Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File:                     4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier:          8DObR9idTkI1FV4luZBvZViJFHI44Eu2Aduq80nYpnQ=
Subject key identifier:   4C:7B:06:07:F7:E9:5A:28:DB:17:4D:A2:D0:D5:DD:22:18:41:C4:C1
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer:       /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial:       01A0C6D8689D73257AC2344D2F463A18C63D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number:          105A
Signing time:             Tue 22 Sep 2026 02:01:06 +0000
Manifest this update:     Tue 22 Sep 2026 02:01:06 +0000
Manifest next update:     Wed 23 Sep 2026 02:01:06 +0000
Files and hashes:         1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: jQGdvDm7CEav7I0p/x1v9b1g/PYLIYvwTga38YQb7kc=)
                          2: k6jNcpaTNPSlXj617Gg3gS62Bto.roa (hash: 8LQYJjtnAC4ChUuR0xJhVpC5xdVYrcixNySIFaow6HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d8:68:9d:73:25:7a:c2:34:4d:2f:46:3a:18:c6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
        Validity
            Not Before: Sep 22 02:01:06 2026 GMT
            Not After : Sep 23 02:01:06 2026 GMT
        Subject: CN=4c7b0607f7e95a28db174da2d0d5dd221841c4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:87:13:d4:8c:65:5b:b2:01:bb:79:83:18:
                    90:d1:5b:94:da:1b:e7:4f:2d:b9:58:24:b6:f6:7f:
                    53:31:57:61:64:2c:9e:24:42:cd:a1:22:9f:60:bf:
                    90:74:be:a3:73:00:db:04:5b:8f:73:4c:06:6d:3e:
                    6b:b0:8a:9b:76:f0:c2:64:93:71:2f:48:11:0b:f8:
                    e5:db:23:90:55:c7:07:0e:86:6b:9d:ca:07:56:76:
                    d4:8a:1f:a4:7b:f8:4d:28:06:f2:4f:ad:5e:f6:52:
                    03:6f:62:83:43:a0:67:df:3d:3a:8c:f5:c8:40:5d:
                    fe:d8:bc:00:77:67:8c:f4:26:00:c5:2a:98:ac:2d:
                    a2:47:06:bf:a3:84:f0:24:ee:ca:52:78:72:d1:4c:
                    cd:c8:13:b9:5d:a0:d6:86:04:1a:e1:fe:b8:ee:57:
                    a2:5e:2c:3a:e1:02:57:eb:83:b0:da:3e:3e:1d:3e:
                    32:73:5e:4d:12:f0:56:5e:b3:94:9a:06:0c:ce:7a:
                    a5:3f:13:39:cc:7f:18:9a:bd:63:70:b8:a8:9e:c0:
                    9d:05:47:b7:02:cb:3b:94:ad:1f:49:8d:62:2d:b6:
                    c9:ef:96:7c:56:e0:3b:d0:b4:58:95:1d:20:a3:00:
                    1f:5f:b3:c7:b7:58:9f:5e:d9:d1:45:6c:e3:be:bd:
                    48:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7B:06:07:F7:E9:5A:28:DB:17:4D:A2:D0:D5:DD:22:18:41:C4:C1
            X509v3 Authority Key Identifier:
                keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d9:72:91:e8:55:48:fb:b7:1c:58:29:61:a2:41:48:a7:d3:
         e7:0f:71:9d:1f:88:a6:5d:79:bc:8f:67:7b:bb:d1:c0:ba:25:
         99:91:89:45:b5:14:63:62:75:02:ec:93:85:75:95:66:34:ee:
         8f:14:47:7c:2f:8a:7c:ba:93:ec:71:c5:b0:c2:43:21:70:d4:
         57:75:49:6b:d5:b3:31:bc:4a:3c:6f:e7:fb:c3:a0:34:91:81:
         69:c2:be:4b:73:b8:c7:6e:07:95:13:2d:51:15:8a:75:dc:13:
         f3:44:ed:3b:c3:cf:4f:de:89:61:92:4f:69:6f:b6:d3:ec:50:
         6b:50:71:0c:4b:de:56:22:be:9a:88:d5:59:c8:dc:b2:e2:08:
         e3:f8:42:8f:ee:6a:dc:b5:a7:a4:0f:a4:72:c1:a5:a6:1f:e3:
         a4:4a:ac:c1:37:33:26:32:b8:1a:43:dc:0a:62:96:8e:89:8e:
         76:26:30:b7:cf:cc:ce:aa:66:23:7f:52:58:2e:3b:bf:f8:a4:
         8d:fe:34:d5:8f:fb:c0:33:f0:a8:36:30:30:d5:c1:b1:a5:08:
         04:df:25:ec:a8:54:4f:71:5d:66:b5:7a:c7:41:cf:92:e3:72:
         07:fa:c4:a7:9d:fc:14:ba:f8:98:04:8f:95:eb:95:0e:4a:c2:
         3b:b5:96:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:38:56 2026 by rpki-client