Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File:                     t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier:          V6lH/Q2xjizxx/R2IyszxRzcZdykJRAjdeLyjCTRjS8=
Subject key identifier:   7A:37:B2:35:B9:DA:37:C2:C9:39:07:B1:65:EA:2D:13:8B:92:92:C8
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer:       /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial:       019DA4C1738094D3A8E3B343EFF2B0B44AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number:          0847
Signing time:             Sun 19 Apr 2026 08:00:34 +0000
Manifest this update:     Sun 19 Apr 2026 08:00:34 +0000
Manifest next update:     Mon 20 Apr 2026 08:00:34 +0000
Files and hashes:         1: 4avV52VadcXyjmFmkPiOZqd4aEo.roa (hash: rACIPz05aOD1m23fMqk7AR2NAoediVEN3H+EA6u4xuE=)
                          2: m9o4a-Sp907mkuh7yKVYLJl1LEA.roa (hash: 6qxzfM0ywaM1roIqQKQwRjB4scmKgnfULeAbobju2pc=)
                          3: p99sKQd64TY87IGdtOWr6iPqp8Y.roa (hash: TOjdieep1rBeaY3tAvDOKKLMjGOfaC+22A+UcO2sOVg=)
                          4: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: +WEIJMJBqCEEmT7eTY/JuFCvRwg3W6Lc3UWv46er3do=)
                          5: uxXZ_hKsmnhQRsfJ1EfmQad0ATE.roa (hash: GZswREwDe56hmbMlhE5Azz0F2ZeFdeK1GV3fvvLTRak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:c1:73:80:94:d3:a8:e3:b3:43:ef:f2:b0:b4:4a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
        Validity
            Not Before: Apr 19 08:00:34 2026 GMT
            Not After : Apr 20 08:00:34 2026 GMT
        Subject: CN=7a37b235b9da37c2c93907b165ea2d138b9292c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:e2:a1:ae:bd:32:cb:95:e3:1e:49:1f:dd:
                    f7:0d:34:35:79:69:79:d5:11:74:b4:1e:82:db:df:
                    ae:df:a2:cf:99:af:99:05:8d:76:ff:e8:e8:11:a4:
                    f1:9d:0e:40:74:26:c7:78:71:f5:a2:84:43:da:72:
                    56:2e:95:ee:9b:9e:00:1a:a6:cc:95:1f:bd:ae:a9:
                    c7:57:60:dc:b9:63:19:85:c8:c7:40:95:96:2d:70:
                    34:28:a2:2c:a6:11:31:bc:69:bf:3d:0f:9a:71:fc:
                    7c:7c:9c:cf:8e:62:86:ce:3e:19:3b:70:ff:f5:b1:
                    9b:34:ef:fa:6a:10:9a:a4:f3:22:51:6b:06:f4:53:
                    ed:d5:d7:6c:97:bd:03:60:04:a7:bf:5d:a0:0e:3b:
                    9b:90:d5:b7:a9:82:84:ae:ce:ca:50:9b:c8:75:15:
                    bc:22:a6:14:e9:bc:0d:33:2c:ce:d4:aa:80:46:9f:
                    70:aa:3a:f3:c4:6d:8a:74:6b:70:3e:6c:db:d0:f4:
                    a6:da:76:8d:4c:e5:1d:d1:7b:fc:cc:ba:28:95:80:
                    10:38:2f:d9:e1:4f:ff:64:57:aa:6b:57:57:bb:06:
                    91:c5:32:34:7f:84:f1:0f:58:9e:9c:4e:a5:dd:a7:
                    f3:fe:27:d6:87:71:0d:62:a3:15:23:b9:d4:13:8f:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:37:B2:35:B9:DA:37:C2:C9:39:07:B1:65:EA:2D:13:8B:92:92:C8
            X509v3 Authority Key Identifier:
                keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2c:05:18:76:3e:a8:fa:0b:19:36:24:da:ec:c9:25:30:0d:
         43:7b:27:71:34:5c:2d:3d:91:ff:0c:7b:dd:ea:37:27:9a:ae:
         10:2c:45:0d:77:a6:89:3a:88:bc:8d:4b:19:f9:fa:eb:81:3c:
         bd:b0:34:f7:cd:19:d5:56:9f:e5:d0:ec:5c:fb:b8:95:b7:05:
         39:53:a7:26:3a:b2:01:ac:93:27:a1:88:fe:bb:a5:77:96:17:
         d2:ff:ba:96:ce:92:35:34:8e:bb:e0:af:e4:63:e2:e8:e5:fc:
         0c:21:bd:5a:71:fc:7f:32:6f:1f:c2:a0:59:64:b0:f1:4f:b9:
         56:47:75:aa:d8:78:10:d5:b9:86:87:5d:bf:9b:2a:98:6d:8f:
         d3:ab:c1:f5:2f:08:8d:7d:d2:2d:d4:e4:33:da:df:e1:a3:f3:
         21:a7:22:2c:24:2f:14:b7:68:db:0e:0f:b7:16:e9:51:ac:97:
         c6:15:5e:7e:f9:a8:25:63:f4:58:5c:11:fe:55:7f:18:99:4b:
         2c:2d:d9:d8:af:28:6b:b7:ee:75:fa:ea:34:9c:09:79:e6:7d:
         a5:1e:0c:86:41:e1:df:25:70:21:a8:fd:7e:b5:6c:cc:41:bf:
         ba:af:d7:81:63:11:98:6d:82:98:53:b0:9e:8b:76:99:b8:cd:
         4f:98:e8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:51:16 2026 by rpki-client