:ca:a8:17:62:cc:fb:6e:5f:f8:51:4c:
         2d:1e:e4:d4:31:41:7f:71:0f:d7:7e:2b:1b:48:f9:ee:1a:8b:
         74:3c:cb:d5:61:8a:68:99:55:43:2e:44:bf:68:17:75:13:69:
         15:c4:51:6a:51:98:27:4c:57:62:b8:10:83:0c:e6:43:60:7d:
         31:8d:87:8b:96:4b:1f:9f:5a:b9:d9:6d:dd:e3:68:de:04:f2:
         d6:d7:fb:6b:54:e0:a8:78:31:4e:ef:08:9d:1e:9d:32:86:98:
         43:23:6a:c4:3a:01:6b:d2:a5:b4:74:09:70:a2:b1:d9:c1:a4:
         2c:a5:56:9f:f2:78:b3:a2:ca:b1:8d:11:fc:67:6d:b9:a8:bb:
         41:f0:a3:e2:0c:33:96:63:14:89:5b:7f:e9:85:d9:ca:58:9b:
         e9:59:6d:6e:80:88:fc:e0:a9:a6:44:ce:a3:b7:38:0b:d8:ad:
         7a:f4:8d:9c:f4:43:16:4e:26:5f:c8:df:f7:f2:80:3f:fa:df:
         3c:f3:e1:a9:47:b6:c3:6d:42:42:b5:69:e4:0d:de:3b:d9:10:
         fc:87:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 10:19:58 2026 by rpki-client