Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
File:                     4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json)
Hash identifier:          Dktg03xVEjUvNF3xj0q3WMYmQRxvUYKobMdfJIwvjvk=
Subject key identifier:   83:BA:85:6B:20:74:60:D8:28:58:6C:65:8D:7A:C8:45:54:26:45:3F
Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
Certificate issuer:       /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Certificate serial:       01A0E2F4A1DB45D4B8BE319D0A2198A2560A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
Manifest number:          1378
Signing time:             Sun 27 Sep 2026 13:01:18 +0000
Manifest this update:     Sun 27 Sep 2026 13:01:18 +0000
Manifest next update:     Mon 28 Sep 2026 13:01:18 +0000
Files and hashes:         1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: yYtCuMEfaiRssL+Y6Ge5UP7mLi/tvOA7/0bV0GULkvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:f4:a1:db:45:d4:b8:be:31:9d:0a:21:98:a2:56:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
        Validity
            Not Before: Sep 27 13:01:18 2026 GMT
            Not After : Sep 28 13:01:18 2026 GMT
        Subject: CN=83ba856b207460d828586c658d7ac8455426453f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:fe:c2:23:e6:e2:06:bc:62:08:86:f8:8e:
                    2e:5e:48:ec:c5:87:df:f7:ae:f6:5f:f5:bd:ec:ea:
                    4c:16:88:97:d0:36:ec:9f:f9:5c:d0:e4:57:22:ef:
                    50:76:e7:26:d2:c6:86:85:0f:57:45:6e:08:4d:93:
                    4e:32:42:19:45:3c:2c:47:5e:78:e5:48:10:0d:3e:
                    04:c2:20:39:a5:66:20:b4:56:9c:ec:1d:f8:99:2b:
                    cd:28:b6:60:2d:8a:ae:60:c2:58:25:fd:07:32:55:
                    b0:af:9f:26:ef:65:d9:42:a2:72:80:fd:31:11:dc:
                    b5:de:39:f5:30:30:4d:3c:4e:91:f0:be:3d:84:7d:
                    e9:dc:0d:60:55:30:ef:3b:12:fd:fa:2d:9b:8c:fd:
                    1f:42:03:06:a5:8c:f4:44:94:5a:0c:28:6d:04:19:
                    d7:72:ed:ec:bb:df:f1:20:fc:05:78:f4:82:f0:c4:
                    1e:4f:53:48:c6:52:20:80:b9:3a:e0:bc:cb:b4:48:
                    10:07:c5:da:98:0b:2b:12:85:33:0c:3e:81:81:cb:
                    2e:ef:63:3a:c8:11:db:72:f0:89:82:89:6b:51:47:
                    7d:c4:20:3f:cc:48:e8:d1:aa:31:e1:f8:c3:76:e9:
                    40:b1:24:19:1b:4a:78:60:b9:3f:c0:9a:af:28:c3:
                    f8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BA:85:6B:20:74:60:D8:28:58:6C:65:8D:7A:C8:45:54:26:45:3F
            X509v3 Authority Key Identifier:
                keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:46:8f:0b:34:cd:5f:96:5b:7f:c9:2a:42:5c:ac:24:ed:61:
         f9:d3:bf:6f:c3:95:6f:ac:55:01:87:04:7b:3f:b7:8b:0f:07:
         f4:67:45:58:77:24:47:07:04:88:3a:8d:c5:ee:78:f3:32:94:
         80:53:b5:6a:d6:cd:77:e9:2a:94:74:72:8a:97:5a:c0:58:b6:
         fa:42:70:39:20:ed:1b:6f:25:9c:df:ea:32:94:85:2b:5c:f4:
         ac:ec:27:1c:12:91:6a:ad:ce:2f:a0:ce:b1:c9:8a:aa:c8:1f:
         d2:59:1e:65:16:81:59:09:8a:25:e7:b9:e9:42:68:13:d7:32:
         24:1a:8b:75:13:99:7b:91:5f:49:4a:15:a9:52:70:82:2a:02:
         b2:b8:5e:80:89:34:8e:5e:fa:7a:de:1d:78:23:03:e5:ca:7e:
         26:84:79:13:fe:e1:74:27:c9:0f:25:50:88:55:4a:2b:f3:d9:
         cb:8e:90:f9:63:22:ce:6d:0e:fe:40:67:f8:f8:19:de:dc:52:
         2c:c3:ee:d6:d7:10:6e:6a:a8:a4:a1:72:ff:86:06:34:fc:96:
         5d:56:d7:14:0f:23:6a:a3:52:f5:2c:09:fe:40:cc:08:c9:a9:
         2d:42:cd:29:24:49:9a:44:ce:e3:4f:41:2d:22:5c:8b:7a:e9:
         c7:a4:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:30:32 2026 by rpki-client