Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft
File:                     4H4P7Wh4uZCgYJWJih2QakdN910.mft (raw, json)
Hash identifier:          ChHzrty9XzO7F5nisRdrgeWe1LrDF5q/JQ+Smh5k41I=
Subject key identifier:   40:38:2F:59:71:BA:41:A1:CB:62:34:60:93:CD:CD:EC:33:03:25:74
Authority key identifier: E0:7E:0F:ED:68:78:B9:90:A0:60:95:89:8A:1D:90:6A:47:4D:F7:5D
Certificate issuer:       /CN=e07e0fed6878b990a06095898a1d906a474df75d
Certificate serial:       01A0D5DDD3AEE5EA286554108DF48DB33122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft
Manifest number:          E8
Signing time:             Fri 25 Sep 2026 00:01:19 +0000
Manifest this update:     Fri 25 Sep 2026 00:01:19 +0000
Manifest next update:     Sat 26 Sep 2026 00:01:19 +0000
Files and hashes:         1: 4H4P7Wh4uZCgYJWJih2QakdN910.crl (hash: l3i3P3obU0XwtlhCOJIpP+A+aH4cTuUs5lGI5vc3QAE=)
                          2: PVwPhYKLtJ1NqdIeINS1i-PMklo.roa (hash: LLpYJpjoR2ZiSBq/lFV1+fNxk1oL13m8O/kJtCUEbxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:dd:d3:ae:e5:ea:28:65:54:10:8d:f4:8d:b3:31:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e07e0fed6878b990a06095898a1d906a474df75d
        Validity
            Not Before: Sep 25 00:01:19 2026 GMT
            Not After : Sep 26 00:01:19 2026 GMT
        Subject: CN=40382f5971ba41a1cb62346093cdcdec33032574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:2a:97:07:3f:ba:dd:e9:0e:7b:13:cf:8c:
                    42:70:1a:67:f0:41:9a:d8:2c:fa:1c:4e:76:7a:51:
                    88:dc:b5:60:2d:f2:4b:80:2b:a2:b4:ab:ce:1b:04:
                    cb:38:34:92:a8:1f:6b:d7:fd:9e:e7:54:f0:8b:f5:
                    64:87:fc:9e:98:c8:d5:32:2b:ae:43:5a:db:9d:db:
                    8b:6f:cd:09:ad:9c:e1:14:65:26:4f:f2:0e:d7:5b:
                    62:89:f8:20:aa:5f:5a:99:0c:ca:85:5b:66:e7:40:
                    b5:6b:cc:54:0b:c7:c9:62:3b:bd:76:8e:8f:7f:8b:
                    f6:17:bc:07:fb:07:77:a7:45:e7:6f:9e:d7:9b:cc:
                    44:46:e4:ae:cb:c6:da:02:d2:ac:b4:c4:0b:04:d6:
                    f4:05:52:17:f9:eb:ef:5a:44:45:77:d9:28:35:e3:
                    0b:99:a7:ac:92:2e:d4:93:a0:67:ab:49:78:d5:72:
                    3f:5b:89:39:0c:1c:0d:4c:0b:aa:a2:46:89:3e:7d:
                    39:58:66:07:57:dd:89:4c:a1:8d:24:28:a6:2d:81:
                    2f:23:be:21:67:fa:d7:ae:60:6e:40:66:22:10:33:
                    ba:3d:0c:3a:51:79:23:55:84:3e:0c:96:72:60:82:
                    36:3c:ba:b8:20:56:2a:58:a2:f7:79:c2:dd:9f:fd:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:38:2F:59:71:BA:41:A1:CB:62:34:60:93:CD:CD:EC:33:03:25:74
            X509v3 Authority Key Identifier:
                keyid:E0:7E:0F:ED:68:78:B9:90:A0:60:95:89:8A:1D:90:6A:47:4D:F7:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3b:ff:1e:e1:15:40:59:94:63:cf:46:2d:fc:ba:de:fc:56:
         26:be:e6:b1:70:53:09:fe:df:74:f7:3c:be:ac:18:ce:9a:5c:
         e2:86:15:0a:c1:7c:1b:97:72:c8:c8:93:a9:cc:37:f5:3f:bd:
         75:95:52:e8:ab:68:c3:a3:39:5a:e4:3f:ee:39:b9:ed:0c:c4:
         b2:48:c4:bd:44:fb:d1:60:57:55:fc:46:4c:43:f2:e2:a3:da:
         4d:45:ad:43:b4:43:72:ea:39:29:7e:9a:60:d8:cc:ef:45:e5:
         49:d7:b6:b9:79:a4:70:46:4e:fb:5f:9e:12:05:94:09:18:ce:
         40:8e:cb:60:0f:b0:32:29:87:af:45:90:9e:c5:44:02:69:f8:
         22:ed:8d:87:28:9e:d2:5a:c4:e4:44:2c:82:8f:df:ac:f6:9f:
         38:a7:96:a3:5d:e3:21:de:31:b5:67:9a:9f:de:47:ba:57:4f:
         6c:ab:de:95:79:f3:1d:a6:eb:72:fc:a0:67:59:86:a7:b3:4d:
         f6:8a:b2:29:97:e6:ce:bf:0f:e0:b0:ca:23:57:83:c5:d4:5d:
         1d:e6:c7:8b:67:a5:8a:72:52:5b:d0:59:e5:f0:a5:0d:f9:c6:
         52:13:d9:d3:8f:d9:ee:58:82:95:81:92:fd:3f:dc:69:73:1a:
         bf:53:2e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:35:20 2026 by rpki-client