Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File:                     tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier:          xxUBaU2FwUYxsqCWHEUrQiaouxNbh1aSr7uKfQQNnik=
Subject key identifier:   04:07:F9:A1:BD:1A:C8:DE:E4:FE:5D:6E:D5:79:BD:F4:4F:48:96:BE
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer:       /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial:       01A06E027577D90C1274F4AB084F9C16E19B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number:          0B10
Signing time:             Fri 04 Sep 2026 20:00:49 +0000
Manifest this update:     Fri 04 Sep 2026 20:00:49 +0000
Manifest next update:     Sat 05 Sep 2026 20:00:49 +0000
Files and hashes:         1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
                          2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: unUtsqSv4Y7wDCWdLQE/fJhfUYAtrHxiLOteT7ldhfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:02:75:77:d9:0c:12:74:f4:ab:08:4f:9c:16:e1:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
        Validity
            Not Before: Sep  4 20:00:49 2026 GMT
            Not After : Sep  5 20:00:49 2026 GMT
        Subject: CN=0407f9a1bd1ac8dee4fe5d6ed579bdf44f4896be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:98:2c:19:37:27:42:4e:c1:73:f7:94:78:76:
                    67:ad:5e:3b:ac:e4:a6:5c:bd:c4:94:f8:67:51:dd:
                    3b:aa:35:02:2d:11:42:f7:87:6c:74:c6:73:bf:db:
                    99:bb:60:2f:9a:1f:db:ea:a5:b1:ad:b9:88:03:ac:
                    0d:62:33:d5:6b:b9:53:75:ab:6b:76:2f:b0:b6:35:
                    d0:15:60:a1:00:72:50:a8:24:d6:51:a8:09:70:0c:
                    d8:05:e3:74:ab:2d:4f:9c:4e:41:70:75:6b:fb:e3:
                    2e:88:bc:33:a2:71:db:00:cb:97:5e:de:e4:1b:7b:
                    08:13:f2:b5:25:4c:1d:e5:79:a5:a6:a1:b6:33:ec:
                    78:ea:5f:d6:6e:cd:4e:a0:fb:70:b9:bd:a6:87:e4:
                    d7:b6:80:fe:e8:18:3a:75:5d:d3:96:a1:1b:cf:02:
                    f7:87:ac:db:67:04:f4:f1:ae:08:f0:7e:65:a6:bc:
                    8b:d2:1b:bd:0b:2d:13:43:84:be:ff:05:6d:cb:56:
                    fd:3d:02:4c:64:19:1c:77:f7:05:8c:4b:35:59:ba:
                    55:6a:a2:66:7f:87:0b:5b:21:e7:90:d7:a9:6e:ae:
                    b6:3d:6d:0f:ba:c5:3c:c1:27:db:22:a0:05:5f:36:
                    f7:29:2e:07:59:b1:6a:d3:11:03:a9:af:98:62:55:
                    d9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:07:F9:A1:BD:1A:C8:DE:E4:FE:5D:6E:D5:79:BD:F4:4F:48:96:BE
            X509v3 Authority Key Identifier:
                keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:97:4c:8e:06:d9:f2:96:e3:9d:ae:74:9b:18:e3:24:01:1b:
         3b:61:58:ce:c5:bd:94:ee:99:8a:5b:0c:e4:21:8f:98:a5:40:
         34:84:20:02:78:a9:b1:6a:89:cb:79:5a:49:72:51:1a:70:0f:
         ea:90:56:ee:b7:d1:5c:25:ef:fd:96:92:91:a3:74:00:f2:90:
         26:23:d2:fc:27:e2:d7:80:64:19:10:5d:45:7c:f0:48:11:2e:
         98:17:c9:2d:3f:e2:d6:01:80:f2:92:1a:ee:8d:f0:e7:f1:0a:
         90:54:14:ea:f9:54:5d:b6:3e:1c:31:87:78:87:c2:ec:e9:6a:
         0c:ef:a5:db:1e:26:60:df:98:5c:a1:b7:20:b0:59:7c:57:1a:
         0e:41:6c:09:8d:bc:f1:bf:11:10:3b:cf:b2:29:ef:9d:00:82:
         fc:24:6d:93:53:a9:fc:5b:b8:97:5b:1d:0c:45:a6:7b:58:e2:
         a5:09:02:8c:c2:b7:71:7d:7b:de:cb:44:af:29:c5:e5:12:ec:
         42:54:ac:e5:c5:15:84:f2:92:80:27:33:15:a6:c8:79:85:fc:
         95:f6:d7:6e:ba:b3:a0:59:6f:33:bc:51:10:f8:69:d6:92:2c:
         78:32:8c:c4:4c:25:69:04:26:be:e9:bc:d9:f4:b1:b7:28:34:
         50:b0:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:14:58 2026 by rpki-client