Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
File:                     4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft (raw, json)
Hash identifier:          ie+F5qRlSzD9Qz94x5EQ1iJeNVaq0wf+nJg5mzJ69B8=
Subject key identifier:   EA:F8:18:70:EE:0A:B1:60:54:D8:98:EF:E6:C4:38:32:20:8C:C1:17
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Certificate issuer:       /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial:       01A0CC35DCFC71756009F47CFD0EF7FDA531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
Manifest number:          193D
Signing time:             Wed 23 Sep 2026 03:01:16 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:16 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:16 +0000
Files and hashes:         1: 4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl (hash: Zmf9dAYxliy0mprSCrvws6qxfHnTJrC6NFLQitqXfdo=)
                          2: 9ECy6xMC0QhH_pOivg-rQM4g-LY.roa (hash: zvlC8cgCNjvHx+kjOIl69ehjpjFO8D76qsG5Uxnt+E0=)
                          3: RpaCjdRSa-ZXBxWyWy2b1QJvShE.roa (hash: Je7gOL1A4cNI+FOPPNsoCM8EDxPKoSVwHmNzkdP57i8=)
                          4: _1m8AbFgCaUHu45103GtcnU-Bsk.roa (hash: XDKSo1Roj7NESH25VDoYxt2TEtXl/ulkf6Ak7JsGDiQ=)
                          5: iXTTTS-nkmqjatbhOVM0CNWv4xs.roa (hash: mekB3Ob2oSZO7b98NYgMQKBlF4RIFyldyH/8tcheBuM=)
                          6: jBQ6iqUVJNuGNHuEQTjudB5sG6c.roa (hash: 5vRltqBxLQBblzxtE89pQTvupEcZThWKDrWuNr0JFrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:dc:fc:71:75:60:09:f4:7c:fd:0e:f7:fd:a5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
        Validity
            Not Before: Sep 23 03:01:16 2026 GMT
            Not After : Sep 24 03:01:16 2026 GMT
        Subject: CN=eaf81870ee0ab16054d898efe6c43832208cc117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cb:15:a9:14:e3:27:71:fa:12:30:d0:88:ed:
                    44:c6:81:78:30:27:98:d5:fd:b1:86:50:6c:0e:b5:
                    ff:d3:c1:6f:d9:ec:7b:b1:67:07:f3:e8:6a:6b:1c:
                    85:46:51:c8:e0:0e:a9:b6:02:60:fb:cb:1c:1f:84:
                    35:84:71:49:a9:2c:fc:57:93:52:39:54:b4:c4:a0:
                    a5:73:b2:34:45:a9:44:f1:a0:a1:42:bc:f6:03:f7:
                    15:67:2d:6a:fd:40:55:f9:0a:9a:30:f1:3e:15:d7:
                    c3:87:0b:d9:0f:8f:f2:fd:42:ea:d7:14:31:53:5c:
                    c0:34:d5:c6:ac:b8:9c:ff:6b:9c:96:ef:e0:ea:c7:
                    ca:39:d1:da:15:f0:bb:27:53:fb:75:03:1f:a1:e4:
                    84:e0:2a:43:c1:af:8a:a1:6a:8f:25:6b:c0:4b:24:
                    ec:fb:c6:ce:fe:72:61:a9:0d:6a:63:6b:a9:30:e0:
                    76:88:cf:32:ef:8c:a1:70:da:40:8a:30:86:1f:13:
                    97:6f:53:6b:ab:5e:81:35:94:1c:92:b8:a6:11:79:
                    63:b4:a2:28:3d:f7:b8:46:35:1c:a9:9b:20:4c:0d:
                    45:d1:db:bd:b2:6f:4e:ba:a0:24:ea:b4:a3:f2:8c:
                    1f:38:43:dc:83:d9:4c:71:b8:a9:4f:81:95:e3:d3:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F8:18:70:EE:0A:B1:60:54:D8:98:EF:E6:C4:38:32:20:8C:C1:17
            X509v3 Authority Key Identifier:
                keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:03:65:5c:fc:b1:eb:40:5a:e1:49:92:06:0b:9a:a9:e1:31:
         1e:0d:ac:8e:fc:56:4d:44:75:3b:ba:4f:32:cc:df:7d:24:37:
         92:ff:6f:d0:3d:56:ba:67:a8:88:76:a8:95:8a:4f:81:d4:b6:
         89:16:1a:14:89:c0:e0:f9:be:39:9e:bd:6e:21:f6:3b:fb:e8:
         5a:cf:4f:f9:fd:b1:46:f5:12:13:d6:89:40:b5:7c:63:06:b4:
         f1:b7:e1:77:43:d3:c0:49:37:49:a9:7a:ef:a9:0c:a8:95:04:
         a7:b5:bb:40:42:e7:c7:13:e3:b7:d6:8c:6f:48:57:6a:a4:da:
         c9:93:7e:26:06:e3:2a:2b:85:88:a9:ef:a5:d0:25:fd:8e:53:
         9a:b1:b2:c1:7d:50:eb:6f:15:6b:3a:d4:94:7d:ab:48:c9:91:
         ad:86:70:4a:98:dc:a8:dd:2b:65:f6:7a:e7:b3:ab:c2:05:16:
         15:34:81:94:3b:d4:ef:ba:b6:a6:68:7e:f6:35:14:a5:c5:dc:
         ef:6a:0a:a9:0a:eb:68:67:08:bd:0a:c0:bb:fc:66:d3:b0:38:
         c9:5c:28:36:db:2e:b7:40:e5:6a:59:b7:ec:a1:50:7e:d5:99:
         57:30:01:81:33:c0:c2:c7:4d:bd:fa:39:36:6f:3d:54:76:16:
         7b:c4:cf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:23:22 2026 by rpki-client