Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
File:                     4OU7sw0HUg-FeuZW962BPyLv0VI.mft (raw, json)
Hash identifier:          pk+/1TckefT6PXPrJb8ml8WvsxWtIxpPykZukuPWRjU=
Subject key identifier:   D0:D4:48:36:E2:BF:8E:0E:53:42:B0:1B:CB:97:7D:99:05:9F:47:C1
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Certificate issuer:       /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial:       01A0D1C98A7A6CBA2E5E1B92F749FE63C169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
Manifest number:          0300
Signing time:             Thu 24 Sep 2026 05:00:41 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:41 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:41 +0000
Files and hashes:         1: 4OU7sw0HUg-FeuZW962BPyLv0VI.crl (hash: 8CXkzN5o1meSWzNlRDd7OV0q11/FO8WCB9LgAZBmufU=)
                          2: VdHoxGlnRqHLH1BFJzKzY5i5REw.roa (hash: dsaCJE0OYhxYSMRnj1r3I0s5ntGNaUFaI5WVluKFvG4=)
                          3: xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa (hash: LniWd40MUm27qbAUJ/AFuq8QyhRMHVdc7tCz6NRyg3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:8a:7a:6c:ba:2e:5e:1b:92:f7:49:fe:63:c1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
        Validity
            Not Before: Sep 24 05:00:41 2026 GMT
            Not After : Sep 25 05:00:41 2026 GMT
        Subject: CN=d0d44836e2bf8e0e5342b01bcb977d99059f47c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:0b:e2:30:83:86:ed:74:d9:63:1d:6b:c6:
                    68:25:2c:7d:32:c8:44:6e:4d:1b:52:71:5b:b5:d5:
                    d3:b3:f2:c6:41:b6:af:55:82:4f:f7:cc:5c:53:61:
                    a0:8c:ff:42:e9:ea:a4:57:dd:c6:b1:d9:f1:1d:75:
                    3d:2d:8a:b2:74:bc:69:e0:38:0d:c1:33:b1:71:b9:
                    c2:3d:54:9c:2a:a0:7f:fb:71:53:25:40:e7:a0:b5:
                    83:85:12:74:3f:79:06:93:0f:4e:61:78:b0:87:6b:
                    72:80:66:24:eb:2c:d5:5d:95:21:ba:ff:b8:11:90:
                    ac:8d:a7:f2:16:2d:b7:00:0e:3f:0f:b6:ee:cb:a2:
                    55:01:96:b2:0d:5f:2a:32:c7:bc:9e:8d:85:04:fd:
                    53:d8:69:1e:97:f0:6f:20:83:ec:c6:47:b6:46:eb:
                    39:6b:1e:d1:2a:52:5e:bf:60:17:88:84:d1:e5:b3:
                    d8:ff:dd:b1:69:98:d2:3d:93:70:3a:f5:a2:29:6c:
                    a3:5b:40:6e:5c:4a:82:73:3b:ec:1b:22:ef:56:08:
                    d0:2d:67:86:1b:33:ad:2e:5d:a2:9c:eb:7b:a0:19:
                    7c:29:f6:4e:03:da:72:b0:98:2b:7a:a7:a5:e9:3e:
                    04:1d:53:fc:39:9e:2b:46:b8:b9:11:c2:85:6c:97:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D4:48:36:E2:BF:8E:0E:53:42:B0:1B:CB:97:7D:99:05:9F:47:C1
            X509v3 Authority Key Identifier:
                keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:a2:54:6f:19:17:8b:54:d2:12:fd:45:61:5d:85:70:c8:9a:
         11:e1:85:fa:71:06:18:60:a9:9a:da:82:e6:88:b5:d5:ea:9d:
         c6:36:c8:89:cf:d3:c6:a1:44:4e:cc:ee:3a:73:4a:9b:fe:a3:
         07:f4:49:b9:eb:83:78:82:b5:72:b4:22:23:03:60:4a:df:af:
         fb:7d:7c:aa:14:ec:83:03:f3:b5:e3:49:1b:40:50:b7:c0:25:
         5a:35:ee:d3:0b:de:8d:bb:fe:51:e8:fb:04:e5:f3:5f:68:0b:
         1b:c6:c8:22:23:0a:86:f3:16:b4:70:f3:08:24:d8:33:9f:69:
         52:b3:b5:55:ce:f6:05:37:ae:c1:46:4c:e8:da:cc:5a:30:43:
         b4:5c:7d:c6:2f:b1:bc:76:63:56:c7:54:45:a3:f6:ac:9b:f4:
         5c:01:a2:a6:a2:45:f9:2e:e0:c9:71:6d:c0:5b:27:ea:48:51:
         f1:77:50:b3:37:38:3c:24:36:05:1a:93:1f:c6:58:38:a2:1e:
         34:3a:ec:e2:61:ca:c8:72:1d:28:7d:76:e4:b4:05:a8:9a:ce:
         76:86:25:ed:a6:d1:ff:86:6f:e5:9f:35:86:2e:55:ad:81:26:
         b4:0f:99:6a:98:6c:8d:6c:9c:00:e5:ea:56:d6:91:06:45:79:
         2a:41:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:19:03 2026 by rpki-client