Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
File:                     4qEN5v-uWQQnJEoDND22asVkJ1o.mft (raw, json)
Hash identifier:          KN1TbT3lLf5dRiXhEQgB4OeBAfoZq8YQkUWIhVZQr5M=
Subject key identifier:   EE:86:B9:54:F8:6A:F4:69:04:B3:59:6F:13:A0:C3:25:1A:B2:27:B2
Authority key identifier: E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
Certificate issuer:       /CN=e2a10de6ffae590427244a03343db66ac564275a
Certificate serial:       01A139A43E3741946A04FBF0F9FA63F5EB4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
Manifest number:          17EA
Signing time:             Wed 14 Oct 2026 09:00:27 +0000
Manifest this update:     Wed 14 Oct 2026 09:00:27 +0000
Manifest next update:     Thu 15 Oct 2026 09:00:27 +0000
Files and hashes:         1: 0gIiALe6pz1IQicIRlap9JpEjvk.roa (hash: a8WIdauJpV7mniv+m0G3DWtScZS35ac1cb7lSAK0pD4=)
                          2: 4qEN5v-uWQQnJEoDND22asVkJ1o.crl (hash: U//aYuVEFuKeaP1xif466hGlMnEEIq9roMpp/SaerHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:39:a4:3e:37:41:94:6a:04:fb:f0:f9:fa:63:f5:eb:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a10de6ffae590427244a03343db66ac564275a
        Validity
            Not Before: Oct 14 09:00:27 2026 GMT
            Not After : Oct 15 09:00:27 2026 GMT
        Subject: CN=ee86b954f86af46904b3596f13a0c3251ab227b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:84:d6:4a:0e:82:49:05:c3:f5:11:c2:6e:
                    92:1e:81:3c:37:3f:76:46:03:1d:87:b9:5e:21:ea:
                    1e:07:a3:02:da:eb:78:19:da:60:87:8a:87:f1:a2:
                    e3:36:97:9b:10:1f:72:6c:b0:be:60:b0:63:a5:41:
                    44:45:1f:15:0f:ce:5f:9e:dc:76:23:56:98:b3:71:
                    5f:10:61:94:c5:da:5f:ab:f4:00:27:af:5e:eb:38:
                    7d:7f:13:04:c2:e2:67:4c:b7:27:44:39:91:91:01:
                    64:a2:9b:e6:0b:42:e0:d6:b7:83:b7:bd:18:f8:f4:
                    b9:88:a2:9d:ec:3f:9c:b9:73:5a:f6:0d:03:8e:fe:
                    4b:80:f7:9b:a2:d0:9f:0a:7c:59:33:35:20:de:8f:
                    b4:ba:5f:0d:9b:d1:bc:1e:6b:1f:2f:3a:2d:cc:d9:
                    5c:14:5c:46:46:8b:9e:40:18:23:21:0d:40:ca:17:
                    83:1f:de:47:b3:6f:37:f4:af:b9:dd:5a:58:c7:25:
                    07:29:c8:4c:3a:0d:bf:a1:86:a8:01:c2:b4:ee:95:
                    ee:ee:8a:b9:b5:94:56:b6:11:59:17:28:64:4a:90:
                    ef:4b:fa:9a:bb:0d:63:ae:df:61:a3:c2:94:2f:4c:
                    a7:10:c1:22:30:d6:38:55:2e:31:d7:57:7b:90:a1:
                    5c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:86:B9:54:F8:6A:F4:69:04:B3:59:6F:13:A0:C3:25:1A:B2:27:B2
            X509v3 Authority Key Identifier:
                keyid:E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1a:8d:68:31:77:0d:d3:84:21:1b:20:84:99:55:42:60:0f:
         47:2f:99:a4:43:95:32:4b:ab:56:1f:97:60:87:2d:51:c2:93:
         6f:f3:23:aa:96:35:a3:04:6f:d2:fb:7c:61:36:73:03:3c:22:
         b9:bb:3c:50:0a:95:83:85:ed:40:04:54:8a:d4:ea:dd:3c:7b:
         20:47:b5:16:6a:b1:8b:82:e7:4c:a1:b2:0e:89:dd:21:15:47:
         3d:60:db:78:35:0b:21:8f:bb:1f:0b:32:9f:10:c6:2d:ee:b3:
         14:69:4b:d0:5d:b9:07:50:f1:39:42:00:d2:0a:fe:d8:c8:40:
         92:ce:94:5b:37:dc:d2:f9:d1:af:1c:e9:ac:e1:64:eb:2d:35:
         01:14:88:9a:28:f6:1a:ae:ab:1c:72:1b:41:58:af:d9:c3:3a:
         12:22:d5:d4:85:b7:46:54:95:e8:e5:ac:cf:1a:45:a1:06:df:
         bf:b9:1e:b3:30:6b:2c:69:21:96:ad:ef:6f:da:03:26:05:8a:
         b7:08:2b:3f:f2:9e:6a:b0:cb:7e:ed:da:ca:b4:3e:6a:b7:58:
         4d:f8:8c:0d:42:ac:bf:b8:76:b8:8c:b4:73:82:ce:3e:17:50:
         ea:45:ca:93:2b:c3:46:b2:c3:5e:43:3f:37:4d:16:c7:33:a4:
         a2:04:dd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:43:00 2026 by rpki-client