Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft
File:                     4ecyzbRE2qPWyXo6p-olYWNppfo.mft (raw, json)
Hash identifier:          CqNubKaBjmXuprZYl3NWIzw9RRTl+jHERa7CTqAzbd0=
Subject key identifier:   47:4D:38:A6:82:CF:4E:EA:A2:5F:9F:87:13:2C:CE:57:C0:FB:DC:C1
Authority key identifier: E1:E7:32:CD:B4:44:DA:A3:D6:C9:7A:3A:A7:EA:25:61:63:69:A5:FA
Certificate issuer:       /CN=e1e732cdb444daa3d6c97a3aa7ea25616369a5fa
Certificate serial:       01A12D332C3AE33E28346BB207476576BA51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ecyzbRE2qPWyXo6p-olYWNppfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft
Manifest number:          0116
Signing time:             Sun 11 Oct 2026 23:01:30 +0000
Manifest this update:     Sun 11 Oct 2026 23:01:30 +0000
Manifest next update:     Mon 12 Oct 2026 23:01:30 +0000
Files and hashes:         1: 4ecyzbRE2qPWyXo6p-olYWNppfo.crl (hash: anJlu9IgRR9nyN79wGGAaSYTwEtwUxMJhXUGDCuGEC4=)
                          2: 8L93OfrXNzkgMRsqTKLGqIh_Piw.roa (hash: DHNZYsv/LygcgjjRo9/VWopDIXTk+Rujtrd6cyZ7HBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ecyzbRE2qPWyXo6p-olYWNppfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 22:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2d:33:2c:3a:e3:3e:28:34:6b:b2:07:47:65:76:ba:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e732cdb444daa3d6c97a3aa7ea25616369a5fa
        Validity
            Not Before: Oct 11 23:01:30 2026 GMT
            Not After : Oct 12 23:01:30 2026 GMT
        Subject: CN=474d38a682cf4eeaa25f9f87132cce57c0fbdcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d6:a9:76:34:65:35:71:80:a6:d2:62:34:6f:
                    e2:9d:03:30:73:ec:87:91:09:85:eb:60:6b:7a:2a:
                    8d:fe:ab:46:bb:72:28:bf:ed:e5:07:4a:e7:91:db:
                    f5:db:cd:04:cd:f2:d6:a3:49:50:bd:fc:55:bb:7b:
                    2f:18:c7:f1:d7:22:96:72:3a:f3:a4:00:a5:a6:d4:
                    95:85:d1:90:6b:3b:12:c6:7e:5e:9f:2d:2b:c9:13:
                    20:9d:37:36:be:a4:f0:10:d6:c4:e1:7a:60:8e:08:
                    cd:a7:59:ab:14:b0:1b:9d:cc:49:5b:d0:91:9f:b4:
                    0b:94:b0:7a:e8:27:dc:46:1b:6c:2a:39:3b:f6:22:
                    43:9d:4b:97:a2:1f:bb:87:c9:8d:28:51:70:e8:8d:
                    7c:94:ef:df:e1:44:80:1d:71:49:72:59:b0:62:c1:
                    41:93:d6:ee:26:16:01:d7:ec:b5:22:42:f7:02:5c:
                    de:ae:cc:cd:38:94:51:5e:d4:d9:5a:94:5b:c3:8f:
                    b1:62:2c:d3:bb:7a:8b:32:92:5d:14:22:13:45:97:
                    1c:28:0c:9f:d3:18:ac:fc:33:dc:83:59:ec:a1:65:
                    f0:71:b6:e2:fb:c8:fe:fd:87:b7:b7:4e:1e:7f:bc:
                    e2:0a:12:64:c1:f4:7c:a4:5c:dd:cf:ab:eb:04:0b:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4D:38:A6:82:CF:4E:EA:A2:5F:9F:87:13:2C:CE:57:C0:FB:DC:C1
            X509v3 Authority Key Identifier:
                keyid:E1:E7:32:CD:B4:44:DA:A3:D6:C9:7A:3A:A7:EA:25:61:63:69:A5:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ecyzbRE2qPWyXo6p-olYWNppfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5b:86:1b:55:4e:9c:84:69:94:d1:a1:3f:7c:c1:e2:7c:5c:
         6a:27:45:0d:49:cc:39:08:b5:91:83:13:03:05:62:b9:08:d9:
         e8:ed:58:c9:92:13:9d:fb:c5:21:d3:9e:6a:f9:bc:aa:2b:78:
         62:4f:09:08:44:5c:9f:cb:6d:fd:db:43:fb:d0:23:b4:11:9d:
         04:cb:74:af:43:0e:5d:16:e4:d1:42:d0:d8:ae:c6:bb:d3:87:
         08:84:47:66:1d:9f:cb:e5:6c:16:ce:f4:ea:0a:7f:9b:b8:3d:
         a3:7f:ab:44:99:4b:ee:e6:a6:28:99:56:9b:0a:9f:23:4d:f9:
         ab:6c:4a:90:90:53:3f:99:7d:23:ba:90:a6:10:90:dd:76:70:
         72:04:af:6d:20:2a:1a:f5:1b:f6:bd:25:59:c0:91:1d:af:23:
         17:71:7c:39:a6:0b:a7:b2:84:35:e2:f6:15:ef:e2:5f:ed:cc:
         df:d2:c6:df:e4:b2:e7:79:04:6e:52:72:11:ba:22:84:92:04:
         76:af:58:6a:8c:31:38:ef:73:24:04:57:7b:c4:11:f3:07:db:
         66:64:7b:5b:e0:43:64:1d:74:90:cf:22:40:09:2e:ee:56:5b:
         31:30:4e:9e:f2:97:79:28:e0:fe:f4:eb:aa:41:ea:e8:2c:82:
         58:d6:ad:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:11:59 2026 by rpki-client