Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft
File:                     4H4P7Wh4uZCgYJWJih2QakdN910.mft (raw, json)
Hash identifier:          krX8lkSStg12pq7dqF9Erc0q6KJdembWFsIC+fTvj3M=
Subject key identifier:   3C:5E:15:1E:A5:F1:CB:3E:0A:D8:A9:AA:AA:B1:92:05:B9:8C:BF:35
Authority key identifier: E0:7E:0F:ED:68:78:B9:90:A0:60:95:89:8A:1D:90:6A:47:4D:F7:5D
Certificate issuer:       /CN=e07e0fed6878b990a06095898a1d906a474df75d
Certificate serial:       01A0D2011E16EFC067741754F54C6708D428
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft
Manifest number:          E6
Signing time:             Thu 24 Sep 2026 06:01:23 +0000
Manifest this update:     Thu 24 Sep 2026 06:01:23 +0000
Manifest next update:     Fri 25 Sep 2026 06:01:23 +0000
Files and hashes:         1: 4H4P7Wh4uZCgYJWJih2QakdN910.crl (hash: h+a8hKLAovx9E0V0LLhLg5cf6Nv2I47pXOrRv137ol4=)
                          2: PVwPhYKLtJ1NqdIeINS1i-PMklo.roa (hash: LLpYJpjoR2ZiSBq/lFV1+fNxk1oL13m8O/kJtCUEbxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:01:1e:16:ef:c0:67:74:17:54:f5:4c:67:08:d4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e07e0fed6878b990a06095898a1d906a474df75d
        Validity
            Not Before: Sep 24 06:01:23 2026 GMT
            Not After : Sep 25 06:01:23 2026 GMT
        Subject: CN=3c5e151ea5f1cb3e0ad8a9aaaab19205b98cbf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:ad:9a:8a:50:75:c1:23:04:59:a4:e2:d8:
                    88:35:ef:8f:8c:b9:1f:0c:d2:ad:e8:44:c0:16:95:
                    ce:34:d9:00:e4:6e:d4:49:61:ca:98:57:83:ed:31:
                    9a:56:72:31:fc:a3:5e:df:1e:68:8a:2e:4c:f7:60:
                    88:53:60:0d:78:cc:d4:ae:07:42:72:4b:2d:0a:4c:
                    de:3d:53:a9:8f:ba:9e:eb:51:cc:8d:c8:c9:4b:a3:
                    52:e1:e0:96:47:27:a8:5a:41:5b:e0:47:1f:51:ef:
                    5b:ff:3f:13:75:6c:47:3f:86:6d:54:25:ee:35:cf:
                    b7:91:cb:cc:64:55:e0:f7:ae:64:f4:a1:99:34:03:
                    0b:ba:80:05:bb:46:87:78:d9:94:e8:5a:15:02:d0:
                    90:88:66:d1:44:88:06:63:58:ba:b7:48:1b:35:a7:
                    27:46:9a:98:f7:12:e7:a7:27:5f:3e:fa:95:e5:56:
                    ca:90:77:94:4c:59:7b:24:92:b6:0d:2b:28:86:54:
                    20:0a:bb:d9:e6:75:8f:d1:15:a8:d7:d2:02:63:09:
                    f5:8d:d3:64:16:a5:2d:6e:5c:be:5c:8b:67:40:f2:
                    ca:3f:61:94:9f:a5:64:72:01:f1:73:5e:26:1d:0d:
                    57:bc:12:f2:4b:34:3d:3c:7d:88:51:fe:55:63:32:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5E:15:1E:A5:F1:CB:3E:0A:D8:A9:AA:AA:B1:92:05:B9:8C:BF:35
            X509v3 Authority Key Identifier:
                keyid:E0:7E:0F:ED:68:78:B9:90:A0:60:95:89:8A:1D:90:6A:47:4D:F7:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:94:9c:bd:b6:c4:3a:33:c0:e8:51:99:f7:d3:3d:4d:07:b0:
         e8:c1:1d:e0:c5:fe:74:ec:c3:1b:92:e2:5f:a4:58:e6:ae:4e:
         a8:2f:bb:4f:db:7f:e8:3c:a5:69:48:31:ad:82:46:8e:7f:b9:
         88:5b:7a:09:18:89:de:0b:79:9b:9e:9d:0e:fe:a0:79:10:a5:
         ba:78:52:90:40:41:46:ac:e4:56:c8:68:69:3e:7d:cd:3e:45:
         99:42:e5:ab:f6:b9:e9:80:a0:3f:d7:81:cd:b7:34:48:64:ad:
         ad:4c:86:e5:c7:78:1b:90:b6:98:56:0a:a0:b0:de:4d:3e:21:
         b5:04:dc:df:2f:58:03:3f:64:01:f4:08:6b:5b:2a:35:7d:53:
         9e:c1:86:0e:7d:b2:9f:c2:d9:dd:08:ed:82:6b:75:50:f7:8b:
         de:4f:73:80:41:d7:38:06:51:42:b1:55:bb:31:19:c7:55:3a:
         fa:6b:71:42:32:17:9d:28:13:1e:3b:71:86:cf:5b:17:ec:96:
         95:7e:12:a1:9d:27:8f:9f:7f:cd:66:39:f0:c8:c2:20:94:fa:
         5a:23:1b:b2:b3:f2:aa:da:cc:8d:f7:e6:4b:f3:85:31:f0:7b:
         85:3e:71:0b:a9:5a:be:c1:a5:12:a4:ff:aa:61:46:a7:dd:5a:
         32:52:71:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:52:05 2026 by rpki-client