Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File:                     t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier:          JzGv0zHD2J1flC/dZeuC4FoVjN+ets8NuNBXBfaKYcM=
Subject key identifier:   30:81:89:AB:3B:19:44:A2:6F:69:5F:F0:9D:6F:EC:AF:E4:D9:2E:24
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer:       /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial:       01A0C3D73DD2A96F7312546F11F5311CEE4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number:          0314
Signing time:             Mon 21 Sep 2026 12:00:58 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:58 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:58 +0000
Files and hashes:         1: 3zIrc0aWYxX9dKMnCfOMwQPa5t8.asa (hash: cnCGcJrQuR05fmoh1KvgU/rA+KkWRXV4v1npDlI9OnU=)
                          2: Zs7v1NDx63hWaP0rqC9JgN4viuQ.roa (hash: hVIg73QWwWuqnjCLMmbKJMff3qM/nFL/BxoYDSJaxBw=)
                          3: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: fIo4veKP2gBPJlOjvjSPsj4mcn7WTBaXHheW2WNozxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d7:3d:d2:a9:6f:73:12:54:6f:11:f5:31:1c:ee:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
        Validity
            Not Before: Sep 21 12:00:58 2026 GMT
            Not After : Sep 22 12:00:58 2026 GMT
        Subject: CN=308189ab3b1944a26f695ff09d6fecafe4d92e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:56:44:16:3e:70:b7:c3:82:3e:8f:3f:2e:
                    ae:19:c6:bf:50:90:82:28:8f:d0:3b:dc:52:bd:15:
                    6e:e6:3c:76:f1:c2:ad:e9:ee:ae:79:94:58:68:17:
                    56:3f:b7:97:11:7a:8d:60:52:f6:2d:0e:cc:92:5b:
                    65:d7:76:32:ab:76:0f:82:e3:ad:24:64:b3:1a:37:
                    d1:5a:9e:a3:81:74:7e:bd:9f:82:1a:ce:65:8e:3d:
                    8b:fb:08:78:cf:fa:f7:33:4f:1d:41:a0:53:7b:e3:
                    8b:e0:42:2d:2f:f7:9f:da:83:c5:c6:c6:1c:e1:2f:
                    54:ce:d2:f2:31:64:f4:85:03:87:f5:f1:c5:90:80:
                    28:c0:b2:d1:e7:20:3f:98:67:71:72:bc:c9:33:9c:
                    e5:72:fc:f8:f3:83:fd:53:cb:d4:e7:b9:c1:fd:1a:
                    25:28:01:0f:72:e5:2e:7d:9c:f7:3e:3a:1e:b4:51:
                    ec:2b:6b:87:72:56:87:6a:da:78:1a:1e:a3:08:db:
                    75:21:f4:1c:4e:58:e5:07:e1:59:b5:ae:b5:bf:7d:
                    01:47:7d:de:59:38:53:a4:99:42:2a:62:ce:f3:99:
                    66:c2:88:06:1c:10:48:93:ec:be:72:2c:77:b3:6e:
                    d4:c5:90:25:a8:b8:36:b9:ed:0f:83:88:cb:a0:97:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:81:89:AB:3B:19:44:A2:6F:69:5F:F0:9D:6F:EC:AF:E4:D9:2E:24
            X509v3 Authority Key Identifier:
                keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a8:39:fa:e6:ce:ad:38:be:68:7f:c1:62:fa:92:12:90:57:
         66:55:47:8f:5d:7b:9d:bf:d1:88:c8:c6:f8:8a:28:9d:9a:04:
         0e:98:6c:ad:81:2d:c3:da:3a:5b:fe:b5:a5:5f:b6:d3:27:12:
         63:d4:b9:df:40:b8:5a:c0:ca:6c:4a:fa:c4:e5:bd:99:01:bc:
         4d:d2:e2:d3:b3:f1:bc:85:74:98:3c:58:0e:57:16:2c:8d:06:
         f5:4a:4b:98:b0:08:a7:ec:b0:ea:99:c4:7b:b4:f3:26:58:b2:
         4c:e8:51:51:7a:30:80:6d:e9:84:ba:fa:5f:2a:48:ad:48:33:
         01:fb:43:04:e8:48:dc:b9:34:59:65:cb:75:d1:3a:2e:3a:30:
         c9:45:d6:b5:ff:6e:f9:1f:8f:2a:63:05:a3:23:a6:3b:47:12:
         73:bc:f4:28:a8:c5:bf:02:be:43:76:2e:5f:89:00:97:d2:ee:
         79:9c:dd:db:ef:bc:87:23:17:42:b6:09:1b:50:34:6a:8c:c7:
         02:53:d5:b6:6a:41:73:67:90:ae:70:92:42:f7:ce:a8:20:df:
         34:8a:ef:65:a9:d5:d1:c2:2c:32:f6:a3:e7:4f:a6:d2:b8:8a:
         e2:11:43:47:b4:f8:40:6a:34:6a:42:cf:78:c0:04:b3:36:1c:
         9f:7d:63:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:37:33 2026 by rpki-client