Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File:                     t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier:          96Q2iTRZ69/JRuvAg22v5QItKzt3k0oGL+j4FZx5x/w=
Subject key identifier:   35:98:3D:32:04:02:9E:42:2E:18:D6:E7:BF:AC:30:AA:7B:F0:3A:DE
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer:       /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial:       01A08678E1FEC499FE3E0489180C5F9E37D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number:          09C5
Signing time:             Wed 09 Sep 2026 14:01:04 +0000
Manifest this update:     Wed 09 Sep 2026 14:01:04 +0000
Manifest next update:     Thu 10 Sep 2026 14:01:04 +0000
Files and hashes:         1: 4avV52VadcXyjmFmkPiOZqd4aEo.roa (hash: rACIPz05aOD1m23fMqk7AR2NAoediVEN3H+EA6u4xuE=)
                          2: m9o4a-Sp907mkuh7yKVYLJl1LEA.roa (hash: 6qxzfM0ywaM1roIqQKQwRjB4scmKgnfULeAbobju2pc=)
                          3: p99sKQd64TY87IGdtOWr6iPqp8Y.roa (hash: TOjdieep1rBeaY3tAvDOKKLMjGOfaC+22A+UcO2sOVg=)
                          4: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: K77x6vJ0Dud29O1NJ3/stH7gaKHNn4iiu9LfajGnGkQ=)
                          5: uxXZ_hKsmnhQRsfJ1EfmQad0ATE.roa (hash: GZswREwDe56hmbMlhE5Azz0F2ZeFdeK1GV3fvvLTRak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:86:78:e1:fe:c4:99:fe:3e:04:89:18:0c:5f:9e:37:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
        Validity
            Not Before: Sep  9 14:01:04 2026 GMT
            Not After : Sep 10 14:01:04 2026 GMT
        Subject: CN=35983d3204029e422e18d6e7bfac30aa7bf03ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:a2:eb:d5:f7:1a:91:b2:28:d6:ba:f4:aa:
                    59:4a:05:5b:47:6a:6c:f9:02:c5:3f:f8:be:19:41:
                    7f:04:ea:46:59:54:91:07:d5:34:4d:f0:0d:cc:ed:
                    d0:ac:81:cd:91:d9:c0:b7:81:d0:8b:fa:3c:42:60:
                    b5:63:5c:88:e2:77:c6:bb:55:71:cf:0e:aa:8b:5d:
                    d8:27:47:28:e8:96:32:fc:bb:42:53:9e:9c:0d:ab:
                    4f:99:72:3c:d2:c9:39:34:83:17:a4:66:89:4a:5f:
                    27:23:95:ea:66:0f:83:9e:35:73:97:6b:82:7c:f5:
                    75:07:f2:ef:9b:2a:ca:c4:09:4e:b5:13:df:aa:a8:
                    e0:8e:72:dc:6f:d4:d6:cc:4e:6a:59:36:10:6e:4e:
                    93:70:fc:24:a4:6e:2c:0d:6d:70:e5:19:a3:68:d3:
                    9e:aa:71:47:91:c1:bd:b2:ab:11:7e:d5:94:b2:92:
                    df:30:0b:66:89:e1:78:4c:5d:7d:23:36:ca:2b:19:
                    2d:ed:55:e1:07:3d:b8:c7:60:f5:52:79:e2:0a:b2:
                    52:70:dc:e8:b9:f8:2e:5e:2a:71:f5:19:d0:e7:1d:
                    95:ae:57:c8:49:b2:ef:0e:f0:64:c4:d0:7a:f1:f7:
                    d9:11:c3:c2:62:1b:ba:c8:e0:fb:b0:60:c6:b2:cf:
                    4d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:98:3D:32:04:02:9E:42:2E:18:D6:E7:BF:AC:30:AA:7B:F0:3A:DE
            X509v3 Authority Key Identifier:
                keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:47:97:5c:da:67:fc:1b:02:e1:d2:6e:c6:b3:7d:eb:a5:15:
         cd:94:38:f9:b3:fd:98:c9:58:22:2c:35:a8:33:b9:34:57:ef:
         21:58:c7:e9:2f:06:4a:98:cd:61:c4:bc:3c:f0:c5:fe:5b:7b:
         09:65:a2:9e:ac:d8:9d:81:35:9d:13:e6:86:cf:04:79:44:d1:
         9d:2a:cd:00:b3:6b:09:1a:0a:db:3a:ea:8e:6c:12:97:70:e5:
         bc:9a:1f:ac:33:f1:fa:e3:ea:c4:f3:2d:ed:c3:69:7b:b3:4e:
         60:7e:3c:e5:5e:4c:df:98:cd:28:39:e9:05:e4:0c:22:ce:aa:
         84:15:c1:56:eb:40:80:09:26:7c:55:4a:7e:a0:9d:f0:49:69:
         39:e4:49:3e:5d:f4:88:c8:f3:0e:b0:9d:a5:3e:bb:32:d1:9e:
         58:18:53:06:bb:67:c2:69:ae:e1:52:05:ed:20:c7:a6:a1:3b:
         c7:e0:bb:2c:e0:99:c4:95:de:ae:73:ab:80:bc:8f:47:9f:18:
         df:28:5b:a3:40:2b:ff:39:69:d6:c6:48:de:24:91:2b:06:7a:
         88:a4:9d:9b:79:0b:0a:bc:c7:90:74:ca:90:60:01:33:f2:cf:
         c7:14:96:98:a6:a5:c2:9e:83:a6:3e:7a:df:4b:1b:e2:a8:39:
         8f:19:e1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:23:28 2026 by rpki-client