Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/69a0db-c0ff-4309-8614-374e1c3c47fc/1/4yGdWvgPohdUclhUrgEZDO9NSOQ.mft
File:                     4yGdWvgPohdUclhUrgEZDO9NSOQ.mft (raw, json)
Hash identifier:          R56GY6FamEHFBf9W6k8N/b6hL4aj/XacFQqWIf9Xvok=
Subject key identifier:   B5:55:10:66:67:28:5E:6D:08:F0:31:F2:5E:A6:04:B7:04:60:40:8A
Authority key identifier: E3:21:9D:5A:F8:0F:A2:17:54:72:58:54:AE:01:19:0C:EF:4D:48:E4
Certificate issuer:       /CN=e3219d5af80fa21754725854ae01190cef4d48e4
Certificate serial:       01A1DA2681A12163CD8E406B4C871B332468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yGdWvgPohdUclhUrgEZDO9NSOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/69a0db-c0ff-4309-8614-374e1c3c47fc/1/4yGdWvgPohdUclhUrgEZDO9NSOQ.mft
Manifest number:          01EF
Signing time:             Sat 14 Nov 2026 13:01:58 +0000
Manifest this update:     Sat 14 Nov 2026 13:01:58 +0000
Manifest next update:     Sun 15 Nov 2026 13:01:58 +0000
Files and hashes:         1: 1-TYjRHz_fKdv_9tsx64WCTai3i0.roa (hash: qVMDEsPs/TctuezgQ1/CjrI3iv8JmFTNh7JgdLT7Fzg=)
                          2: 4yGdWvgPohdUclhUrgEZDO9NSOQ.crl (hash: zyaeOhJJYwJEsDa4ZBzoBcc78YbH9CfIk11BnKV4wCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/69a0db-c0ff-4309-8614-374e1c3c47fc/1/4yGdWvgPohdUclhUrgEZDO9NSOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/69a0db-c0ff-4309-8614-374e1c3c47fc/1/4yGdWvgPohdUclhUrgEZDO9NSOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4yGdWvgPohdUclhUrgEZDO9NSOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:26:81:a1:21:63:cd:8e:40:6b:4c:87:1b:33:24:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3219d5af80fa21754725854ae01190cef4d48e4
        Validity
            Not Before: Nov 14 13:01:58 2026 GMT
            Not After : Nov 15 13:01:58 2026 GMT
        Subject: CN=b555106667285e6d08f031f25ea604b70460408a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:95:16:bc:01:e2:a3:e7:52:93:38:e3:df:
                    a4:93:9e:1c:77:8e:e2:80:0d:51:36:1a:7c:9a:b3:
                    42:35:1d:e9:65:bf:77:0d:e8:2c:fd:a4:fe:a5:07:
                    11:6f:2b:a8:e0:2e:10:07:8f:6a:82:23:23:3d:a0:
                    e3:ef:19:bd:f7:2d:75:8b:de:65:3f:45:40:ea:1b:
                    ed:db:03:cb:ea:84:a6:d9:0c:80:0c:09:fd:24:3d:
                    ff:57:55:fa:4b:b5:78:f0:6f:1e:7e:82:0e:88:ad:
                    ec:ec:2e:aa:86:9d:9a:c9:b9:23:43:08:9f:8b:1f:
                    3a:d7:df:2f:38:4f:61:e7:30:52:e6:e7:f2:6a:41:
                    77:e7:b4:8c:78:5f:72:f0:47:8d:0c:a2:dc:cf:c7:
                    94:84:0d:e4:e1:1b:4c:37:90:6e:bd:59:56:4e:2a:
                    ec:cb:ac:96:c5:f2:ee:08:2a:67:57:59:89:05:a6:
                    e0:0d:78:69:ff:aa:1e:57:aa:7f:d5:c2:16:36:5c:
                    54:d7:82:ff:11:b8:f4:88:80:17:25:55:e4:01:a3:
                    1e:77:bb:35:54:08:01:30:9e:7f:a9:08:29:72:46:
                    5d:cf:7c:4c:f0:a6:18:f8:10:86:1d:26:ef:b7:5d:
                    70:e2:02:65:0c:43:98:04:94:16:bc:d4:74:fa:5e:
                    7f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:55:10:66:67:28:5E:6D:08:F0:31:F2:5E:A6:04:B7:04:60:40:8A
            X509v3 Authority Key Identifier:
                keyid:E3:21:9D:5A:F8:0F:A2:17:54:72:58:54:AE:01:19:0C:EF:4D:48:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yGdWvgPohdUclhUrgEZDO9NSOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/69a0db-c0ff-4309-8614-374e1c3c47fc/1/4yGdWvgPohdUclhUrgEZDO9NSOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/69a0db-c0ff-4309-8614-374e1c3c47fc/1/4yGdWvgPohdUclhUrgEZDO9NSOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:42:6e:8c:37:bc:69:c0:26:b5:94:af:0c:06:79:6b:5e:3e:
         4e:ff:03:e1:de:50:2a:85:dd:30:51:5e:4e:51:bd:40:46:2b:
         fa:8c:81:69:52:21:63:c5:4c:3c:b0:b7:fe:7a:e0:53:e4:4f:
         97:81:85:c6:41:bc:ce:3a:a0:5f:dc:dd:08:69:32:cb:3d:a3:
         09:4a:22:0d:74:45:c7:1d:b6:6e:2b:48:23:91:35:8e:70:49:
         6f:4e:41:32:4f:30:09:7e:d7:30:67:6a:cf:14:81:d5:2e:dc:
         50:6a:90:84:96:0e:c2:1e:dc:fc:6d:e0:86:f2:75:43:a7:99:
         ef:0f:3d:b5:3a:36:bf:29:34:53:15:e4:f2:c1:44:47:7d:bc:
         34:19:10:e3:c7:ee:09:71:ad:5b:15:b1:89:d9:4c:19:e3:ff:
         f5:81:0d:cb:8d:04:8b:b5:db:3f:90:85:5c:ef:24:56:ec:08:
         33:ea:e3:e3:03:b7:bc:ba:c2:81:42:a5:bc:a1:d4:43:21:da:
         4e:ac:85:b8:f4:94:93:75:65:02:b0:2a:da:30:99:df:e0:d6:
         4d:7f:5f:4d:05:2f:63:aa:cf:10:ed:a9:25:3f:31:09:de:b1:
         c4:f3:83:2c:4a:14:af:e6:30:17:b9:ef:24:93:3c:7f:de:b1:
         61:b1:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:25 2026 by rpki-client