Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
File:                     4YpwGxuHPrjfflleMt8fBxMJ4vE.mft (raw, json)
Hash identifier:          0qmSOHnrR2LR+PQR5jEd420XoXg0LX5DzzuGNfAcA/o=
Subject key identifier:   24:E3:83:97:20:39:61:D2:0A:98:41:CE:9A:1C:15:87:26:D0:78:62
Authority key identifier: E1:8A:70:1B:1B:87:3E:B8:DF:7E:59:5E:32:DF:1F:07:13:09:E2:F1
Certificate issuer:       /CN=e18a701b1b873eb8df7e595e32df1f071309e2f1
Certificate serial:       01A10D7063DA7794B1CF011DE996551ABF91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
Manifest number:          02BC
Signing time:             Mon 05 Oct 2026 19:00:31 +0000
Manifest this update:     Mon 05 Oct 2026 19:00:31 +0000
Manifest next update:     Tue 06 Oct 2026 19:00:31 +0000
Files and hashes:         1: 4YpwGxuHPrjfflleMt8fBxMJ4vE.crl (hash: tEan3U0wQNdC2tbaMyn1euKfd9UfcuZab1pwA7nRH1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 19:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:70:63:da:77:94:b1:cf:01:1d:e9:96:55:1a:bf:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18a701b1b873eb8df7e595e32df1f071309e2f1
        Validity
            Not Before: Oct  5 19:00:31 2026 GMT
            Not After : Oct  6 19:00:31 2026 GMT
        Subject: CN=24e38397203961d20a9841ce9a1c158726d07862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:24:b1:e8:14:f4:67:78:0f:fc:4b:c7:bd:
                    ec:8f:13:1f:d8:23:f0:a4:ab:f3:a9:24:65:9f:a2:
                    8f:2c:dc:c2:83:22:dd:5d:45:f0:16:a0:a7:1d:4e:
                    ed:46:e9:5e:51:55:97:63:6a:75:f2:20:41:4b:aa:
                    a3:33:8a:ba:7b:40:e9:76:a4:66:d8:cb:a4:f6:39:
                    3a:8e:ca:17:76:d9:4d:e5:fb:ed:8d:0e:82:5f:a6:
                    f1:c9:77:03:ac:9a:41:63:03:8e:59:0f:26:33:43:
                    27:48:e8:6f:4d:9c:b2:03:5c:2d:ae:20:cb:e0:c3:
                    0d:5b:1a:a9:a9:2a:17:09:8c:c5:a1:3f:a0:0f:fa:
                    ff:13:11:10:cb:f6:64:22:09:e0:aa:26:61:70:a4:
                    be:ca:bd:95:9f:5b:c4:b5:be:84:b1:76:8e:40:e5:
                    ff:25:7c:18:3a:38:34:ae:01:78:1c:c6:10:a2:6c:
                    14:15:8d:2c:46:4c:6b:68:87:17:9f:40:58:f1:0e:
                    ee:f6:08:a9:4e:1b:0a:3d:6c:83:46:cc:d1:61:c8:
                    ea:c4:65:ee:0e:96:0b:dd:fa:0a:4b:84:11:63:57:
                    c7:68:a8:23:d5:4b:a5:9f:6a:60:e9:57:8a:34:b5:
                    84:19:9a:c9:2d:93:a3:e7:86:29:41:b2:b5:1d:bd:
                    86:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E3:83:97:20:39:61:D2:0A:98:41:CE:9A:1C:15:87:26:D0:78:62
            X509v3 Authority Key Identifier:
                keyid:E1:8A:70:1B:1B:87:3E:B8:DF:7E:59:5E:32:DF:1F:07:13:09:E2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d1:7b:a9:c7:25:14:9c:b3:c0:19:a3:3a:a0:f6:3e:18:ac:
         34:19:e4:77:52:24:c1:86:d5:38:c2:d0:3c:76:5d:40:1c:f3:
         06:82:b9:8d:c8:7f:73:ad:9a:22:2d:67:8e:57:83:c9:e8:fe:
         de:c8:64:28:3a:6e:7c:c7:a6:25:5a:d9:69:e6:03:41:c5:3f:
         b2:a9:f9:f8:8a:98:40:62:62:de:ec:7c:f1:70:39:ae:0c:d8:
         e4:7c:cc:7b:48:8f:76:46:f1:cb:f2:6d:b4:d4:39:9b:98:2a:
         41:f5:34:fd:6f:30:5b:2c:bf:f8:dc:80:f8:26:e0:fe:eb:a1:
         b6:1c:47:17:bc:ca:2e:80:e2:be:78:85:6d:2f:fd:a9:a9:e6:
         16:20:27:4b:28:22:9f:9a:fa:f8:84:3c:13:b0:76:76:0a:38:
         0c:b3:2d:4b:da:af:00:16:ba:7f:1c:3e:db:4c:5f:98:95:67:
         0a:6e:96:10:62:b0:41:e5:8b:88:59:e4:fd:28:dd:f2:71:8d:
         b6:d2:50:45:6d:30:06:47:48:0c:83:4a:13:df:4f:6b:7b:82:
         9e:2d:e9:53:d5:45:93:92:2c:4a:46:08:49:0d:d7:2e:6b:85:
         b6:3f:81:dc:ba:d4:3a:b8:8b:5a:40:98:75:a8:2e:f6:0c:12:
         55:f6:88:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:58:24 2026 by rpki-client