Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
File:                     f4_zrPyu0gPpbekasIxu-2QDGmM.mft (raw, json)
Hash identifier:          pbJ23zdRap+XM3updqyWBP3uSNSZWacIJbIj3wWWCYI=
Subject key identifier:   44:4D:84:6A:F0:03:42:05:7F:68:03:16:63:01:69:C3:96:68:02:D8
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Certificate issuer:       /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial:       01A03826E093E21D1CBFDEA2A9CF60DB4079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
Manifest number:          D5
Signing time:             Tue 25 Aug 2026 09:01:06 +0000
Manifest this update:     Tue 25 Aug 2026 09:01:06 +0000
Manifest next update:     Wed 26 Aug 2026 09:01:06 +0000
Files and hashes:         1: djMRtN4n-vW3YMUBEBvNiIfj40I.roa (hash: ltFpunT0BizmulOUlJUDwwLOMBG9WmZoGqBwiKtC7gU=)
                          2: f4_zrPyu0gPpbekasIxu-2QDGmM.crl (hash: FjZ1q2cjAhcvOSedOev4X9zYp5OMUuzeVeOmxSsEYfA=)
                          3: lf4UXwwCiStKMPFSMPyNM0g2zZ8.roa (hash: QmN5YcqljhCgdP2JOMV6nb5xM3S3y5gCkyo63tNhBUQ=)
                          4: yLl9hut5-79pC7adyuGSTuX_5sU.asa (hash: 61Xj0gQa/Th7F++DmhWcMRLvfxIvqCNmmXnO1BzHxpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:38:26:e0:93:e2:1d:1c:bf:de:a2:a9:cf:60:db:40:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
        Validity
            Not Before: Aug 25 09:01:06 2026 GMT
            Not After : Aug 26 09:01:06 2026 GMT
        Subject: CN=444d846af00342057f680316630169c3966802d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:dc:d3:ee:6c:71:b0:8e:48:c4:b9:67:3c:
                    d6:85:c8:bb:ac:53:e4:25:0c:c1:86:2e:62:24:7a:
                    7d:47:e4:03:77:87:6f:d2:2e:f1:27:0d:d3:3a:a7:
                    13:03:ee:0b:37:47:74:f5:04:e6:5a:69:a0:53:61:
                    45:7f:07:99:9e:f3:f4:85:1f:7f:2e:72:10:e6:93:
                    d4:ab:3b:61:62:11:27:d5:bd:cd:a8:f4:6b:08:2f:
                    bf:0e:e6:4b:04:69:b1:76:6f:6a:ed:8b:2c:5d:80:
                    23:d9:d1:c7:9a:b5:fe:63:d7:cf:21:15:ea:15:e0:
                    05:67:1a:2f:7c:1c:b4:4a:35:17:5a:17:bd:5e:f1:
                    d6:0f:c4:97:a9:63:21:5d:2d:f3:62:5b:db:73:73:
                    23:5c:c2:ae:0e:4e:da:e3:bd:5f:f3:dc:51:74:c5:
                    ff:f4:42:b8:ac:d8:4f:24:8d:88:3d:78:89:65:90:
                    ee:17:b5:00:46:95:b4:92:f7:a6:aa:47:13:52:2c:
                    81:84:16:5e:2d:c0:8b:ce:4e:63:3f:9e:9d:e0:e0:
                    75:33:19:f6:82:4a:63:be:76:00:c8:02:41:24:80:
                    5a:c6:bc:dc:70:c2:b7:ea:e3:73:7f:c7:21:37:c7:
                    47:b0:b5:bf:1c:8e:d2:2a:8a:2f:9c:e2:71:cf:61:
                    9c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:84:6A:F0:03:42:05:7F:68:03:16:63:01:69:C3:96:68:02:D8
            X509v3 Authority Key Identifier:
                keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:98:20:84:f8:f4:a0:0b:a2:88:7c:ae:96:69:0f:0d:23:0b:
         e5:3e:eb:b4:b4:0f:b7:e0:98:75:5f:4b:ab:eb:3e:9e:bd:45:
         66:c4:36:dd:2e:a3:9e:ef:4b:d6:87:37:0c:60:a9:2f:2f:cd:
         99:a1:6b:5f:a1:ee:ff:5a:1b:e9:51:d4:6c:7a:1d:33:df:7d:
         23:20:14:98:39:52:22:3f:79:a0:d3:06:20:cf:ae:27:2d:ca:
         84:b6:f7:53:df:ab:c9:41:6b:e2:91:3b:60:70:13:9a:6a:b1:
         52:74:57:22:96:37:c3:5d:e3:81:b7:6b:ae:c5:6a:e4:d2:24:
         37:66:d7:63:e6:5c:b5:49:d3:0b:50:41:10:c0:67:b5:47:e1:
         54:4e:b6:7c:db:7d:a5:37:86:70:46:ee:8e:a2:39:02:e0:99:
         ff:de:14:e6:8f:a0:2e:b9:ee:c9:8a:a8:35:d0:bb:22:b6:8d:
         59:93:7c:1e:45:8b:09:37:45:9f:13:59:a1:7e:57:4a:56:ea:
         d8:2b:76:9c:2d:6b:e0:bb:9f:a2:a4:9e:7a:7f:a3:0c:75:f7:
         53:83:74:f6:ef:ef:fe:92:65:c9:c5:c5:52:a0:d2:71:37:db:
         b6:fd:5f:79:32:1d:8e:25:f7:9f:ff:6f:e8:68:d4:5d:23:ec:
         98:d2:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 19:21:29 2026 by rpki-client