Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File:                     4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier:          IyhVgsJuF6hyvowmKB4obHk0tlplLqHcqCBoaJoIc2E=
Subject key identifier:   0D:CE:C6:67:72:7A:17:13:55:25:9C:26:D2:24:AB:8E:B4:99:39:21
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       01A1ABCCC17721375C9DC1A913FFED8F136C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number:          1B03
Signing time:             Thu 05 Nov 2026 13:01:25 +0000
Manifest this update:     Thu 05 Nov 2026 13:01:25 +0000
Manifest next update:     Fri 06 Nov 2026 13:01:25 +0000
Files and hashes:         1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=)
                          2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: v2tH0317AMa+VoarS1N9ix6h/ityu2DOsH906N492No=)
                          3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=)
                          4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=)
                          5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=)
                          6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=)
                          7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=)
                          8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=)
                          9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=)
                          10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=)
                          11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=)
                          12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ab:cc:c1:77:21:37:5c:9d:c1:a9:13:ff:ed:8f:13:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Nov  5 13:01:25 2026 GMT
            Not After : Nov  6 13:01:25 2026 GMT
        Subject: CN=0dcec667727a171355259c26d224ab8eb4993921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:34:53:5d:a1:17:e3:08:90:12:a8:ef:09:
                    81:87:47:79:e0:08:d4:5d:67:9f:b6:66:6c:1b:08:
                    c4:63:50:24:8f:75:b4:51:ff:d4:10:73:9a:ff:3a:
                    da:20:86:91:02:29:cb:dc:a4:26:cf:a4:94:c7:f8:
                    24:02:f8:a8:05:a6:27:0c:43:40:f4:7f:98:1a:45:
                    d8:e6:cd:10:40:df:49:19:7f:b7:bd:67:c2:5f:f4:
                    8c:2d:09:13:86:5b:89:ea:8d:0d:e0:a4:08:a2:fe:
                    00:9f:88:0b:6b:34:2c:23:0c:ce:22:19:4e:4b:be:
                    5c:9f:b3:46:57:d0:e4:5b:2c:b8:ab:02:b3:4e:c5:
                    31:a7:06:82:ce:d4:d2:3f:43:ee:d6:c0:1a:b4:62:
                    98:c7:57:61:dd:c3:13:ee:43:53:96:17:0a:36:f3:
                    d2:d2:20:01:74:18:93:63:eb:5e:a9:fe:5e:fc:64:
                    d3:9b:76:13:ca:12:d5:02:73:e9:7d:8c:f1:61:55:
                    fa:50:67:2d:1e:60:3c:9b:e1:94:76:58:6c:6a:d0:
                    82:1e:7e:68:a1:61:0b:84:9c:3b:13:cf:ab:c1:50:
                    93:d7:58:34:c3:e0:33:22:2d:68:f2:e9:82:83:3c:
                    93:1d:d8:6b:c9:38:a3:f0:b5:0c:ff:54:c3:1d:74:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:C6:67:72:7A:17:13:55:25:9C:26:D2:24:AB:8E:B4:99:39:21
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:d0:3b:d8:3c:fd:ae:47:ef:bf:fe:31:c0:9f:2f:e0:2e:
         52:ac:d6:eb:2c:42:1c:df:89:1c:9a:6d:3e:e6:d1:49:f1:9c:
         a8:fc:cf:35:11:91:fe:48:99:a2:31:0f:81:85:15:38:22:d2:
         97:9f:08:63:d2:3e:81:37:4a:0f:65:d2:a3:fb:0c:be:db:68:
         32:5c:f2:ad:41:eb:9e:5e:6b:3e:23:ac:d6:31:8c:e6:ed:f2:
         b0:21:d7:0b:4d:c3:30:96:d9:b3:12:57:11:ab:d4:9a:75:ac:
         44:88:35:66:28:70:97:39:7d:28:4b:c6:8b:fa:64:4e:07:0a:
         77:39:2f:19:75:ad:63:ff:c7:f9:e6:2e:d6:9d:9f:06:38:ef:
         f6:f3:1f:3c:86:d7:1c:d2:5b:02:20:76:b1:0f:e2:38:ed:9d:
         9b:3f:2f:57:59:32:9e:54:50:a1:a5:ac:ac:19:f7:ef:d7:10:
         47:93:f4:57:a8:c9:95:4f:46:36:11:57:05:50:57:0b:d9:22:
         2c:6e:3f:b4:e8:b9:31:a6:c3:51:78:ad:84:fd:69:b2:95:e8:
         b6:de:3b:a5:8d:20:c8:f6:bc:0d:77:86:eb:b5:07:b4:7c:79:
         e0:62:32:b9:a9:3d:99:d6:4c:18:bc:70:d3:94:0e:53:25:f0:
         c4:29:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:55:32 2026 by rpki-client