Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          EJRzjnev5ud/v1UKPVBFmBFKAiYmDomF6VScxPj1sQg=
Subject key identifier:   3F:81:A8:B0:B8:16:30:45:91:BB:BA:55:17:28:BF:E5:7C:C8:70:74
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       01A06CB8DD265B5182517088045E7587B096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          1AE5
Signing time:             Fri 04 Sep 2026 14:00:49 +0000
Manifest this update:     Fri 04 Sep 2026 14:00:49 +0000
Manifest next update:     Sat 05 Sep 2026 14:00:49 +0000
Files and hashes:         1: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=)
                          2: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=)
                          3: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=)
                          4: 7ZTyX9adnTNDDr2DkH9w3SeIE7Q.roa (hash: TDggRWtskV5FNrfGL200t0vlFEUm+QOeNFcEHwtHFss=)
                          5: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=)
                          6: FuaYYjgBfEQcCzdt3IfIOZHBF18.roa (hash: lZIUFdAbzhx1VS24I+2a5RfR2Jz8EjNumHCTBfayC3U=)
                          7: Hov6U5ZVW8cdcNKCk5lUHb3Lnkw.roa (hash: VRQ7H7vvIOcoLzyjhrMXqxjXmp38gz2oT9+Kuynel2c=)
                          8: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (hash: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo=)
                          9: MpedeZnqqfWdHaUYwzO5l8FT3pM.roa (hash: 75NfuiTmUQjPMCKkuZLw9T7cDXANU8tWdyz9AlGaZ6s=)
                          10: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=)
                          11: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=)
                          12: OjY3C6L-EuPc2t0Qn-e-3bjWy-0.roa (hash: OthyvAnziDLpR9g+pkOT+1ZzWC7VC/seTw30st0/H/s=)
                          13: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: iVY42R/HAAwjmgOPBEAVAW0S44RGOTpyokVqsa4sqEQ=)
                          14: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=)
                          15: fLVVBwDC46veW27cWiPxu5tyA1A.roa (hash: T3dnSRkRGypGAUR6U14EppL7+QozNWVyPOVFXCP7qfU=)
                          16: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (hash: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8=)
                          17: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=)
                          18: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=)
                          19: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=)
                          20: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=)
                          21: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=)
                          22: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=)
                          23: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6c:b8:dd:26:5b:51:82:51:70:88:04:5e:75:87:b0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Sep  4 14:00:49 2026 GMT
            Not After : Sep  5 14:00:49 2026 GMT
        Subject: CN=3f81a8b0b816304591bbba551728bfe57cc87074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:61:d2:04:79:a5:d7:25:68:19:71:9c:53:
                    e2:40:62:9d:41:85:4c:1b:68:df:d5:ef:20:69:ce:
                    63:2d:ec:ff:9e:c9:0d:c5:1d:97:34:6e:ee:16:db:
                    01:92:73:93:e3:ca:a8:43:be:d1:26:fb:bc:9a:23:
                    2d:50:1a:ac:eb:e0:5a:0c:27:9d:03:87:c5:8b:2f:
                    19:a5:4f:83:a6:18:e5:d8:b8:f5:8a:8e:c4:58:a8:
                    00:eb:2d:7f:a6:59:e2:56:4e:a0:a1:d5:6c:57:57:
                    6c:71:24:7e:43:b0:24:6c:11:f3:77:c8:da:38:67:
                    8d:01:ee:81:2c:94:cf:00:21:73:20:8e:bf:7b:80:
                    50:f4:2e:b9:f5:28:5b:08:69:76:fa:bb:70:aa:6a:
                    27:59:53:f9:ca:77:59:e1:a4:aa:12:a4:d6:02:95:
                    60:20:36:a2:bb:10:bd:bd:2e:cc:e0:08:35:77:65:
                    4a:d3:0e:92:bd:86:29:bd:55:da:78:cb:ef:c2:13:
                    4e:91:6f:c8:67:3a:05:aa:03:6b:01:72:f5:51:d9:
                    71:55:a7:96:f7:d2:34:2d:f3:4f:66:5a:7c:e1:f8:
                    2e:4e:91:25:fe:d3:c3:c8:e3:1d:d8:d3:b7:6e:ff:
                    d1:e2:86:45:cc:90:3e:3a:bf:1b:9b:7e:25:42:75:
                    4b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:81:A8:B0:B8:16:30:45:91:BB:BA:55:17:28:BF:E5:7C:C8:70:74
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a7:e5:e4:2b:6d:d8:ec:db:43:cf:9e:e8:0d:9d:b6:c4:98:
         b0:b1:b0:18:4b:02:b6:61:23:f8:48:3b:16:af:d2:ab:b9:88:
         03:05:4a:14:b8:cf:f0:88:3b:46:2e:86:57:71:9e:15:6f:2f:
         47:e4:f2:31:e1:5f:b6:3e:d4:9a:81:d8:dd:45:6b:60:df:8a:
         c2:ac:be:a4:97:96:20:ce:f2:32:76:8d:19:32:a5:6b:67:0c:
         e4:95:b3:fa:2c:50:84:3e:e2:a9:c3:15:53:61:fc:0c:9d:c1:
         60:6a:85:19:b2:09:e9:9d:16:e5:c6:db:94:f1:46:df:59:fa:
         45:62:62:3c:d3:1b:81:15:f3:a6:3d:31:e1:89:c2:41:5b:30:
         92:ee:5f:fd:58:fc:54:70:ef:11:80:2f:1e:41:a1:ab:5b:c8:
         cc:e4:10:1b:b8:9a:75:80:31:02:aa:37:97:a4:33:00:c4:91:
         44:bf:1b:11:e0:33:f3:5d:f0:7e:89:d4:dd:37:9e:b0:c5:85:
         aa:95:db:97:df:51:b4:e9:4e:53:4e:6a:3e:cd:94:90:5f:aa:
         c6:40:a9:18:4c:ed:8c:05:c4:61:0b:d1:f4:83:cc:e7:c9:13:
         a0:cb:3e:9e:08:8f:34:be:a4:ba:87:4e:19:02:78:17:10:31:
         bb:63:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:57:12 2026 by rpki-client