Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
File:                     4Rzmt92aasCzJLpa2HOwr0ajktQ.mft (raw, json)
Hash identifier:          GkpnuH1qcCtKWjIPXQ9mnJydTcaSPeovOAsUCoKwJiI=
Subject key identifier:   E0:9F:4E:1F:19:73:26:77:12:1F:74:6F:93:48:E0:DD:FC:9B:65:57
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Certificate issuer:       /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial:       01A04084E73E742644AF7CD9BE5D132AE682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
Manifest number:          0436
Signing time:             Thu 27 Aug 2026 00:00:46 +0000
Manifest this update:     Thu 27 Aug 2026 00:00:46 +0000
Manifest next update:     Fri 28 Aug 2026 00:00:46 +0000
Files and hashes:         1: 4Rzmt92aasCzJLpa2HOwr0ajktQ.crl (hash: RQFjZ5+NwT13aKWsJn2Ec+1TItTj60L7rZR4sVN73M8=)
                          2: cPYgxpTQJttUViNAAa1x_F8lekM.roa (hash: G9b5p61rO9ZEZmykx4lc6+UnUo8Kn3VRyuxj1NSSYeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:84:e7:3e:74:26:44:af:7c:d9:be:5d:13:2a:e6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
        Validity
            Not Before: Aug 27 00:00:46 2026 GMT
            Not After : Aug 28 00:00:46 2026 GMT
        Subject: CN=e09f4e1f19732677121f746f9348e0ddfc9b6557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:86:4a:d2:f1:98:6f:fb:ee:db:6d:12:4e:34:
                    65:7a:0e:da:b8:d1:c3:59:0b:e9:70:f7:41:30:10:
                    43:3e:01:54:04:42:57:aa:1f:61:76:3b:51:28:f5:
                    7c:df:78:50:fd:c0:fc:fe:40:8c:07:d1:e7:d1:0e:
                    14:87:7c:b3:59:6f:52:ab:29:ab:d0:bd:be:9c:37:
                    22:d3:9a:f7:eb:f7:64:a0:b6:a7:40:5b:9d:6f:4c:
                    18:1a:5a:69:05:49:bd:99:8b:bc:bf:35:d2:f9:64:
                    09:d0:5f:fb:08:bc:1d:9c:97:07:fe:fd:ab:b4:94:
                    0f:b6:44:fd:c6:15:09:b0:e1:16:d7:35:37:f7:27:
                    a7:56:66:f3:14:cf:a8:65:7d:03:aa:c4:5e:7b:42:
                    70:26:41:cc:bc:8e:aa:d8:97:90:a8:1c:44:97:81:
                    85:76:aa:49:d3:2c:15:d5:70:42:f3:32:01:49:42:
                    fb:17:7e:7b:b0:3b:64:60:ad:0d:44:42:90:6f:35:
                    a6:71:aa:20:43:ff:37:8a:73:48:24:c9:5d:cb:71:
                    b9:f9:8c:61:30:58:f5:65:64:18:70:c2:35:b5:bc:
                    14:42:9d:d3:c6:eb:bc:60:08:41:f9:fa:9d:f8:29:
                    21:f1:a2:65:a2:be:f8:c1:2b:ee:40:80:b5:57:a9:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9F:4E:1F:19:73:26:77:12:1F:74:6F:93:48:E0:DD:FC:9B:65:57
            X509v3 Authority Key Identifier:
                keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:19:53:23:f4:e2:b7:d7:19:a7:f4:f1:69:a3:f8:04:a1:eb:
         18:8a:ab:1d:0f:ef:e8:fa:e3:e3:08:15:ea:83:4e:29:23:10:
         57:21:51:9e:6b:26:e5:7c:98:65:46:42:26:3b:e4:fd:2c:b4:
         01:8d:68:37:14:49:af:5e:67:52:70:16:a5:77:64:88:22:d6:
         94:18:c1:9a:40:3a:f9:cd:f4:e5:fd:b5:74:f7:96:f2:8c:f3:
         cf:01:38:98:98:8a:ca:69:dd:93:92:b8:5e:a3:2d:58:b7:b0:
         0c:de:b9:b8:b2:10:6d:b1:4c:b2:04:8d:09:50:fa:ae:04:e7:
         3d:b7:09:80:fb:5b:db:2c:ef:c0:bd:97:5e:52:55:e5:5a:5c:
         7d:26:4d:c4:7f:99:9e:79:19:de:58:01:15:87:87:96:21:6f:
         cb:b3:43:a0:74:54:c0:d3:4c:09:60:48:76:07:8b:f3:bc:76:
         1a:69:34:40:25:05:f6:68:29:9e:98:78:48:b9:51:51:01:87:
         49:45:a8:da:c0:34:22:d9:71:55:d1:12:dc:84:4e:93:9e:23:
         98:20:ea:98:0b:75:70:5a:fb:ff:a9:32:f0:3e:c8:11:24:3a:
         57:46:f3:49:ec:20:d3:21:66:37:58:05:02:30:00:2a:ab:f4:
         88:f1:f4:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAhOc+dCZEr3zZvl0TKuaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMWNlNmI3ZGQ5YTZhYzBiMzI0YmE1YWQ4NzNiMGFmNDZh
MzkyZDQwHhcNMjYwODI3MDAwMDQ2WhcNMjYwODI4MDAwMDQ2WjAzMTEwLwYDVQQD
EyhlMDlmNGUxZjE5NzMyNjc3MTIxZjc0NmY5MzQ4ZTBkZGZjOWI2NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4ZK0vGYb/vu220STjRleg7auNHD
WQvpcPdBMBBDPgFUBEJXqh9hdjtRKPV833hQ/cD8/kCMB9Hn0Q4Uh3yzWW9Sqymr
0L2+nDci05r36/dkoLanQFudb0wYGlppBUm9mYu8vzXS+WQJ0F/7CLwdnJcH/v2r
tJQPtkT9xhUJsOEW1zU39yenVmbzFM+oZX0DqsRee0JwJkHMvI6q2JeQqBxEl4GF
dqpJ0ywV1XBC8zIBSUL7F357sDtkYK0NREKQbzWmcaogQ/83inNIJMldy3G5+Yxh
MFj1ZWQYcMI1tbwUQp3Txuu8YAhB+fqd+Ckh8aJlor74wSvuQIC1V6mVWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCfTh8ZcyZ3Eh90b5NI4N38m2VXMB8GA1UdIwQY
MBaAFOEc5rfdmmrAsyS6WthzsK9Go5LUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82MWRiNGUtM2VmYy00NjJkLWFiMWYt
ZTU5MGU2YjRjZDBlLzEvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82MWRiNGUtM2VmYy00NjJkLWFiMWYtZTU5MGU2YjRjZDBl
LzEvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvBlTI/Ti
t9cZp/TxaaP4BKHrGIqrHQ/v6Prj4wgV6oNOKSMQVyFRnmsm5XyYZUZCJjvk/Sy0
AY1oNxRJr15nUnAWpXdkiCLWlBjBmkA6+c305f21dPeW8ozzzwE4mJiKymndk5K4
XqMtWLewDN65uLIQbbFMsgSNCVD6rgTnPbcJgPtb2yzvwL2XXlJV5VpcfSZNxH+Z
nnkZ3lgBFYeHliFvy7NDoHRUwNNMCWBIdgeL87x2Gmk0QCUF9mgpnph4SLlRUQGH
SUWo2sA0ItlxVdES3IROk54jmCDqmAt1cFr7/6ky8D7IESQ6V0bzSewg0yFmN1gF
AjAAKqv0iPH0MQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:35 2026 by rpki-client