Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File:                     4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier:          XonCcBqKTnMfZphbIrpcs4euGBp4cbKgyaC5cV1pz94=
Subject key identifier:   95:63:BE:41:58:DC:88:9D:F1:3B:F6:93:8B:FC:07:56:C7:EB:1F:F1
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       01A1C0657DCF8740FBEF396870A25465D20B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number:          13A9
Signing time:             Mon 09 Nov 2026 13:00:39 +0000
Manifest this update:     Mon 09 Nov 2026 13:00:39 +0000
Manifest next update:     Tue 10 Nov 2026 13:00:39 +0000
Files and hashes:         1: 1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa (hash: p8zMORBp4EwLrEV0pwePL8HYOl4fQLM1ray936MhnIo=)
                          2: 3gKR0cK9QoxfvHnSIiqY4bcG8ww.roa (hash: ZcGaXU4YPznoibhlbyhjzKqhwZf4BJJECm4SI2hoD/U=)
                          3: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: KUgdn/rfpYMJSkoZiiB9+HJljjBTfZt6NRSrDgV669U=)
                          4: 8tAmUasl9shJmzVr02QyR9gf1yg.roa (hash: 56dLPJcjlB89ljFKBrlBrzN9saKBJC9XHbbe4kgHJpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c0:65:7d:cf:87:40:fb:ef:39:68:70:a2:54:65:d2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: Nov  9 13:00:39 2026 GMT
            Not After : Nov 10 13:00:39 2026 GMT
        Subject: CN=9563be4158dc889df13bf6938bfc0756c7eb1ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6d:29:17:af:a6:ea:e6:7a:13:52:ef:dc:ef:
                    30:79:6b:e3:58:e7:68:b9:ea:0b:66:93:ed:d4:25:
                    ac:d0:9f:be:7d:df:f9:d5:62:da:b9:4f:43:16:0a:
                    06:80:c9:b1:9a:09:d2:60:58:06:3a:98:ce:66:bf:
                    4a:5a:e4:68:3f:90:46:41:99:ba:d5:ef:73:3e:5f:
                    23:bf:8c:d3:19:e3:40:8d:13:ff:45:d1:9c:80:51:
                    09:d0:1e:a6:81:11:f7:a9:d7:ad:33:cf:87:b0:4b:
                    f2:58:9b:6a:3e:a9:ee:be:a3:88:7d:24:16:36:c5:
                    02:be:45:9d:db:0b:fe:07:f8:4d:12:e0:48:ee:da:
                    d0:11:8a:32:0f:b8:03:97:ce:b7:d5:37:0e:3f:1b:
                    24:0f:21:9c:b5:cf:da:05:6c:f5:7e:b4:a9:57:b0:
                    f9:cf:63:dd:c9:6e:7e:fb:5f:5e:6f:f2:86:8d:f0:
                    c6:3d:35:32:7e:59:5c:49:1b:b6:10:ae:fd:9f:79:
                    31:42:69:2c:94:4e:52:cd:25:d7:72:1e:b3:aa:48:
                    04:95:95:7a:64:60:d6:dc:5b:11:cc:9e:16:fd:30:
                    8b:48:1e:00:f9:c5:33:aa:4e:14:04:55:f5:27:0e:
                    19:8f:9e:b0:50:fa:07:b5:5a:28:72:8c:8d:e7:9d:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:63:BE:41:58:DC:88:9D:F1:3B:F6:93:8B:FC:07:56:C7:EB:1F:F1
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:56:c4:a2:0c:7b:54:4a:10:13:67:06:c0:58:e9:93:31:62:
         6f:78:f8:a3:0b:9e:ea:8f:85:96:ce:5a:1d:a5:11:5c:e5:ca:
         95:d8:5f:a3:da:6f:7d:e8:5b:ed:4f:23:90:c6:a5:13:45:7d:
         18:bf:b4:ec:a2:3a:e0:13:fd:24:87:ce:08:b0:c5:4c:3b:f7:
         97:f2:a2:bd:46:99:4b:b3:06:a3:e5:1a:66:b9:ad:94:85:f9:
         f2:a4:33:d5:d0:1c:29:bf:a5:a6:bc:26:34:26:bf:13:6d:aa:
         75:cf:a6:6e:e1:34:d8:73:45:b2:c6:43:be:90:fb:66:67:d7:
         ac:7d:9b:8f:d9:09:20:1f:db:b8:09:04:3d:c5:9d:41:72:e6:
         d0:84:4b:73:b6:02:78:f5:e2:d0:b0:66:1b:20:d4:1c:ab:af:
         8e:c0:86:88:9c:0e:e1:69:8e:a3:c6:c5:9e:3b:a6:89:21:7a:
         fa:a3:eb:b6:6d:76:e5:e9:7e:5c:be:b4:39:ce:15:68:71:bb:
         1d:8d:dd:bf:c3:05:d8:18:a8:8a:39:bd:ba:8b:ca:48:b4:fa:
         dc:5c:85:04:ae:21:e0:b5:f1:fe:b1:c4:fa:05:df:53:0d:db:
         a2:80:20:4c:39:a6:e3:5e:2c:93:57:80:56:cf:5c:08:87:01:
         a6:4a:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:25:23 2026 by rpki-client