Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File:                     t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier:          0u/3ABnSlKoBU1o86uQO5vM+qTZxCnjr659Sydh2SXo=
Subject key identifier:   F6:F7:1B:82:8A:BD:29:97:2B:81:10:08:88:5F:EA:9B:4C:CA:AB:F7
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer:       /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial:       01A0C66B4AF8E41558D6AE00E909352A0268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number:          1582
Signing time:             Tue 22 Sep 2026 00:01:55 +0000
Manifest this update:     Tue 22 Sep 2026 00:01:55 +0000
Manifest next update:     Wed 23 Sep 2026 00:01:55 +0000
Files and hashes:         1: 7yXVbkDIped5AlVJWBLhNwB93qU.roa (hash: U+X2A4hl4OztYccmnndX5mgP9l1pKYkV+aIE4TVtE9o=)
                          2: Lac9mI8_0GODDuYUWUFmqBSt9mc.roa (hash: CCm67OvIIp58ZZddyH8lbNoIHH7qksW59/3/CScmsJ8=)
                          3: g4mflD0Y4dFeWIYXrHeIdFF1Tzk.roa (hash: LWoE8PLWl9I6/87QZF5e3VTAa9OFMyf8LK0mAIwQhYU=)
                          4: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: GTzd22Q+Xm9bdrW6mV6iT1IlJAvPvtqeTjn9q5hwvjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6b:4a:f8:e4:15:58:d6:ae:00:e9:09:35:2a:02:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
        Validity
            Not Before: Sep 22 00:01:55 2026 GMT
            Not After : Sep 23 00:01:55 2026 GMT
        Subject: CN=f6f71b828abd29972b811008885fea9b4ccaabf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:bc:6e:df:e9:9b:16:17:7b:78:5a:f4:86:
                    d1:9c:42:fd:5c:70:76:24:7d:30:e3:8b:52:05:71:
                    49:55:58:01:2f:b1:f6:83:f1:cc:70:aa:ae:bd:82:
                    61:3d:b4:e5:79:c2:e5:cc:45:fb:98:a7:0d:ea:62:
                    34:27:53:85:4c:37:c2:0b:df:55:91:96:87:d0:dd:
                    e0:85:58:36:d5:65:74:b8:cf:08:6c:69:2c:98:46:
                    6e:20:3b:54:7a:6d:ff:62:c7:f5:2e:0c:55:5d:db:
                    b6:41:df:9d:fd:9b:e3:85:42:3f:4e:e3:b5:35:68:
                    ee:f5:ce:18:6b:00:38:a7:1f:df:69:c1:24:0d:5c:
                    b0:a2:54:c5:d1:f9:9b:8a:ed:2e:18:3f:4f:2d:e0:
                    31:90:49:02:78:ab:a1:63:6c:53:67:0e:8a:69:78:
                    91:80:df:68:1d:29:4f:a4:88:c2:52:3e:97:57:70:
                    00:4c:61:ae:4f:7f:2c:0d:a5:b5:f1:f4:f0:5e:e6:
                    8e:e4:69:f1:3d:20:fe:a3:de:23:7d:45:c0:48:85:
                    d8:e1:50:e7:68:7c:e9:89:52:13:d5:28:03:a9:c0:
                    8d:78:4f:82:e8:6d:f7:db:04:60:47:44:65:45:48:
                    49:51:fa:47:ba:cf:8b:43:2e:13:b5:7a:46:8c:a7:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F7:1B:82:8A:BD:29:97:2B:81:10:08:88:5F:EA:9B:4C:CA:AB:F7
            X509v3 Authority Key Identifier:
                keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:92:6c:eb:00:09:fb:e0:ca:10:cd:52:12:e8:4c:14:2a:13:
         08:70:93:b5:17:eb:f8:6d:df:65:d5:7e:07:15:1f:79:0e:4e:
         04:54:2b:b3:e8:d2:88:be:81:4d:5d:9d:47:0c:3f:6b:32:0c:
         ef:4e:d6:90:74:79:b5:a6:e7:9e:5c:d0:90:28:c9:9d:b4:27:
         8a:9a:3f:9f:a5:ec:53:e9:21:93:ed:ac:d1:57:f3:df:8e:9c:
         58:36:2a:63:4c:26:87:4c:e7:76:30:ee:d2:b7:75:ee:e3:5e:
         81:9c:f8:c4:4a:10:11:2b:46:d1:d6:0b:33:47:c6:fe:a6:97:
         aa:5e:9b:a8:18:57:2d:7b:7d:67:f7:b6:b4:68:9c:75:14:ea:
         51:0d:ee:42:1a:76:ee:a0:6a:81:74:3f:d4:73:14:66:f5:20:
         16:54:bf:be:9d:15:7a:11:69:c8:72:0b:bc:6b:a4:f4:2c:fa:
         59:14:2b:8f:05:2b:2b:de:48:cf:29:68:08:f4:d2:c4:ae:86:
         fe:51:ea:47:da:5b:59:69:d4:05:7a:29:fa:14:9f:15:49:2c:
         b5:bc:e9:2f:c1:89:3b:0e:21:d2:9e:3f:44:8e:41:6d:e6:ca:
         5b:b8:37:29:8d:27:eb:e7:68:3a:4c:86:cf:dd:d2:56:3e:78:
         30:2e:7c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:50:32 2026 by rpki-client