Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File:                     v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier:          Ou7UWL4lLf9P6MAfvOP2+7jAV474sTyQWTyu43Y8BQo=
Subject key identifier:   A6:0D:FD:07:75:BB:A1:B8:DE:7E:67:CB:BB:26:FD:38:DD:DB:47:ED
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer:       /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial:       01A1114D923B5518FE2F609BFA2291E99A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number:          0667
Signing time:             Tue 06 Oct 2026 13:00:58 +0000
Manifest this update:     Tue 06 Oct 2026 13:00:58 +0000
Manifest next update:     Wed 07 Oct 2026 13:00:58 +0000
Files and hashes:         1: 3RsLnrTTWTLPQLyhD4gSJN-DaTI.roa (hash: P//UvOt3ZaB3uh3PmS1jjSG8dYP/ZrhMVhcmC8uqPak=)
                          2: Qsmck_Q1LRjc9BFJ4PRK8hkx8lE.roa (hash: tFHy5YIAzvBM7ghe1eYeoeXBK1W4SJOIgpN7n9hkr8Q=)
                          3: XbyXTy2eUaONfFWw8BChIBWa36M.roa (hash: xn0X7nDb94H6uKDvSt+XEo1r5ooPCWsDBnVyrR9GWjM=)
                          4: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: +MCQNn9uqn+Lou4Ds0++4drqSDAyhc0E4CVOheE5lDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:4d:92:3b:55:18:fe:2f:60:9b:fa:22:91:e9:9a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
        Validity
            Not Before: Oct  6 13:00:58 2026 GMT
            Not After : Oct  7 13:00:58 2026 GMT
        Subject: CN=a60dfd0775bba1b8de7e67cbbb26fd38dddb47ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:d6:c0:0f:28:2c:94:e5:f2:32:d2:a5:01:
                    c9:e7:33:eb:44:87:9e:1d:fc:bd:a3:18:cb:06:19:
                    ab:68:e6:42:11:1a:a2:3b:e0:ad:77:80:ff:bb:a5:
                    61:06:cd:6f:16:75:ac:9e:a0:7d:46:e6:c5:70:e2:
                    ec:65:d7:78:34:4a:35:80:8a:e3:21:d9:7e:12:a4:
                    b7:d6:04:48:de:3a:b2:2e:65:17:8d:b3:d4:01:32:
                    76:c7:a9:d5:67:67:d1:e1:15:f7:82:2f:d2:57:2f:
                    dd:0a:54:ab:7e:60:36:98:f0:f1:e7:a7:00:58:2a:
                    eb:aa:4a:19:6b:71:f6:f4:e5:9d:92:17:70:5c:c2:
                    87:02:16:74:7c:91:e6:66:72:aa:b8:30:c8:9a:ff:
                    6d:30:67:f3:c2:20:b8:68:6c:0f:ba:8d:36:a2:92:
                    f3:9a:88:51:0e:fd:26:62:f9:58:21:88:da:40:a4:
                    be:07:69:b1:d5:be:33:83:2e:99:9c:39:51:6d:4c:
                    69:c8:9d:64:de:15:12:7d:10:9f:50:3d:4a:dc:f2:
                    65:1d:cf:19:ff:63:ab:78:10:ac:73:3e:1f:01:b2:
                    d4:16:44:a0:6b:49:d6:34:61:f5:36:f0:a9:01:12:
                    4d:7c:4c:f2:3d:10:71:cf:3a:94:c3:08:19:9f:76:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0D:FD:07:75:BB:A1:B8:DE:7E:67:CB:BB:26:FD:38:DD:DB:47:ED
            X509v3 Authority Key Identifier:
                keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:a0:28:27:31:e3:90:2e:76:d9:8a:de:c4:8b:61:b4:dd:
         69:07:08:e1:f0:2b:bb:70:97:43:c2:5f:5e:6e:13:e0:c4:3d:
         28:76:f1:be:d5:bd:05:46:b1:b1:d1:13:ad:a1:1c:d8:8b:65:
         6c:19:0c:25:52:21:61:39:2e:d4:27:46:50:e2:9b:78:4b:9a:
         0d:7a:4e:b9:62:e3:0f:b6:83:71:13:f8:28:44:ac:85:4b:33:
         a0:bc:f7:e4:63:75:25:48:96:35:dd:3e:63:fc:f7:50:30:14:
         cd:f1:80:ef:43:db:03:33:f4:25:00:8f:45:3e:df:a5:be:ff:
         f3:e0:19:cd:87:46:1b:34:72:ab:0b:24:6c:24:d5:a3:a3:3e:
         3e:fc:cb:fd:9a:65:24:54:20:f3:bf:43:37:ff:89:19:8a:31:
         03:b5:a0:b7:fa:51:05:79:fe:bf:e6:8a:4a:85:77:f3:54:58:
         94:d6:55:0f:70:1b:94:f6:3f:26:c7:2f:8e:53:7a:86:f2:9f:
         86:78:bb:1e:ea:88:cc:d9:0f:68:50:80:7f:93:35:ad:b2:68:
         90:89:3c:cf:99:c7:3c:db:10:6d:ad:26:0d:84:34:8d:d1:31:
         53:2a:ec:b8:b7:38:b9:01:95:72:04:e0:36:d0:6c:bc:97:fe:
         c3:79:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:47:38 2026 by rpki-client