Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File:                     t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier:          5+lO/xJK6wIRIWZzhpARaRxjlGegs9WtBMXqTXAsz+8=
Subject key identifier:   CF:4B:DB:03:43:F9:11:16:50:66:95:F2:6A:37:F3:D7:C8:8E:D9:2C
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer:       /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial:       01A0C632EFB6D91D7DE71C84784C5CD4AE40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number:          09E6
Signing time:             Mon 21 Sep 2026 23:00:21 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:21 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:21 +0000
Files and hashes:         1: 4avV52VadcXyjmFmkPiOZqd4aEo.roa (hash: rACIPz05aOD1m23fMqk7AR2NAoediVEN3H+EA6u4xuE=)
                          2: m9o4a-Sp907mkuh7yKVYLJl1LEA.roa (hash: 6qxzfM0ywaM1roIqQKQwRjB4scmKgnfULeAbobju2pc=)
                          3: p99sKQd64TY87IGdtOWr6iPqp8Y.roa (hash: TOjdieep1rBeaY3tAvDOKKLMjGOfaC+22A+UcO2sOVg=)
                          4: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: NBUZ5lhT4festcvkVmld2ZP7JlqL/IwvkeZHpabM0SU=)
                          5: uxXZ_hKsmnhQRsfJ1EfmQad0ATE.roa (hash: GZswREwDe56hmbMlhE5Azz0F2ZeFdeK1GV3fvvLTRak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:32:ef:b6:d9:1d:7d:e7:1c:84:78:4c:5c:d4:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
        Validity
            Not Before: Sep 21 23:00:21 2026 GMT
            Not After : Sep 22 23:00:21 2026 GMT
        Subject: CN=cf4bdb0343f91116506695f26a37f3d7c88ed92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:bd:3a:25:22:e1:8c:92:d1:6e:83:d9:2d:
                    b9:d8:66:82:ad:e2:7e:23:9c:79:f1:a2:59:53:fb:
                    83:e5:d2:ea:91:a5:a3:86:a5:ad:6d:0c:72:d9:3d:
                    3b:c6:2a:87:aa:1f:7e:ce:ed:e9:d5:2a:5c:1d:6d:
                    e1:2f:a9:92:58:12:c5:2a:e8:06:c0:9c:33:1b:5f:
                    07:9a:63:97:2c:53:7e:16:3b:8d:00:a3:7a:85:c8:
                    cc:55:6c:75:ea:ab:4d:7c:15:95:79:8f:9b:79:4f:
                    6c:39:f0:d4:dc:63:f7:51:df:62:d4:8b:39:08:2a:
                    6d:10:64:8c:ca:c8:5a:7f:0f:d6:f0:c3:83:b0:04:
                    5d:d1:48:55:f3:7b:a7:3d:c1:96:b8:4e:40:51:76:
                    d8:02:b6:3a:0c:9c:03:53:1f:28:e5:c2:b9:9c:51:
                    1f:d4:96:19:f2:08:3e:3d:db:ae:4e:42:83:b1:d4:
                    5a:3e:7f:53:57:71:a6:de:69:ad:a3:25:b4:2c:ba:
                    fe:50:e2:f6:cc:a5:ce:ee:59:96:98:7f:1d:50:c0:
                    32:cb:9f:bd:6a:50:65:7c:70:f9:14:1d:7a:bb:10:
                    a1:1f:5a:94:2e:a2:19:e1:8b:18:56:0b:42:43:29:
                    66:a3:80:3b:13:03:1f:e3:82:ab:22:f2:0b:53:01:
                    3f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4B:DB:03:43:F9:11:16:50:66:95:F2:6A:37:F3:D7:C8:8E:D9:2C
            X509v3 Authority Key Identifier:
                keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2d:54:f3:cb:13:4e:53:ef:67:c6:2c:21:54:4b:c0:0b:8a:
         7b:88:b7:1f:d7:47:aa:aa:9f:86:08:bf:14:bc:66:c7:e4:a0:
         e1:74:f4:a3:31:44:f1:3f:98:ad:76:ea:cc:dd:7b:18:10:97:
         0b:ca:7b:3d:dd:7d:83:d5:60:93:dd:a9:55:8c:68:47:fb:e0:
         81:f6:ba:2d:d8:f6:cc:83:46:62:52:31:6b:c1:eb:9e:4b:88:
         40:74:21:f2:6a:1f:66:bf:de:7f:27:11:cf:85:2e:f2:7c:3b:
         4c:20:e9:44:dd:af:c8:c5:62:b7:3b:67:bf:63:2c:3e:10:c6:
         80:01:a0:25:1f:dd:4e:bd:6d:0b:72:03:a3:d0:e5:90:ce:da:
         75:61:2e:1c:e0:a3:1c:dc:8a:24:29:4c:37:58:77:23:f1:ba:
         ec:49:d6:72:de:89:13:b5:f2:ad:91:9a:43:ac:60:d9:7a:eb:
         e2:0e:2e:6d:0c:f7:da:8f:48:e6:0b:c7:78:10:68:ea:17:dd:
         48:21:6b:f6:e9:54:f1:a0:a6:3d:58:8b:19:77:67:e1:2e:22:
         57:73:04:3e:3b:21:7c:a2:61:06:f1:fe:8a:a4:c4:b3:5f:66:
         e1:30:91:a9:fe:70:44:bd:a0:4c:54:d5:c1:1d:d2:40:3d:2d:
         df:7e:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:57:35 2026 by rpki-client