Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
File:                     T02gn7vpD7efDwiyB_g18PDaKf4.mft (raw, json)
Hash identifier:          o7YTGcKIegkZd0kOYBTcGE9c7Lpg2f2peIdVA6s+SAI=
Subject key identifier:   BF:6F:E6:17:8D:B3:3A:11:47:64:89:DB:26:9B:96:B0:2A:29:8D:DB
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Certificate issuer:       /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial:       01A08BD672EB7FE9674485795A90C30432E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
Manifest number:          1A4C
Signing time:             Thu 10 Sep 2026 15:01:22 +0000
Manifest this update:     Thu 10 Sep 2026 15:01:22 +0000
Manifest next update:     Fri 11 Sep 2026 15:01:22 +0000
Files and hashes:         1: J-GnCjEevLnsSylTNN_DRQKgLxU.roa (hash: Ih+rPEkL3JjpnefkXhpQxgVK3VfQEJZ/zybpvC3KpeM=)
                          2: T02gn7vpD7efDwiyB_g18PDaKf4.crl (hash: yYe0+6VtXbn+1Yd5Vam7rH36uyRkJ7uF5gQhiuUehI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:72:eb:7f:e9:67:44:85:79:5a:90:c3:04:32:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
        Validity
            Not Before: Sep 10 15:01:22 2026 GMT
            Not After : Sep 11 15:01:22 2026 GMT
        Subject: CN=bf6fe6178db33a11476489db269b96b02a298ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:9b:c7:a5:ee:6b:54:17:92:22:31:0b:de:
                    29:5d:71:43:51:be:cf:b1:9c:17:96:65:a0:28:b3:
                    5d:b4:81:58:23:25:27:23:7e:5f:d9:11:df:75:4e:
                    fa:cb:1d:08:49:66:97:58:e5:06:fc:be:76:b2:68:
                    d3:64:17:b0:44:be:23:fe:e6:24:d4:76:19:e2:fa:
                    fe:9b:a4:4a:14:7e:ec:ba:34:34:c6:2b:0f:59:99:
                    8f:a0:d4:54:0e:af:25:04:c9:00:93:51:86:f4:5d:
                    d1:fb:fd:57:b0:c9:51:70:e9:b8:12:c9:c6:33:b3:
                    43:81:2d:4d:52:e9:ca:81:a0:e3:b2:89:05:c6:37:
                    24:1e:dc:14:b1:4e:9b:e9:11:7e:15:15:73:91:d7:
                    59:36:3a:5a:fb:24:c1:35:44:6f:a9:f8:cd:54:9b:
                    f7:58:4f:f7:9c:65:90:db:38:57:92:54:b6:e6:ac:
                    5d:d9:78:e3:83:7a:c7:5b:e4:25:8b:7e:fe:68:6a:
                    4c:dd:a2:0c:d2:12:63:1d:7a:78:7f:c1:30:44:44:
                    44:40:66:d9:98:df:dd:76:e8:aa:50:51:66:6e:a7:
                    4b:99:7a:16:e4:19:3f:ce:c3:48:76:be:e1:fc:56:
                    07:8b:cd:b5:c0:49:17:52:ef:36:ec:53:04:5f:5c:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6F:E6:17:8D:B3:3A:11:47:64:89:DB:26:9B:96:B0:2A:29:8D:DB
            X509v3 Authority Key Identifier:
                keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c8:ea:fa:f8:0c:15:20:17:58:56:cd:0a:b1:4e:3e:df:31:
         32:6c:10:02:d8:29:56:27:7f:f2:4d:0e:e7:1a:ad:6a:ee:d7:
         b2:fc:61:e4:2b:0b:22:42:6b:a9:1f:bb:76:8c:27:14:86:a0:
         dd:38:d2:4f:78:e3:7e:2e:1f:55:b0:b2:16:3b:3a:4b:40:26:
         6e:8c:56:21:99:f5:63:05:10:f8:a8:7e:ec:7f:5a:6e:0c:e4:
         bb:c9:4c:80:dc:98:44:73:b2:48:22:85:d7:3e:1c:da:e3:79:
         01:a6:45:3d:16:53:41:a2:fc:df:07:41:94:7f:b6:a6:d5:68:
         73:c4:12:53:b3:f6:2f:2f:bb:51:ed:eb:f3:30:a9:f6:9f:0e:
         1c:48:c1:47:fd:f0:51:bb:38:2f:b2:ca:60:3c:63:34:1e:44:
         18:0e:22:d0:67:8f:c9:a1:a3:4c:75:58:f6:9b:e7:ca:1b:76:
         2b:ce:b8:74:d2:c9:23:94:47:4e:f3:7e:27:50:56:05:45:d3:
         01:2f:28:26:2a:87:91:71:ae:57:90:39:65:a0:7c:58:8e:5f:
         0d:af:cc:c3:83:bd:ae:dc:c7:f0:a2:bd:cf:d2:40:a3:d0:b8:
         99:97:bd:4a:14:3b:79:f8:bc:f2:12:b3:32:c6:a9:37:bd:ea:
         54:dd:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:29:31 2026 by rpki-client