Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
File:                     4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json)
Hash identifier:          T28aPEsmSMOjjRrcIeNi0cgBjxIRjnkmmb2432wbRu4=
Subject key identifier:   29:34:6C:8A:46:38:75:4B:97:A5:CE:A5:A2:47:93:09:A7:E6:E2:88
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Certificate issuer:       /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial:       01A11B99A9A82D14E0755DE3DFD0166F1797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
Manifest number:          1A9E
Signing time:             Thu 08 Oct 2026 13:00:17 +0000
Manifest this update:     Thu 08 Oct 2026 13:00:17 +0000
Manifest next update:     Fri 09 Oct 2026 13:00:17 +0000
Files and hashes:         1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: /ASfN88YGKIxn2br3QjDn6VhSlbXmX9tFz2+1dA+Z1A=)
                          2: Wi5MJkqvObCqrjZBlo0JDmeXkfI.roa (hash: 99QCRcjIbmAy7NXYDozY/LitcvyDVNBk3XTYfLTEqtM=)
                          3: X4Jj1-4HqPQyHoz2uvlpMoAV66I.roa (hash: U8BCAKAOabJXvpxRbVFDeRvoLuUy39ScZ8CQFXOkfKo=)
                          4: bRn03FRlSzZThZNkviNVTHKQJGs.roa (hash: xEDx54ik3RAUzg+a27rbqvQuS4hz986uk0RMqkm7R+M=)
                          5: el7Foe7CpoESR0E_lBDRq_2Ohz8.roa (hash: /kLAJJz2VIOJRlWwXrYI0vRC2jlyRUsDvBRbglDgwCs=)
                          6: mccsr8m8ho2_mF3Ywy_9oaBImlk.roa (hash: 8fr0OzT5KHo+mYjffMlKzkDxAz4/c/4/JdZVWTqaEVk=)
                          7: pY-w966p6TcVCR_ceh3iqo8tBvM.roa (hash: 9v8cY+ONlAQ5plK0CUQaAsntXexrpXKvoAQArC1anGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:99:a9:a8:2d:14:e0:75:5d:e3:df:d0:16:6f:17:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
        Validity
            Not Before: Oct  8 13:00:17 2026 GMT
            Not After : Oct  9 13:00:17 2026 GMT
        Subject: CN=29346c8a4638754b97a5cea5a2479309a7e6e288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:fe:91:cd:8a:da:18:d0:42:bc:de:6b:85:
                    00:68:d2:31:75:6c:fe:f4:72:dd:83:7d:01:5c:1f:
                    23:28:11:ca:c7:a0:4d:84:14:bd:6a:09:69:9e:85:
                    ee:72:94:17:56:37:2b:60:53:bd:d2:b6:0b:cb:6c:
                    91:2e:26:e4:72:89:09:f8:b3:96:3c:c7:3a:be:73:
                    3f:43:3f:19:36:ad:6b:3f:ee:6e:06:a5:95:dc:93:
                    b3:e8:5c:52:98:47:08:66:9f:5f:e2:7e:2c:d3:0d:
                    e3:50:b1:e9:b7:5c:b5:92:26:0e:2d:23:24:db:76:
                    a6:1b:63:b6:e6:45:3e:a4:93:97:40:63:10:c5:6d:
                    8a:57:0c:fb:57:cd:4c:4e:17:80:e6:a5:00:44:9b:
                    06:7e:b5:ce:26:08:29:13:ed:2e:bf:af:95:4b:34:
                    b9:ee:fb:c1:9c:dd:08:c7:7e:0e:3d:4e:e4:a9:1d:
                    91:51:55:25:28:f0:a0:94:2b:9d:3b:a4:fb:87:7e:
                    3e:6c:f0:5c:a7:0d:45:a5:dd:a7:0d:05:e7:92:f6:
                    ec:7c:66:a5:ba:f3:7c:7f:95:2b:50:11:2d:dc:35:
                    c8:e4:1c:e1:bb:2b:4c:ee:73:32:e4:71:e7:5c:c6:
                    56:37:01:ee:47:c3:ff:54:66:aa:0e:6c:77:e8:2b:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:34:6C:8A:46:38:75:4B:97:A5:CE:A5:A2:47:93:09:A7:E6:E2:88
            X509v3 Authority Key Identifier:
                keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cc:d7:9f:76:ad:ee:36:b6:9d:1d:41:96:93:84:b4:3d:27:
         06:7e:30:e8:1d:bb:f0:47:93:aa:0c:0e:98:8d:ff:1d:ec:84:
         c1:69:c9:83:7f:f1:68:d2:7e:1f:44:33:a0:a5:a5:98:b7:b0:
         3d:9d:5e:a7:64:97:e0:b7:43:32:cd:a5:bd:8e:71:f0:1f:3c:
         98:82:59:c8:75:34:0d:5d:29:c0:26:8c:0e:38:90:05:e9:c4:
         39:48:df:42:4b:dd:fb:d9:d7:dc:17:f8:c3:ba:02:78:28:c0:
         0b:00:b4:dd:ab:aa:a9:47:cc:f8:c3:f3:8b:a9:00:75:59:a1:
         02:d5:fc:f5:50:21:c2:99:52:80:8c:f7:e6:5f:09:21:9f:22:
         75:0d:eb:17:65:e5:9b:13:02:39:1f:c7:bb:e8:46:e5:cd:11:
         22:26:69:1f:06:82:66:1a:60:aa:32:53:6a:5e:30:16:6d:d5:
         1b:1f:a8:7a:60:2a:75:19:53:b1:b9:9c:a1:94:a9:01:9c:27:
         28:a3:da:83:b8:97:c4:ae:cb:4b:b7:a5:40:7c:d5:f5:ec:0a:
         01:6d:08:9c:f9:cc:47:98:77:b2:d8:dc:03:0c:e8:6b:9c:0e:
         a4:19:9c:6f:6f:c8:41:5a:94:5e:c2:40:8b:6e:aa:c1:5c:bb:
         12:94:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:18:23 2026 by rpki-client