Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File:                     t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier:          ouWrjuw8Azg/Cwa9yE/henPFy678ARp/ycZITm37/BM=
Subject key identifier:   31:BA:24:B6:49:48:6C:B8:FA:4D:7B:89:FD:0F:1F:20:73:8B:C2:96
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer:       /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial:       019D389BF75C83CEA1D5102789FABB5C1C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number:          080F
Signing time:             Sun 29 Mar 2026 08:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:38 +0000
Files and hashes:         1: 4avV52VadcXyjmFmkPiOZqd4aEo.roa (hash: rACIPz05aOD1m23fMqk7AR2NAoediVEN3H+EA6u4xuE=)
                          2: m9o4a-Sp907mkuh7yKVYLJl1LEA.roa (hash: 6qxzfM0ywaM1roIqQKQwRjB4scmKgnfULeAbobju2pc=)
                          3: p99sKQd64TY87IGdtOWr6iPqp8Y.roa (hash: TOjdieep1rBeaY3tAvDOKKLMjGOfaC+22A+UcO2sOVg=)
                          4: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: bhjLOCd8tydqCj/Lw7P+ZK0F/ouHxR/tWvJ1sW2fP2c=)
                          5: uxXZ_hKsmnhQRsfJ1EfmQad0ATE.roa (hash: GZswREwDe56hmbMlhE5Azz0F2ZeFdeK1GV3fvvLTRak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:f7:5c:83:ce:a1:d5:10:27:89:fa:bb:5c:1c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
        Validity
            Not Before: Mar 29 08:00:38 2026 GMT
            Not After : Mar 30 08:00:38 2026 GMT
        Subject: CN=31ba24b649486cb8fa4d7b89fd0f1f20738bc296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:16:d7:a5:9c:97:13:10:c5:91:6f:69:7a:
                    66:45:b7:9c:d4:30:52:92:ed:ca:8f:be:ce:fa:63:
                    50:9e:05:b0:59:f7:44:c3:c7:0e:5b:2b:e2:87:18:
                    01:4a:f2:2e:19:4d:30:22:d0:7d:b3:00:a5:54:6c:
                    7a:30:af:9e:dd:ff:06:d5:85:dd:18:ba:10:5c:55:
                    b6:e6:76:98:5d:77:18:18:b8:90:2e:14:91:0f:6e:
                    dd:e0:17:42:87:9f:6e:c6:f2:13:b0:2e:03:e1:f5:
                    b7:99:61:26:2a:d4:bc:a6:6c:ab:41:ef:43:eb:a3:
                    28:66:02:47:ec:76:b3:8f:96:90:37:05:4b:6b:30:
                    22:2e:41:cb:f4:03:f4:0f:e6:ab:40:73:61:90:9f:
                    56:82:93:4a:1f:de:c9:ee:cc:07:6b:33:7f:d5:88:
                    51:61:df:7e:4d:fa:54:5f:6b:30:06:20:2c:e3:1d:
                    70:a6:5f:55:d1:32:df:df:a4:87:49:9b:6b:2d:70:
                    62:1b:cc:1d:c8:6a:b6:c8:88:60:fc:7b:7b:1f:68:
                    52:93:27:f9:b5:8a:66:02:8d:10:59:0b:4b:12:1b:
                    02:99:a3:b1:23:1c:d2:f7:d6:78:d7:05:84:11:cc:
                    65:58:1c:43:83:5e:3c:79:34:5f:1c:c4:42:b7:03:
                    58:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BA:24:B6:49:48:6C:B8:FA:4D:7B:89:FD:0F:1F:20:73:8B:C2:96
            X509v3 Authority Key Identifier:
                keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:d5:33:16:0c:25:3a:7d:9b:b4:61:52:d5:6c:19:1f:18:
         f3:65:aa:5d:81:73:c4:9b:c3:15:b1:2a:42:46:c4:00:6b:53:
         26:0e:79:52:22:3c:d3:88:15:62:ab:c4:d7:0e:30:c2:e4:2a:
         a9:6f:c6:fa:ba:1c:6f:c5:1c:e2:43:6f:d5:28:fc:5c:da:02:
         3a:98:cb:f1:cd:b5:36:a8:7c:30:0c:28:fa:ab:df:c5:20:1d:
         9d:40:fb:70:2f:55:91:de:3e:13:7f:cd:8d:e4:5c:c0:8b:4f:
         1e:be:62:79:bb:c8:b3:e5:09:c7:0c:f7:79:70:d1:95:b5:1c:
         e5:7d:04:89:31:1c:bd:f6:84:b0:d4:5d:a2:10:09:04:1a:bd:
         5e:e4:b5:dc:c1:37:64:6e:bd:8c:5c:dd:a2:b5:1a:6a:0d:2c:
         8c:4c:7e:63:e3:75:16:6b:5f:b9:82:3b:7c:cf:50:28:16:f9:
         3e:bc:47:eb:d5:08:d3:5c:90:2b:62:a7:5c:ab:23:14:08:2a:
         8c:3b:16:be:4e:69:39:73:f1:19:e0:82:70:77:33:b4:bd:50:
         27:4c:80:2f:21:4a:01:85:a1:bc:af:d1:2f:0c:fc:a1:93:8b:
         e9:8a:f5:d7:a9:a7:af:19:33:bb:6a:c3:d1:b0:45:67:0f:3a:
         fd:66:7c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:49:14 2026 by rpki-client