Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
File:                     T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft (raw, json)
Hash identifier:          S4EIpQiA834qUeKaNIHlrNU7Xjh6jTlR94wq1NveWpE=
Subject key identifier:   FD:88:C7:7C:9F:18:F1:95:23:8B:D3:C0:39:7F:8A:82:78:06:CE:9B
Authority key identifier: 4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A
Certificate issuer:       /CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
Certificate serial:       019E99965830F108B73CDD7C6101DA508C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
Manifest number:          4A
Signing time:             Fri 05 Jun 2026 21:00:27 +0000
Manifest this update:     Fri 05 Jun 2026 21:00:27 +0000
Manifest next update:     Sat 06 Jun 2026 21:00:27 +0000
Files and hashes:         1: T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl (hash: pTpuC/7ahJklE5zafis0YBRcaWVQfbC64o3h9wmmvl8=)
                          2: Yw4KeJZQd4fDI6XgNROc612klZ8.roa (hash: ksqJ6JeWEi7OT1uotIS0TGh2mFny8Jt60myfEmkHw/w=)
                          3: uU9s_hgnyGbwJP-PZge6doa0Dj0.roa (hash: IozYYJrZLQXcxcMBB1MOmIfAjaC0gRCqNhs5hWCQTC4=)
                          4: wZtpSjAJt4SmvvP0YnSsE7TQrWE.roa (hash: 5MBdGENxe3OadAvEH+VeBbaYBKVIJ8gWBwpRTn1w1GM=)
                          5: yclqX8OxwLUeoLNmUdSazDYDII4.roa (hash: Rr2Lk5K8PcJhPAAwTj/NBcChacy1opQ3AXffZPPG+hQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 21:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:99:96:58:30:f1:08:b7:3c:dd:7c:61:01:da:50:8c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
        Validity
            Not Before: Jun  5 21:00:27 2026 GMT
            Not After : Jun  6 21:00:27 2026 GMT
        Subject: CN=fd88c77c9f18f195238bd3c0397f8a827806ce9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:10:95:da:04:18:17:1e:0d:8d:08:70:d6:
                    d5:5e:e1:48:74:3c:94:dc:ac:53:71:1b:a0:0b:39:
                    54:a2:af:56:8f:a5:33:d0:96:61:5f:ba:1e:fd:c4:
                    19:a0:8c:19:f0:19:c7:89:bc:81:4e:43:ff:ec:f4:
                    6c:3a:23:ea:26:f5:ee:4e:04:43:63:de:72:a7:68:
                    bf:1a:51:20:6f:68:05:85:34:a9:cd:83:8d:5d:0a:
                    33:e8:f6:5e:42:ce:86:47:a0:38:dc:8a:87:4a:6b:
                    e7:d0:76:e8:99:b1:5a:e3:f0:fa:7f:37:48:b4:a7:
                    aa:af:fb:d3:a2:73:a0:ba:db:18:4f:f0:28:79:1b:
                    b3:46:4f:8e:ae:b2:62:18:73:df:a8:b3:67:f2:cd:
                    92:14:84:66:14:3f:23:81:39:56:5f:e2:38:3d:f3:
                    00:89:b6:63:b3:f0:96:73:55:1f:7e:33:f9:d3:ee:
                    99:f0:5d:bb:0f:8f:d3:18:db:79:98:2c:8e:44:85:
                    5e:24:69:bc:f5:7d:93:64:72:c4:29:b7:7a:2e:47:
                    7f:e4:cb:46:b6:1e:c1:b8:9e:7e:01:e5:e2:df:7f:
                    c8:15:74:01:5f:1c:08:b2:bd:f2:ef:36:6e:7a:48:
                    f1:bb:3b:ad:96:dd:8c:61:07:f4:0b:b4:1d:cf:52:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:88:C7:7C:9F:18:F1:95:23:8B:D3:C0:39:7F:8A:82:78:06:CE:9B
            X509v3 Authority Key Identifier:
                keyid:4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b1:f0:16:cc:4c:1b:39:90:2b:09:55:5f:57:9a:1f:02:8c:
         a0:f8:6f:68:ea:12:ca:a0:eb:17:96:8f:bc:a0:a8:58:4f:77:
         76:b5:d6:26:78:1e:be:1a:32:1a:29:e2:a9:6f:38:ba:99:51:
         7e:2f:7b:a7:3a:d2:d4:b3:19:86:ca:80:9c:45:34:11:5d:20:
         ea:2f:47:cb:7c:55:e9:36:c5:68:54:be:a4:d3:8f:cc:ee:dc:
         b9:ff:c5:2c:89:74:f7:f7:20:06:75:3a:17:01:2f:83:3b:86:
         9b:72:41:63:78:b7:4e:8f:f2:fa:4a:66:6e:67:4b:8b:e0:12:
         5b:dd:14:de:bb:85:75:e0:68:60:98:c4:29:2b:07:ad:01:b1:
         f9:a3:c0:d5:bd:3d:a7:cf:2f:1c:84:50:4d:84:08:60:85:23:
         19:f1:8e:e4:3d:40:6c:fe:62:a9:e3:a0:17:53:97:ec:5e:75:
         18:bc:4e:25:6a:eb:ca:42:5b:cc:e6:5c:1f:fb:30:c5:40:b6:
         7a:9b:17:9d:c9:45:c6:8d:82:8b:5f:dd:5c:13:d6:3f:ac:d5:
         9e:76:1f:85:d8:4f:c8:8b:1a:4c:73:d0:9d:ba:d2:d8:42:40:
         b2:05:5e:b6:e7:ed:ab:b7:73:8e:73:db:71:0a:6d:a7:00:01:
         80:c2:22:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:39:02 2026 by rpki-client