Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File:                     4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier:          yXruugSJbcVBRdGd1iyAnmzbhOoKRBqET/413b9cagI=
Subject key identifier:   37:2A:B0:6C:A3:94:2B:BC:17:61:01:9F:09:D3:0E:9F:54:5E:B4:1E
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer:       /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial:       01A13CDC57E82F6D92A1BB9A6E7BE879E6FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number:          08EA
Signing time:             Thu 15 Oct 2026 00:00:35 +0000
Manifest this update:     Thu 15 Oct 2026 00:00:35 +0000
Manifest next update:     Fri 16 Oct 2026 00:00:35 +0000
Files and hashes:         1: 2mEadFySpEWsuPH6ldVwsZTSUzE.roa (hash: ip58kYIdg4i0vj70PKOUYbGKVF2v+wgNn3j2A07Pob4=)
                          2: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: slVoo6oNCSvSkoBIczQLT3NIRgG5bxASgIEpBljjUYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:dc:57:e8:2f:6d:92:a1:bb:9a:6e:7b:e8:79:e6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
        Validity
            Not Before: Oct 15 00:00:35 2026 GMT
            Not After : Oct 16 00:00:35 2026 GMT
        Subject: CN=372ab06ca3942bbc1761019f09d30e9f545eb41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:e1:d7:96:1b:8e:5d:9d:52:48:38:b1:39:
                    17:07:d4:92:fb:78:c6:fa:14:f3:3f:e3:7a:85:2f:
                    af:1d:ed:52:3f:a8:b8:6c:7c:ba:72:17:ab:77:25:
                    be:f8:9b:27:27:ea:f9:b8:b0:40:97:62:48:7b:d9:
                    a3:b6:47:fc:75:82:07:93:0e:38:7f:92:e8:a1:5c:
                    b5:6d:0c:06:bd:a1:c3:b2:96:21:24:90:4b:dc:4a:
                    7d:63:1e:66:15:19:f7:80:33:d1:ab:25:6d:87:40:
                    e4:e8:8c:fd:f8:96:7d:77:4b:07:4a:ed:15:f7:31:
                    0b:8f:45:e6:4f:d3:3e:76:97:8d:87:4e:e9:1e:e8:
                    4b:bf:c1:bc:ad:23:3e:51:27:e9:e2:16:38:a3:4f:
                    2b:8a:9d:b6:6a:b6:60:41:c9:41:58:05:d5:4f:f7:
                    86:7d:67:7a:e7:a4:d2:3b:7c:05:cb:ae:66:67:95:
                    8d:2a:56:7f:e4:3d:b2:f6:da:f0:fc:93:8e:2a:ac:
                    93:b2:2e:58:25:5f:13:bb:62:58:a5:3a:66:85:39:
                    7e:78:f6:52:98:29:72:19:5a:0c:11:20:b7:76:a5:
                    96:02:7d:02:68:13:d1:ab:01:51:e2:09:11:a7:a8:
                    a5:10:1c:da:cb:e5:45:98:9d:a6:fa:20:4b:4f:78:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2A:B0:6C:A3:94:2B:BC:17:61:01:9F:09:D3:0E:9F:54:5E:B4:1E
            X509v3 Authority Key Identifier:
                keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:87:02:9f:15:82:ef:4b:ef:ce:21:74:52:53:93:18:69:eb:
         a2:40:48:82:77:bb:a9:99:54:37:48:b9:d7:63:9b:82:86:08:
         80:f8:9c:f9:9b:88:ed:c1:ad:97:f8:86:4f:db:2d:14:07:97:
         7e:d5:09:6f:86:0c:58:ef:97:0d:92:30:b8:a3:91:2c:bc:49:
         14:ba:5a:20:00:72:de:61:95:32:77:95:39:b2:42:d2:bc:43:
         13:f9:7f:62:82:13:60:1d:f6:7f:42:df:60:e7:32:95:74:3a:
         95:9b:c1:fd:46:b5:c1:1a:ba:02:16:ff:20:e6:c5:f5:5f:f6:
         f9:6d:a5:2f:99:92:3e:52:8a:78:09:c2:9e:e7:26:c2:57:3a:
         5b:d4:55:10:c5:4d:a0:0e:33:83:2a:5f:c3:e9:ac:9f:88:7e:
         0a:40:0a:25:af:b2:b3:d2:b2:f5:73:70:3b:1e:94:28:ce:69:
         b6:aa:65:01:cc:a5:27:23:c1:b7:06:62:90:ec:2d:d0:af:b9:
         7e:62:62:13:84:fd:64:a9:86:7e:c7:a6:ca:5a:4f:a1:d2:8c:
         68:1a:de:d1:3a:f8:c3:0d:18:85:66:c1:0d:db:c4:0f:9b:ca:
         0d:ec:b2:a9:23:29:e0:a7:80:f0:6c:87:88:55:1e:3f:85:62:
         99:9e:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:50:26 2026 by rpki-client