Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
File:                     494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft (raw, json)
Hash identifier:          PuOiExgOGxmD3TAmBjmayGJgVufrEH6zlhETSp6+A9g=
Subject key identifier:   F7:41:9F:F7:64:8F:B1:B4:2E:FF:56:5A:77:2E:80:78:67:ED:1B:D0
Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
Certificate issuer:       /CN=e3de21b0636c614ebf43664798012afd56c5ee86
Certificate serial:       01A12BB2568F6E5F347858C0B65F371B6797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
Manifest number:          1A9A
Signing time:             Sun 11 Oct 2026 16:01:10 +0000
Manifest this update:     Sun 11 Oct 2026 16:01:10 +0000
Manifest next update:     Mon 12 Oct 2026 16:01:10 +0000
Files and hashes:         1: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl (hash: IwR/naIkr04PBGkJlSIcYyoM2PHDpyUlJhRErzU21uc=)
                          2: s3A2C1YnSyHhxEfVoTVMiH87vAk.roa (hash: MNg/HtGNSEAU6JM2GvPKlMX0wCyEJFk2vuXxUMALprU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:b2:56:8f:6e:5f:34:78:58:c0:b6:5f:37:1b:67:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86
        Validity
            Not Before: Oct 11 16:01:10 2026 GMT
            Not After : Oct 12 16:01:10 2026 GMT
        Subject: CN=f7419ff7648fb1b42eff565a772e807867ed1bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:65:57:c0:55:cf:32:33:cd:75:a8:95:9b:
                    bc:9c:93:ef:87:ae:4f:89:ee:bf:5c:4c:b6:6e:89:
                    59:a6:c2:da:af:17:e8:97:43:ea:01:ae:ab:8e:82:
                    4b:33:d6:c6:3f:2f:57:dd:a2:6d:d1:4c:d1:50:e7:
                    3f:21:84:a6:c3:21:c5:95:4e:ab:1f:cf:65:9b:79:
                    32:e7:a6:09:96:2c:c7:0c:f1:92:ea:9d:e3:f7:1e:
                    35:17:dc:de:ef:1f:d5:20:af:4a:9b:6f:7e:c4:59:
                    37:66:47:57:16:91:24:1d:52:7c:d3:3e:aa:b4:b4:
                    74:20:e1:2b:c6:ca:c4:dc:50:c0:38:44:9c:2d:be:
                    7f:a3:98:23:dd:dd:19:c2:c2:85:b0:7b:af:98:eb:
                    c8:56:5b:67:62:3c:21:89:4b:46:15:31:95:44:36:
                    3f:8a:d3:e8:4d:a3:21:79:b4:4b:ad:44:30:08:a7:
                    80:a3:38:cf:df:88:66:8e:95:cb:12:54:d4:c8:97:
                    11:36:91:15:1f:fe:45:39:78:30:4f:4c:5f:fb:d1:
                    ca:89:e4:53:d4:51:76:c3:b0:60:d7:b5:47:e0:e1:
                    0b:03:3c:72:a5:23:11:f5:fe:dd:5d:b9:6c:6a:97:
                    38:36:56:95:55:e7:27:dc:1c:39:ef:7a:a7:a2:d0:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:41:9F:F7:64:8F:B1:B4:2E:FF:56:5A:77:2E:80:78:67:ED:1B:D0
            X509v3 Authority Key Identifier:
                keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f4:59:a1:68:eb:b2:71:c6:02:2b:cd:6b:f7:c7:7e:72:bc:
         b3:1a:7c:4f:79:82:23:15:91:18:54:39:cc:dc:c2:21:7b:d6:
         cf:49:f8:95:5e:da:10:6b:51:b0:50:40:24:49:f9:5d:d9:22:
         8c:ef:86:17:3a:6c:f4:8f:25:67:9b:82:ea:af:35:f7:be:7a:
         2c:30:e0:ee:70:b9:f2:26:e1:ac:f1:27:ce:b4:5a:2d:a2:44:
         73:5e:fd:6e:96:93:6d:39:5f:1a:0a:3a:36:1d:f0:13:c3:1e:
         d0:e6:8a:3a:01:99:d7:11:12:94:cc:12:0c:63:95:31:dd:f7:
         8d:f3:6c:a7:57:98:52:85:8b:f4:e5:37:70:6e:46:70:8f:00:
         de:9c:de:15:ec:7f:f6:22:47:82:6e:67:07:b1:99:62:a1:16:
         f7:2f:e8:ef:94:14:f8:1a:05:b8:8e:85:8a:34:87:de:b9:2c:
         1d:6b:68:3e:05:45:55:0d:2a:76:97:f1:64:b2:0b:02:14:77:
         5b:f0:05:fc:eb:85:5e:f5:70:5d:03:6c:da:15:dc:99:84:fb:
         9e:a9:dd:1d:ff:3e:16:eb:46:af:a0:be:fe:72:0c:4b:21:38:
         bc:80:78:d6:8b:9d:64:cd:f9:45:da:22:7f:6d:a4:06:92:78:
         0a:81:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 01:02:18 2026 by rpki-client