Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File:                     4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier:          80VjfXPmD0vYI3CGA+BVwQwjx8GH9uWOzyoyZwweY84=
Subject key identifier:   41:E2:E1:41:73:2B:8E:07:0D:98:6B:B5:ED:0C:B4:D4:46:B6:02:96
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer:       /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial:       01A0016FD653930E9863C440E4A462FDC91F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number:          1954
Signing time:             Fri 14 Aug 2026 18:01:41 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:41 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:41 +0000
Files and hashes:         1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: JLgR74PFx8GdXqH5cQKR/NoNw9iEIdHCd1pdrdgqL0U=)
                          2: APkEJsxH2t-1o8uReEsySa-BG0k.roa (hash: QGebNblh9sIV47+DzT8QKo/lQO0JIeSNiq/YB/thR5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:d6:53:93:0e:98:63:c4:40:e4:a4:62:fd:c9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
        Validity
            Not Before: Aug 14 18:01:41 2026 GMT
            Not After : Aug 15 18:01:41 2026 GMT
        Subject: CN=41e2e141732b8e070d986bb5ed0cb4d446b60296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:13:ec:1f:1d:ee:84:16:2b:9a:89:1a:df:
                    35:0e:a8:1b:b3:fb:91:dd:e8:e3:3d:68:7d:86:2b:
                    b0:27:67:97:aa:03:1f:d4:d8:16:b4:60:08:eb:73:
                    2b:2b:b1:a3:3a:c6:66:ad:2a:1b:92:f7:00:52:18:
                    ae:ba:a4:c0:63:4f:cd:d9:38:a0:65:5d:96:87:81:
                    b1:52:80:ec:0f:73:ed:2d:a8:da:bc:53:fe:c7:56:
                    7c:15:7b:1d:0c:ab:a5:21:72:1d:a0:1c:98:9b:1a:
                    b5:24:4d:fd:dc:6a:ad:3f:d7:96:37:20:cc:9e:94:
                    9d:19:4f:8c:40:de:b8:81:60:48:5c:fd:57:11:4b:
                    8f:83:f3:a4:f3:12:43:1b:6f:12:2b:71:03:83:91:
                    10:77:be:87:3c:b7:07:3d:f5:a5:f9:56:24:70:16:
                    cd:6c:53:c3:e3:4e:c0:73:19:5c:ef:91:bb:8b:d9:
                    5e:bc:f0:cc:2c:0f:ec:51:0c:26:5e:79:af:f4:4d:
                    59:16:7c:79:71:7a:13:dd:da:48:8d:1e:0e:41:89:
                    a6:4f:b1:87:80:41:04:89:fa:5d:d4:af:82:6e:ea:
                    9e:e1:8e:57:02:b5:d0:90:16:b2:55:c2:9c:ae:63:
                    ac:e5:d6:5f:63:2d:bd:61:d3:42:85:71:8d:03:c6:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E2:E1:41:73:2B:8E:07:0D:98:6B:B5:ED:0C:B4:D4:46:B6:02:96
            X509v3 Authority Key Identifier:
                keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:35:d5:cf:3c:31:16:7e:f2:28:b9:ca:f5:4c:c8:6f:2d:5c:
         f1:82:aa:60:0e:12:5a:f6:a7:6a:c1:b3:27:60:61:8b:0e:51:
         2a:46:22:3c:8c:db:65:57:a3:92:4f:25:0b:d5:41:9d:ff:90:
         00:f6:9b:39:ca:37:ce:0e:e9:ba:07:a9:c7:b2:99:6c:02:e3:
         df:d8:0b:17:97:24:db:8a:7d:64:fb:cb:d7:1f:a2:6a:d8:0c:
         d9:6f:08:97:66:89:be:2c:48:34:aa:45:f8:60:91:b5:b4:de:
         55:52:c4:9c:ad:e4:c3:ae:00:e3:38:4a:5e:2c:7c:5e:54:30:
         2d:ba:cc:51:36:8e:2f:3a:91:89:6f:0c:01:f7:ba:ac:5a:73:
         6b:3d:8f:e2:6a:5d:9a:54:21:7c:a1:df:78:de:b8:f8:a0:ae:
         9f:85:8a:b8:73:28:af:2d:66:a8:94:e4:6a:5e:56:1c:7e:48:
         7d:80:1c:90:f4:e8:a4:e3:fa:bb:68:8a:0c:69:09:b4:1b:f2:
         13:13:a8:5e:62:59:36:44:58:cf:9b:25:e0:95:18:12:0d:07:
         1b:66:65:20:c1:0e:58:9c:6e:c9:89:84:61:3a:5d:78:63:9f:
         19:a6:46:27:8e:5d:ba:6a:a2:ac:4b:36:2c:f1:6f:5f:62:73:
         73:5c:d2:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb9ZTkw6YY8RA5KRi/ckfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxM2QzZmI2YTg2M2FjMGZhNGQxZmVlZmUzYWVjMzllZDhk
Mzg5NWMwHhcNMjYwODE0MTgwMTQxWhcNMjYwODE1MTgwMTQxWjAzMTEwLwYDVQQD
Eyg0MWUyZTE0MTczMmI4ZTA3MGQ5ODZiYjVlZDBjYjRkNDQ2YjYwMjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+YT7B8d7oQWK5qJGt81Dqgbs/uR
3ejjPWh9hiuwJ2eXqgMf1NgWtGAI63MrK7GjOsZmrSobkvcAUhiuuqTAY0/N2Tig
ZV2Wh4GxUoDsD3PtLajavFP+x1Z8FXsdDKulIXIdoByYmxq1JE393GqtP9eWNyDM
npSdGU+MQN64gWBIXP1XEUuPg/Ok8xJDG28SK3EDg5EQd76HPLcHPfWl+VYkcBbN
bFPD407Acxlc75G7i9levPDMLA/sUQwmXnmv9E1ZFnx5cXoT3dpIjR4OQYmmT7GH
gEEEifpd1K+Cbuqe4Y5XArXQkBayVcKcrmOs5dZfYy29YdNChXGNA8YJ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHi4UFzK44HDZhrte0MtNRGtgKWMB8GA1UdIwQY
MBaAFOE9P7aoY6wPpNH+7+Ouw57Y04lcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hNWY0OTgtNmM3Ni00MjMwLTkzZDEt
YTM5ZTAwOTYyN2VmLzEvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hNWY0OTgtNmM3Ni00MjMwLTkzZDEtYTM5ZTAwOTYyN2Vm
LzEvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDXVzzwx
Fn7yKLnK9UzIby1c8YKqYA4SWvanasGzJ2Bhiw5RKkYiPIzbZVejkk8lC9VBnf+Q
APabOco3zg7pugepx7KZbALj39gLF5ck24p9ZPvL1x+iatgM2W8Il2aJvixINKpF
+GCRtbTeVVLEnK3kw64A4zhKXix8XlQwLbrMUTaOLzqRiW8MAfe6rFpzaz2P4mpd
mlQhfKHfeN64+KCun4WKuHMory1mqJTkal5WHH5IfYAckPTopOP6u2iKDGkJtBvy
ExOoXmJZNkRYz5sl4JUYEg0HG2ZlIMEOWJxuyYmEYTpdeGOfGaZGJ45dumqirEs2
LPFvX2Jzc1zSjQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:02 2026 by rpki-client