Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
File:                     4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft (raw, json)
Hash identifier:          2yu6SA4HopdzBTApTh9N2yC6ssekYGBj6zHnhjUWP5M=
Subject key identifier:   6A:F1:E7:C0:41:06:CD:C3:CE:92:D6:88:20:64:2A:EF:C1:B2:3C:2D
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Certificate issuer:       /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial:       01A0FFEC9E0834A03498572AC21AC5E92044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
Manifest number:          10AA
Signing time:             Sat 03 Oct 2026 04:01:31 +0000
Manifest this update:     Sat 03 Oct 2026 04:01:31 +0000
Manifest next update:     Sun 04 Oct 2026 04:01:31 +0000
Files and hashes:         1: 4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl (hash: eAhzjKtZeMYzYqJY9ErHhtT0XBnZf2t/UlauifMnsTo=)
                          2: GG5Z9bcgRhj5bvdTmqMJRrOoL1M.roa (hash: YTbCU6GzTrIzftbZbD0fHbZANynvTnyxCIyn5sAM1mc=)
                          3: GgOfbd9F5KPJoYLhExG-OXyRwK4.roa (hash: Av0WKgdWyMP5jVBTfHweW1CBduaCDbaswF0VMggKgCk=)
                          4: hYLRUg0SQqMstMmusnhckxfWhuY.roa (hash: 1x1ITik47KH9EPZ8bGLZz5XWRPVBO6Cz1LvH0CdcCtM=)
                          5: vtwUYAYY8HgSzf0nS8zvrbl0txg.roa (hash: J5aRxIaRZQn03q+9SRxqwbVkAXCYWQNCOSEx8+r+upI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:ec:9e:08:34:a0:34:98:57:2a:c2:1a:c5:e9:20:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
        Validity
            Not Before: Oct  3 04:01:31 2026 GMT
            Not After : Oct  4 04:01:31 2026 GMT
        Subject: CN=6af1e7c04106cdc3ce92d68820642aefc1b23c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:60:01:11:02:90:dd:9e:7f:32:26:bd:c6:
                    9f:b8:5f:8d:4b:89:62:3a:dc:ae:fe:56:8b:f3:ba:
                    de:87:e4:86:cf:41:b5:a6:92:92:a2:d5:79:4b:22:
                    62:bd:98:99:e5:8e:5e:24:19:21:6e:7a:7f:38:96:
                    6c:9c:68:84:f5:6a:fa:7a:f7:0d:fe:23:77:11:9f:
                    a5:7b:23:e1:2f:ba:ce:2b:41:9d:87:3e:d4:92:ad:
                    ae:1d:bb:95:cc:5d:fc:54:ad:16:87:30:1b:91:8c:
                    f6:8f:5a:53:bf:13:94:2e:b5:01:71:1b:91:fe:cf:
                    5b:a1:df:75:28:48:ce:95:53:01:12:9f:a3:63:eb:
                    7b:91:3c:22:fe:6e:7d:ff:13:63:be:6f:6f:7a:c3:
                    16:fe:e6:71:9f:91:f5:78:ab:90:cb:aa:d2:be:a6:
                    95:59:21:be:c8:b1:d1:60:be:07:2e:6e:40:ac:56:
                    e4:dc:87:99:09:c7:1b:57:10:08:cb:b5:0e:3d:32:
                    fa:d4:22:76:07:1b:58:35:e6:33:cb:ac:33:1e:28:
                    85:c5:df:6b:6b:c7:56:5a:50:5d:ed:2a:9d:d8:95:
                    19:78:ce:35:22:e9:ee:4f:5f:c7:30:d8:43:2e:71:
                    04:f9:a6:0f:11:97:72:c0:6f:a6:a3:8f:de:65:3a:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F1:E7:C0:41:06:CD:C3:CE:92:D6:88:20:64:2A:EF:C1:B2:3C:2D
            X509v3 Authority Key Identifier:
                keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:47:1f:51:97:5b:f2:a7:c2:c9:e9:9d:59:87:de:87:90:a0:
         68:f9:de:8c:a4:a9:f9:e7:bf:d8:1d:24:ee:c8:4f:0c:b8:38:
         04:3e:4c:74:68:ef:d6:b7:21:70:f4:5e:22:c1:bf:b1:1e:1d:
         3a:1e:82:36:66:4c:81:8d:32:03:29:9c:f0:76:cc:4e:e5:08:
         6a:79:31:67:6b:00:eb:3c:69:7c:8a:ef:8b:5f:86:d2:0a:73:
         30:e4:a4:cb:2e:02:5c:8f:91:d9:86:fa:4a:b7:8f:bd:01:a6:
         e2:4e:78:39:7f:fb:7e:56:29:85:f7:b8:16:03:6c:cc:f9:b6:
         3c:d2:8f:0f:f4:7c:4a:45:89:62:73:7a:f2:7f:f1:e0:f6:89:
         d9:0b:cd:c2:d0:98:b1:f0:84:f8:12:98:23:69:7e:d5:10:d9:
         99:5f:06:9a:41:6b:b7:32:23:91:46:72:f7:2d:02:e0:39:e6:
         c2:19:88:ec:6d:ac:46:aa:ff:e5:f9:e5:42:63:35:57:12:6e:
         c0:94:97:da:35:43:ee:49:9a:cf:6f:ef:93:7c:a5:2f:2a:6b:
         5e:18:f9:e7:1d:36:1f:e5:44:9c:61:8f:11:a2:40:16:55:33:
         e9:e1:d9:02:55:6b:fa:0d:b4:10:f4:7d:68:12:43:c3:e3:cb:
         3b:3b:90:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:44:59 2026 by rpki-client