Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
File:                     L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json)
Hash identifier:          uVXwAjRviHznC5xrG1SBtKIBKJ6/R63agzukOYPo7y4=
Subject key identifier:   A4:FA:8C:6B:8A:6E:6D:2A:D4:2C:8A:2D:19:49:65:5A:F2:7A:E3:B0
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Certificate issuer:       /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial:       01A107381CB98562E607045FCF47FABCE63E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
Manifest number:          17CE
Signing time:             Sun 04 Oct 2026 14:01:20 +0000
Manifest this update:     Sun 04 Oct 2026 14:01:20 +0000
Manifest next update:     Mon 05 Oct 2026 14:01:20 +0000
Files and hashes:         1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: OKKjRMQHD4+ZQWJOOfbO/geAalpju95rUhD34J/dai0=)
                          2: tNjZH9-x1g7HqUfJGt0InZjB23w.roa (hash: RRoUsNS1EP4tRlbwAyzXgXLAhFiDzTM4MGWjbgquZiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:38:1c:b9:85:62:e6:07:04:5f:cf:47:fa:bc:e6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
        Validity
            Not Before: Oct  4 14:01:20 2026 GMT
            Not After : Oct  5 14:01:20 2026 GMT
        Subject: CN=a4fa8c6b8a6e6d2ad42c8a2d1949655af27ae3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:9d:03:77:88:f0:35:c4:61:d9:08:52:82:
                    aa:20:71:9e:05:ad:79:5e:f3:14:61:58:a2:ac:9a:
                    6f:ae:e9:a0:3d:a8:cf:41:fd:3c:05:91:a9:95:8e:
                    53:77:be:1e:c2:61:42:b8:ea:1d:8b:2c:73:ae:12:
                    31:89:4b:6a:4b:8b:5f:11:e0:0a:79:7a:8c:b4:e9:
                    cc:37:cc:58:07:01:87:c2:26:cb:1d:06:31:f0:64:
                    e7:6e:ab:b4:b4:29:31:1b:86:8f:eb:12:03:19:31:
                    23:b5:c3:d1:1f:a2:80:8f:52:3d:1d:2c:b5:15:97:
                    b2:8e:90:20:8e:06:af:0c:07:c7:4d:b0:bd:4e:a8:
                    59:a9:b0:24:66:f1:1a:67:f0:2e:83:a7:8c:a7:08:
                    89:83:2d:37:be:8b:24:98:5a:45:53:e6:aa:e5:80:
                    fa:d1:80:d8:c9:5c:08:5d:b2:16:c0:82:80:c4:a6:
                    9a:7d:41:ca:cf:9e:72:57:26:b2:c7:96:53:7e:5e:
                    32:16:9f:5e:0a:53:52:61:2a:a6:f5:e5:f1:2a:88:
                    e1:c0:bf:f5:c9:27:ee:ca:6f:9d:5b:bf:9d:5d:3c:
                    9b:f5:36:f7:f9:b2:bb:27:0f:da:18:c8:5e:52:24:
                    cd:4b:8a:f6:47:1c:81:4f:a7:27:7b:af:db:33:15:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FA:8C:6B:8A:6E:6D:2A:D4:2C:8A:2D:19:49:65:5A:F2:7A:E3:B0
            X509v3 Authority Key Identifier:
                keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c2:3c:01:9e:16:d8:bf:37:ea:89:74:38:2c:99:f0:4c:a5:
         d9:5c:41:d6:61:65:06:00:24:49:c7:2d:c3:a2:2d:17:c4:76:
         0b:1c:d6:dc:b8:b5:8c:5f:59:b5:eb:9b:8c:db:13:bf:ea:8f:
         94:03:60:15:89:06:19:85:0e:03:3b:51:db:1a:cc:53:7d:38:
         78:18:4f:52:1e:3c:9a:89:04:bc:6a:b6:a7:50:49:e3:83:e5:
         0b:2c:0f:ef:24:1a:7d:02:88:e6:91:b9:79:f3:f3:08:de:a5:
         26:d5:0d:32:dc:75:a7:ae:db:c2:f6:fa:0c:95:1a:dc:3d:59:
         49:17:f9:03:4e:12:dc:1f:15:57:42:9f:60:16:5b:95:f2:0b:
         76:22:5b:38:f4:90:1b:ad:6f:4c:75:7e:88:bd:ed:ce:87:f1:
         51:1d:5d:86:42:5d:dd:77:8a:28:a9:6f:6b:e0:73:f8:2c:c3:
         52:51:80:10:5d:cd:30:99:3d:8a:a2:d3:6f:9d:e6:59:b3:37:
         b7:a7:80:8e:b7:cd:03:c3:d0:a1:38:6d:9c:61:b7:7c:b3:19:
         de:5d:40:05:7a:89:fc:8a:9e:18:eb:a7:dd:21:1a:1c:9b:8a:
         bb:6c:53:30:fd:4c:8b:1c:42:a3:b9:14:54:84:94:4e:a1:dc:
         7a:31:2c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:40:17 2026 by rpki-client