Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File:                     4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier:          S/OcSTFTAJeIB9VpgBwQgyGySHNeFndmqfWJCG6mkfA=
Subject key identifier:   46:50:FC:F5:6E:3A:12:FD:74:90:F1:D5:AB:92:97:F2:16:61:5D:D4
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer:       /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial:       01A0CAB4A6A4191C5E3E1D96E8C79034B3F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number:          10FF
Signing time:             Tue 22 Sep 2026 20:00:31 +0000
Manifest this update:     Tue 22 Sep 2026 20:00:31 +0000
Manifest next update:     Wed 23 Sep 2026 20:00:31 +0000
Files and hashes:         1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: riiuD5/EW9CeTijv+sPlfOUoS+q63+spZODF+wrkjSA=)
                          2: DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa (hash: ie8rWldwV9B67n5/EffGRxDtlu39UUHKQ/tSe/j67xQ=)
                          3: OD1vu1xvYZtuVSOWeWsoiRek5JE.roa (hash: wh893NwS229KIBxcphoahE5rVlzAGosMJTAhq3iAiRg=)
                          4: kpJpjf8DEZUzbeocou67-xPbGzs.roa (hash: 6kfdp9N3WAjBikoQRDTNTZ1g1ptesnrFillaOS+4UCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b4:a6:a4:19:1c:5e:3e:1d:96:e8:c7:90:34:b3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
        Validity
            Not Before: Sep 22 20:00:31 2026 GMT
            Not After : Sep 23 20:00:31 2026 GMT
        Subject: CN=4650fcf56e3a12fd7490f1d5ab9297f216615dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:8c:4f:21:70:49:20:06:88:6e:a3:3e:ad:
                    12:01:06:4c:e6:1d:13:51:2b:d9:43:a7:3c:6c:b5:
                    92:4a:30:f6:6c:9c:d1:a4:30:58:82:51:f9:1d:52:
                    c2:f4:22:b0:2c:c2:4b:9c:52:97:1f:5f:49:a1:3b:
                    55:95:45:35:d9:73:9a:26:cb:80:4f:be:e8:3d:62:
                    bd:26:09:88:41:6a:37:3a:c1:0d:df:68:b9:cb:92:
                    97:4e:46:54:df:89:69:15:a0:78:d7:36:ab:91:aa:
                    c8:36:d4:76:6c:6f:a8:8b:c4:49:40:7a:ce:c9:79:
                    21:ce:58:18:3c:e9:3a:31:cd:4a:18:d5:36:4b:65:
                    c9:d4:d4:d3:0b:24:1d:b0:fe:1e:7a:44:e4:c9:ed:
                    dc:c0:47:ee:50:80:60:e7:8b:d7:0a:a5:f0:ac:10:
                    b9:57:40:ea:18:70:3c:38:7e:c2:95:8b:d6:d9:a1:
                    ac:66:3c:6e:b6:3d:a3:38:04:a5:fc:e7:f5:60:92:
                    a2:b5:10:b6:3e:0e:8e:d7:8b:22:e4:a5:83:6f:69:
                    6f:15:67:27:84:f1:f7:c5:40:66:6a:ce:41:24:2f:
                    f6:12:d6:27:28:e5:51:39:25:d4:59:8f:bf:65:0f:
                    66:36:30:83:f9:72:73:39:bf:a5:3b:51:ca:de:30:
                    2b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:50:FC:F5:6E:3A:12:FD:74:90:F1:D5:AB:92:97:F2:16:61:5D:D4
            X509v3 Authority Key Identifier:
                keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:60:7f:0a:42:e3:b9:fd:8a:6f:7a:b9:ab:ae:43:b9:ba:54:
         ab:23:e6:a3:09:a9:c0:94:b0:5e:f7:dd:63:31:bd:a3:19:39:
         15:f6:f0:c5:28:94:01:5f:0f:f6:4b:f3:f6:39:cf:5e:c8:a4:
         7b:fe:93:16:13:19:a9:32:8d:39:53:79:51:17:47:ca:d7:06:
         5c:5b:e2:bb:6e:04:ff:c0:48:90:da:fd:20:59:17:8d:88:d5:
         91:cb:ff:95:6d:af:7c:9f:f5:8c:17:06:ca:86:29:e4:19:f7:
         7d:15:6f:8b:f9:d6:be:d1:2d:4f:56:bf:25:bb:58:4a:95:a9:
         cb:59:e2:57:b3:bc:96:71:e8:97:94:e8:7f:00:d2:d4:1e:fa:
         1c:44:23:ec:29:57:13:e3:97:3b:5e:24:7e:d1:09:fe:a6:c9:
         60:a2:63:4e:92:a6:c6:39:2f:1d:fe:c3:79:00:80:91:74:b5:
         26:8d:f5:dd:27:fe:2a:4a:78:68:96:3f:26:c9:61:ae:8d:58:
         3c:c5:03:60:9e:d0:a5:44:8a:1e:3d:2a:e8:42:c2:b2:10:84:
         cc:b9:ba:7e:89:54:cd:21:0e:3c:d7:ae:11:ae:16:42:b9:03:
         88:e8:3d:68:72:75:90:50:8c:53:df:f5:c3:38:3b:58:78:00:
         dd:46:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:23:51 2026 by rpki-client