Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
File:                     4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json)
Hash identifier:          5aUvf5khBb7MowYTM0hELEUtghXUuZU5Hjm5BUtM3/4=
Subject key identifier:   8C:07:C5:36:B6:1B:3B:FD:CA:B4:EE:28:4B:71:7B:67:19:51:B8:53
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Certificate issuer:       /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial:       01A0EC9C86EB33CD4579054AAF007265D1BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
Manifest number:          13BB
Signing time:             Tue 29 Sep 2026 10:01:15 +0000
Manifest this update:     Tue 29 Sep 2026 10:01:15 +0000
Manifest next update:     Wed 30 Sep 2026 10:01:15 +0000
Files and hashes:         1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: zh7yXPg7IThpJtfi020RI5031GbYjDGrGU+/zJCMZ+4=)
                          2: qUacdXtveFfY3GQNxyBrLFI9QWg.roa (hash: 64sJ2iCdgQ8mYBa6Be5jblKVmgBgQDa2NTvtAAMiVRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:9c:86:eb:33:cd:45:79:05:4a:af:00:72:65:d1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
        Validity
            Not Before: Sep 29 10:01:15 2026 GMT
            Not After : Sep 30 10:01:15 2026 GMT
        Subject: CN=8c07c536b61b3bfdcab4ee284b717b671951b853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:a0:59:68:f8:55:79:7d:fe:25:32:64:87:
                    01:e2:6c:8a:8d:96:af:5e:8d:a8:3d:56:9e:2a:58:
                    2f:d2:65:a6:f1:de:61:67:0a:24:0d:ca:71:20:d3:
                    2c:2c:65:34:d3:ad:1c:ad:e1:c5:fc:50:3b:13:04:
                    1b:04:72:32:fa:dc:f4:8a:28:f5:35:d7:03:a9:21:
                    51:07:63:49:c0:75:b4:89:06:31:86:81:8f:2e:40:
                    94:8c:e0:e1:cb:4e:52:ce:53:4d:b4:b0:f1:cb:41:
                    2b:a2:5d:37:73:7d:ea:7c:29:1e:86:ab:d0:24:12:
                    52:9d:16:1c:5b:9a:8f:1f:a6:9c:12:e1:ac:84:87:
                    fd:84:01:2e:a9:94:b1:b6:98:29:08:00:b6:8e:1b:
                    1f:00:39:fc:92:16:af:33:36:31:5b:9d:0e:4f:20:
                    6b:7b:9c:aa:a7:6f:a0:0f:d4:26:81:b9:cc:87:e5:
                    fe:af:1e:3d:df:7c:33:05:a0:fc:0b:22:b9:14:f9:
                    df:3a:90:98:39:3e:f8:56:86:51:5f:3d:af:00:0c:
                    b7:87:13:3a:6b:e8:cd:6e:99:a3:6a:35:5c:d8:af:
                    69:56:38:4b:df:59:12:ff:37:72:71:b7:76:d6:8b:
                    14:68:3a:e6:0a:2f:45:d0:3e:e2:35:34:90:d5:18:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:07:C5:36:B6:1B:3B:FD:CA:B4:EE:28:4B:71:7B:67:19:51:B8:53
            X509v3 Authority Key Identifier:
                keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:19:af:0e:31:96:4b:7e:cf:d2:dc:50:b7:87:82:dd:4c:59:
         be:7f:73:43:9b:aa:7c:8e:5e:cb:d7:24:51:bf:7c:92:59:95:
         73:01:9d:37:0a:a6:62:dc:86:d3:81:7f:3b:a6:8b:07:03:2b:
         44:2c:90:5b:85:b9:75:b7:54:0e:df:0e:c0:6b:0e:9f:86:9c:
         c3:46:24:5f:e8:79:6c:19:19:b3:d1:ab:88:a0:23:74:57:ad:
         9a:df:b9:f5:2a:80:43:10:6d:c7:d9:09:01:43:78:e2:65:7f:
         9f:84:b2:01:0e:2c:b8:49:a5:2a:93:39:73:e8:6e:34:9c:32:
         98:2b:6f:57:cb:0e:df:0c:32:ee:a0:38:1b:55:ac:3a:67:21:
         c5:73:7f:36:16:83:0f:50:89:a7:83:9c:b5:88:68:54:45:cd:
         35:4b:a3:97:f2:ef:78:59:a7:26:82:47:8e:f9:01:ef:36:1a:
         73:64:62:b8:3d:2b:31:e9:4b:8b:43:25:25:d6:0b:0d:b5:a4:
         70:a0:9b:99:f6:22:b8:09:57:ce:7f:71:9a:56:51:e7:a1:8c:
         b6:67:95:0c:8b:50:78:5b:b7:0a:e9:dc:2f:de:97:e1:59:05:
         ae:57:97:a4:00:15:16:12:ba:01:94:50:e1:fd:ef:a2:5c:43:
         17:3c:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:19:58 2026 by rpki-client