Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
File:                     4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json)
Hash identifier:          wmxO+WZZiXt8XPrZ7IR7mj3f8+LUKixh8EQw8YTWlT0=
Subject key identifier:   24:3E:4E:A2:4D:80:12:2B:93:81:9D:A0:3E:A1:DB:1A:D6:51:08:5D
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Certificate issuer:       /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial:       01A17EBD241A081BF81D653A7E37E6DC4EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
Manifest number:          0E99
Signing time:             Tue 27 Oct 2026 19:01:27 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:27 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:27 +0000
Files and hashes:         1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=)
                          2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=)
                          3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: zl3qXa0H3CGZcyX6c+LIZWRXO0x/ZTWMtXmwqSTFUuM=)
                          4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=)
                          5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=)
                          6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=)
                          7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=)
                          8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=)
                          9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=)
                          10: HZ7C4ms11ElfIAOCXz2KP1UZQOo.roa (hash: XB0mb76ajFkdDxe5edVo54FP1IvbB8otJuWMuOU3oU8=)
                          11: QL4XIa93X9j8w6Q69GPbrIm9Txg.roa (hash: q3a41ZI2Ed5MjFN9KCPKVx+N+9H7Kne18XdEvUkqHKo=)
                          12: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=)
                          13: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=)
                          14: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=)
                          15: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=)
                          16: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=)
                          17: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=)
                          18: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=)
                          19: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=)
                          20: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=)
                          21: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=)
                          22: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=)
                          23: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=)
                          24: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=)
                          25: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 19:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bd:24:1a:08:1b:f8:1d:65:3a:7e:37:e6:dc:4e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
        Validity
            Not Before: Oct 27 19:01:27 2026 GMT
            Not After : Oct 28 19:01:27 2026 GMT
        Subject: CN=243e4ea24d80122b93819da03ea1db1ad651085d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:ae:e4:d5:54:09:9a:f5:b3:a6:1f:0b:97:
                    18:ca:d9:ea:0f:12:6d:51:ed:16:ff:ec:70:c9:1b:
                    ff:88:d9:ae:2f:86:cf:32:d5:0f:33:85:31:f8:b8:
                    4d:c8:50:89:e8:4c:20:00:1b:4b:6c:b0:1b:a7:59:
                    47:9d:6a:dd:20:84:21:bd:4c:25:44:ef:e8:ea:fb:
                    27:8a:de:09:48:77:f5:5e:a2:03:09:67:0d:60:46:
                    ba:b0:a8:02:b8:3a:1e:0f:96:21:3e:45:31:07:5c:
                    7c:3e:46:25:64:09:df:b4:33:b5:0b:de:6a:21:54:
                    41:b1:bc:ab:10:5c:cc:a2:ce:22:4b:59:9f:41:90:
                    2b:34:4d:fe:93:0e:41:f7:18:4d:43:a2:62:1f:84:
                    0a:d6:05:24:b4:c4:12:57:e0:58:9a:20:71:85:e9:
                    73:64:18:80:aa:06:f9:74:a8:3b:d5:3a:da:73:56:
                    c3:92:0d:7a:e7:7e:fe:41:9f:e5:cc:e1:74:f4:e8:
                    0b:b8:75:3e:c7:46:2b:d5:b8:a9:0e:3b:95:ab:cb:
                    9c:6b:2d:fa:90:77:95:07:7f:07:7d:11:d2:d9:b1:
                    cc:18:f9:85:2e:78:2b:30:3c:e1:b2:f7:96:94:68:
                    8c:a2:94:64:a8:cf:df:fb:97:82:37:92:ec:b6:f0:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3E:4E:A2:4D:80:12:2B:93:81:9D:A0:3E:A1:DB:1A:D6:51:08:5D
            X509v3 Authority Key Identifier:
                keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2f:25:45:01:f9:1e:47:e4:dc:b5:cb:85:5f:34:9e:5a:9d:
         c0:fd:bf:e3:96:95:c9:42:7a:09:26:f5:63:1d:30:50:4d:cd:
         4c:84:45:db:32:ec:77:fc:b2:9d:68:ff:e5:72:b9:00:36:1e:
         9e:25:89:1f:a5:6f:88:50:2a:7c:0e:25:77:1e:81:c6:8b:54:
         12:16:19:51:3d:f3:c4:99:2c:20:eb:31:5e:0d:fc:e5:65:76:
         b1:03:ec:ab:97:86:87:7e:ef:59:03:d5:52:16:f0:3a:06:9c:
         85:bd:5a:dc:88:39:b3:3f:57:18:f0:7f:c4:60:e8:11:4b:35:
         a7:88:53:f1:3e:e7:c2:cc:b9:d9:5c:25:a8:d0:1d:01:e4:59:
         e9:0a:25:dc:22:a7:42:d5:d9:22:90:1e:b6:fb:6a:74:44:41:
         e9:c3:e2:19:dc:c7:76:8c:1c:57:9f:bb:be:91:1d:2a:bb:f6:
         99:f6:d1:17:b3:6f:22:22:2e:5e:e6:ac:de:c7:6c:f6:e0:d4:
         49:78:31:b1:13:31:60:0f:75:a4:cf:b4:83:3a:c7:ab:fb:86:
         fe:9f:4d:5a:76:52:98:31:1d:38:01:b7:3f:ed:51:e3:bd:4b:
         21:99:24:6f:51:90:67:be:be:de:74:eb:80:ee:29:38:9a:7e:
         36:ff:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:29:27 2026 by rpki-client