Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File:                     4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier:          THQ4vRzefMooZh3+1thyoSP0NWVgeP1LcPjUPznw1DU=
Subject key identifier:   B6:CD:F4:BB:EB:DD:B9:A1:43:7D:D6:EE:1A:F1:D0:A4:14:95:7F:A7
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer:       /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial:       01A0CBC6F590B12B4AFFFACE71C6B5A3A9B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number:          0C78
Signing time:             Wed 23 Sep 2026 01:00:08 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:08 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:08 +0000
Files and hashes:         1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: hw4FufjOuE/8Zd4JMer+ahJVe9WNeUYBEuQckNF50pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c6:f5:90:b1:2b:4a:ff:fa:ce:71:c6:b5:a3:a9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
        Validity
            Not Before: Sep 23 01:00:08 2026 GMT
            Not After : Sep 24 01:00:08 2026 GMT
        Subject: CN=b6cdf4bbebddb9a1437dd6ee1af1d0a414957fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:1c:24:04:85:a6:54:ed:b3:f3:19:3a:e4:
                    75:82:5d:e2:bd:70:83:08:23:42:ec:96:53:64:45:
                    a1:a5:37:59:82:5e:e4:e9:f9:0d:a9:1f:83:92:86:
                    0c:f3:e3:73:1e:f5:4a:3e:5f:55:bf:81:5d:a0:f3:
                    55:5f:d9:91:25:9b:12:51:43:59:0e:14:c4:6a:c6:
                    00:a9:2c:71:b6:c4:df:ec:fb:3f:8a:a7:be:a8:8f:
                    04:30:ed:09:de:be:08:37:6d:a6:3e:70:bd:b1:34:
                    b1:63:97:1d:09:fb:c1:b9:03:30:77:6b:af:ac:a4:
                    87:46:74:ba:b9:6b:9c:f0:2d:cf:a7:d4:36:ef:05:
                    bc:8e:a3:8b:45:d7:d4:47:24:9d:46:b5:07:81:80:
                    0d:1d:8a:a0:77:b5:94:3c:34:dc:85:ba:d6:39:51:
                    98:c7:14:10:6c:29:5b:20:fe:de:05:53:61:66:78:
                    0c:ea:a1:c6:10:3b:ee:8f:8f:2a:ea:56:7a:0a:e5:
                    fc:54:eb:39:01:3c:95:e9:f4:ac:ac:72:a1:48:1b:
                    a8:e0:eb:3c:18:60:5a:9d:9a:01:63:74:cb:11:39:
                    cf:29:01:ce:a8:7b:79:53:44:35:87:a8:27:94:31:
                    0b:f9:b0:64:94:60:38:98:8d:d9:e8:d4:e2:f3:c5:
                    22:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CD:F4:BB:EB:DD:B9:A1:43:7D:D6:EE:1A:F1:D0:A4:14:95:7F:A7
            X509v3 Authority Key Identifier:
                keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b8:ed:c0:1a:1d:fb:4a:43:bd:cf:07:22:dd:2e:bf:18:6f:
         1c:67:fd:4b:fe:a5:24:b6:d6:e2:a4:a7:14:12:7c:ed:dc:31:
         fe:ea:bb:66:99:17:d2:95:07:c8:ea:8a:9c:2a:1b:34:07:9e:
         cf:bd:d1:42:67:4f:12:fe:5d:e6:d7:45:38:1a:08:be:1a:3b:
         15:6e:f8:59:eb:2a:ab:a4:bf:5a:c2:fd:54:02:07:f4:cd:96:
         a0:20:c1:07:5e:76:22:67:db:04:8d:73:16:25:92:28:99:7a:
         2b:01:30:3c:49:e8:a9:00:2b:68:8b:42:87:ac:e1:cf:0e:f9:
         16:03:e5:72:a2:36:67:84:33:fb:4e:5d:91:26:a4:dd:bf:f8:
         28:b1:e4:29:b0:34:35:ff:d6:7b:79:79:29:3a:f1:7d:26:7f:
         9c:e8:ca:b3:3b:00:37:7a:1f:72:32:c4:ee:7f:b6:3f:8d:1a:
         32:07:4e:2e:5b:6d:a7:c2:83:6a:aa:dd:42:9b:b7:4b:80:a6:
         69:83:e3:74:42:1d:5b:4c:a1:ab:5b:e0:64:a9:55:d0:5f:27:
         a7:db:ab:fb:38:bd:87:0e:84:0a:37:b2:de:5d:a0:75:d9:b9:
         6f:fc:9a:35:c5:a6:5c:2b:25:19:9c:90:7f:f7:e2:e6:f5:43:
         9c:79:5b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:15:54 2026 by rpki-client