Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File:                     tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier:          TcoOr/TV4Bm8odUy2xToyeFiFhGfa8mg5Z+1crW6f54=
Subject key identifier:   58:36:C5:2B:0A:23:72:7F:9E:97:1F:5E:80:1A:B1:17:AD:0D:D9:95
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer:       /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial:       01A002B8B9C9F68943EE823FB97FF9EDC0AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number:          1A05
Signing time:             Sat 15 Aug 2026 00:00:55 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:55 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:55 +0000
Files and hashes:         1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=)
                          2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: 6qnjCuvf8YOEej5VtgBMMozsXqUvGEomy7AYvRDbekw=)
                          3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:b9:c9:f6:89:43:ee:82:3f:b9:7f:f9:ed:c0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
        Validity
            Not Before: Aug 15 00:00:55 2026 GMT
            Not After : Aug 16 00:00:55 2026 GMT
        Subject: CN=5836c52b0a23727f9e971f5e801ab117ad0dd995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:c0:f9:4f:08:c5:3d:d1:a6:3f:11:91:b7:
                    77:e3:ab:c2:f8:01:98:17:93:33:bc:e2:85:7f:d9:
                    1f:3d:f9:62:33:9c:76:41:60:7a:ef:69:04:46:db:
                    ff:d3:cc:81:30:bf:24:c9:b7:40:15:b1:d6:28:5b:
                    0b:42:bf:fa:3b:55:97:ae:24:7a:cb:17:a3:1d:3b:
                    35:ce:31:94:83:4a:ad:13:41:6f:f4:7f:21:cf:95:
                    a3:36:62:30:05:7a:9e:5d:e3:2a:74:4b:95:07:dc:
                    bf:54:80:68:94:36:f5:2c:5d:83:b3:a6:bc:7a:ec:
                    ed:ea:7e:8d:7a:7b:d2:d6:df:49:e5:48:d9:0a:00:
                    fb:32:a0:9f:36:6a:ec:70:f4:b6:38:0a:9f:e4:be:
                    8b:a5:15:a4:fa:3d:19:81:98:b1:39:f3:96:bf:f2:
                    02:6a:f2:84:a2:5f:8f:3e:15:48:6c:87:df:43:65:
                    3a:2d:e9:a8:8f:6a:54:b2:0c:26:64:ec:5c:1f:93:
                    35:cc:20:f2:10:2e:e0:2a:e0:58:f6:33:3b:13:8d:
                    74:76:3f:bf:e1:02:17:e6:25:bd:b5:cd:16:d8:eb:
                    91:99:66:87:41:43:5a:50:d7:d5:e5:f0:33:b4:ff:
                    51:a5:a7:86:3c:e9:80:83:b0:f5:8e:b7:3b:2e:45:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:36:C5:2B:0A:23:72:7F:9E:97:1F:5E:80:1A:B1:17:AD:0D:D9:95
            X509v3 Authority Key Identifier:
                keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cb:b5:25:af:2b:78:1c:a3:be:f7:c6:b8:ba:ca:77:b7:a8:
         b0:39:00:49:f6:93:77:a6:52:6d:53:f2:bc:1b:cb:16:0d:eb:
         64:1b:8f:20:2b:da:b0:17:df:9f:b5:b6:d8:fc:f5:2a:d6:6d:
         76:20:0d:5d:ab:81:c7:44:fe:38:99:9e:fa:bd:ff:06:de:54:
         d7:86:fc:37:2f:44:ba:e8:f4:1e:79:5f:45:79:3e:c8:37:71:
         6e:9a:fe:07:0f:8e:72:5f:7d:26:ea:5f:c0:39:c1:76:c3:b6:
         c5:e0:61:03:cd:82:b2:5a:52:c1:29:45:34:0f:a2:8e:da:08:
         78:2b:f8:2e:2e:e9:8a:9a:7e:c6:e0:d6:e0:20:b9:9a:dd:9e:
         42:24:36:7d:e5:4e:24:f9:6e:a7:69:94:48:98:32:9b:0a:6f:
         b6:a2:ed:de:b0:a3:77:ff:31:19:eb:31:48:53:04:ae:c4:d3:
         f1:1b:31:84:02:26:3a:49:c0:85:27:c2:f7:de:7d:2e:81:e5:
         cc:cb:d1:72:e8:65:e6:69:93:92:d2:18:73:c1:ed:d1:38:66:
         18:04:e3:4b:25:12:9d:3c:a9:6c:81:dc:9c:42:f1:68:b6:72:
         ff:08:15:79:ff:1e:ad:74:ca:af:15:64:26:ae:91:3c:f7:1e:
         f5:f3:51:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:31 2026 by rpki-client