Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
File:                     l-pUHBI_qpwO3HKfgp6Vn9KS430.mft (raw, json)
Hash identifier:          a4PSl2gITKXbEdVO1Z0tRf/Jwl4HWZToLNBsv3ZTeAQ=
Subject key identifier:   44:4B:4D:5E:BE:2B:A0:18:9E:07:02:9D:69:3C:7F:26:2F:86:83:AF
Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
Certificate issuer:       /CN=97ea541c123faa9c0edc729f829e959fd292e37d
Certificate serial:       01A13F02C57656B172394502379BD74524C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
Manifest number:          1A8C
Signing time:             Thu 15 Oct 2026 10:01:48 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:48 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:48 +0000
Files and hashes:         1: 8TOQQxBqXcp6fW3Hblb4iR3kNJk.roa (hash: AkbjUVe9rqlWL80z0FPBMQHWUds+wn6xHXbSbheZ2uo=)
                          2: Ap94zKbjaKRD8dLJxC3vQjdIzYI.roa (hash: JRuLWMClb6VMX6iY+2SiZAouIeUYw7rqGE6z3zbCih8=)
                          3: I69HW9-2LDsB2CaVEks5_3a5REs.roa (hash: VaEGUMNsvoxTwCs+xBT9y6X6/jmAjsOlAteyyzeE/Kc=)
                          4: l-pUHBI_qpwO3HKfgp6Vn9KS430.crl (hash: zQcAX+ws4+EF5iymaNUAlV1WEP2ChIIQsINoD+7P93c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:c5:76:56:b1:72:39:45:02:37:9b:d7:45:24:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d
        Validity
            Not Before: Oct 15 10:01:48 2026 GMT
            Not After : Oct 16 10:01:48 2026 GMT
        Subject: CN=444b4d5ebe2ba0189e07029d693c7f262f8683af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:4b:ff:85:0d:2c:69:9c:af:c6:d0:2f:52:
                    f6:19:f3:75:b2:bc:3c:7d:09:c9:25:30:20:83:d1:
                    9b:78:4c:95:23:75:3b:80:e0:04:c7:8b:b2:74:e2:
                    c4:e3:fc:24:2a:2c:ee:c9:7d:10:b7:81:53:3f:9b:
                    d5:f6:67:14:1c:21:73:a5:a6:1c:ea:dc:8e:6b:1c:
                    13:f0:5a:f0:d8:d8:ba:61:4e:d8:c6:9e:76:f6:89:
                    d7:b9:78:9d:36:ca:21:1c:ed:7b:2c:81:61:aa:fa:
                    87:2a:de:7a:1c:d4:34:37:86:47:06:df:3f:b6:9f:
                    0d:39:5c:f5:e8:a2:3e:bd:5b:1a:3d:f4:d8:25:b9:
                    f5:47:26:27:77:c9:79:d3:61:58:fa:e6:6f:e1:40:
                    ab:4b:86:30:9f:2e:5a:96:3e:40:40:81:7e:33:13:
                    cb:d7:d2:82:c1:86:8f:55:d8:eb:11:18:fe:84:fa:
                    ca:24:55:67:1e:08:a7:04:1d:44:3f:c7:53:4c:fe:
                    5c:15:1f:da:6f:c6:20:32:f9:d4:c0:b5:6d:89:2a:
                    0a:ad:ec:90:95:97:22:9d:d2:2f:c6:16:42:f0:f1:
                    c6:a7:18:bf:55:e3:42:4f:eb:7a:8e:31:7b:3a:e3:
                    06:5b:6e:d9:69:b7:0e:34:cd:a6:92:20:ad:16:2e:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4B:4D:5E:BE:2B:A0:18:9E:07:02:9D:69:3C:7F:26:2F:86:83:AF
            X509v3 Authority Key Identifier:
                keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f8:b4:45:81:34:72:fa:f8:6e:21:d1:83:7e:16:9d:16:79:
         86:f1:6a:d0:f5:d9:67:bb:b0:1f:2c:f6:5d:b2:24:04:8c:d5:
         13:7c:0f:c5:e6:96:1b:af:65:ec:46:f1:02:5d:c3:38:54:45:
         d4:82:8b:f9:f5:92:7f:90:22:4e:82:fc:23:e3:9c:9d:cd:47:
         d5:13:62:27:2e:51:ac:6b:8c:7f:c2:7c:6a:e6:a4:ed:0f:42:
         d3:9c:10:55:36:fc:4a:9e:49:a4:d5:4e:e5:d0:7c:d9:91:eb:
         10:55:9e:62:5f:65:c7:1c:87:9a:b1:30:0c:b5:3b:47:dc:ee:
         6b:0d:7f:db:79:a5:fa:00:d2:b6:c6:80:f3:41:b0:e5:5b:b7:
         0e:bc:fc:00:fe:0c:ef:af:7b:96:a0:04:f6:14:fa:de:2e:ce:
         9e:cc:d9:c0:a5:59:61:23:de:a9:f8:aa:77:33:aa:91:e1:82:
         57:5a:88:b0:17:fe:ee:e4:e5:c4:30:09:7b:81:4a:3f:d9:cf:
         cb:19:ad:2e:3b:af:9d:2e:62:7a:ea:1c:b9:e0:c8:99:95:6c:
         54:d5:58:eb:94:e1:54:92:f4:41:6d:17:56:f5:4b:3b:ae:1d:
         15:60:5f:9d:44:b5:28:7b:24:2f:87:fe:98:aa:79:72:ff:44:
         0b:ef:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:22:55 2026 by rpki-client