Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
File:                     T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft (raw, json)
Hash identifier:          U5Ei80hs9Fos7gBH+wrFwwUx2iOuHUadQXwY81e2JoY=
Subject key identifier:   7E:44:1A:9F:DD:D9:3B:D9:21:34:CB:67:6C:48:72:B2:8E:87:1B:A5
Authority key identifier: 4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A
Certificate issuer:       /CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
Certificate serial:       01A0D7277CE3796BA34CF1DF27264953710C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
Manifest number:          0173
Signing time:             Fri 25 Sep 2026 06:01:24 +0000
Manifest this update:     Fri 25 Sep 2026 06:01:24 +0000
Manifest next update:     Sat 26 Sep 2026 06:01:24 +0000
Files and hashes:         1: T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl (hash: W4Buiy54dhM/sT+TaVhWbgsGUKEG4TFIWStIZ2QTkCw=)
                          2: Yw4KeJZQd4fDI6XgNROc612klZ8.roa (hash: ksqJ6JeWEi7OT1uotIS0TGh2mFny8Jt60myfEmkHw/w=)
                          3: uU9s_hgnyGbwJP-PZge6doa0Dj0.roa (hash: IozYYJrZLQXcxcMBB1MOmIfAjaC0gRCqNhs5hWCQTC4=)
                          4: wZtpSjAJt4SmvvP0YnSsE7TQrWE.roa (hash: 5MBdGENxe3OadAvEH+VeBbaYBKVIJ8gWBwpRTn1w1GM=)
                          5: yclqX8OxwLUeoLNmUdSazDYDII4.roa (hash: Rr2Lk5K8PcJhPAAwTj/NBcChacy1opQ3AXffZPPG+hQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:27:7c:e3:79:6b:a3:4c:f1:df:27:26:49:53:71:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
        Validity
            Not Before: Sep 25 06:01:24 2026 GMT
            Not After : Sep 26 06:01:24 2026 GMT
        Subject: CN=7e441a9fddd93bd92134cb676c4872b28e871ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:47:ac:95:da:6b:e8:a1:b6:e6:84:f1:a0:
                    7b:98:a4:9c:26:ac:da:34:1d:46:19:28:03:da:32:
                    5a:95:0e:16:cf:b6:b0:6b:cf:15:5b:4f:ce:6e:07:
                    a5:4a:f3:ab:ca:8d:d3:0a:a6:a2:bb:10:7b:a1:13:
                    03:ec:8f:52:a9:d8:34:3e:95:6f:5a:44:92:7c:87:
                    5a:53:52:e2:f6:1d:d3:51:b2:db:d9:cd:d5:7d:2a:
                    60:66:a9:4d:c0:1c:1e:e3:35:5d:70:53:3a:0d:1b:
                    47:02:de:f0:01:17:28:a1:1d:0d:2b:03:47:73:5e:
                    ca:a9:d8:9c:98:0f:62:45:95:16:0d:8f:d4:12:c6:
                    9f:41:77:9d:78:6b:d2:7e:de:d4:56:d5:b8:43:61:
                    c8:05:14:a7:92:3c:ac:94:50:e4:f8:ab:61:17:e4:
                    48:0b:a6:e0:e9:42:3d:f6:c1:04:ce:27:9b:65:ed:
                    e0:6e:71:53:bc:27:27:91:ed:b5:3b:c5:bf:0c:59:
                    b5:ec:f7:73:da:68:9d:93:13:48:60:66:10:0e:f1:
                    b8:59:b3:78:17:e5:39:39:fb:f6:2e:74:c5:a8:aa:
                    40:48:d3:8a:86:8e:9b:ed:c7:3d:14:77:a1:82:d2:
                    46:f4:48:48:c4:a4:45:e0:91:e8:34:d0:c4:dc:92:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:44:1A:9F:DD:D9:3B:D9:21:34:CB:67:6C:48:72:B2:8E:87:1B:A5
            X509v3 Authority Key Identifier:
                keyid:4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8a:40:7b:3e:88:cd:51:50:b9:83:76:b9:ad:66:65:e7:60:
         4e:b9:19:b3:fa:cc:9d:81:98:a2:00:7a:a9:ef:41:98:7c:8c:
         a2:7a:ee:16:2b:67:8e:80:a3:35:81:7e:6b:a8:65:2c:14:01:
         d8:37:1d:67:8c:98:95:17:3f:a3:db:7e:ed:23:ed:61:eb:40:
         37:bb:12:de:07:1f:8c:90:75:24:ca:61:4e:5c:5f:72:34:a1:
         e4:bb:dc:ab:2c:fc:d9:10:fb:eb:d0:1a:ad:e6:f4:a7:63:be:
         7a:6f:48:89:33:5c:79:61:2a:c6:a2:9e:51:59:17:3d:cc:26:
         61:19:e9:8b:4c:55:af:17:bf:cf:31:d6:77:58:dc:8a:6d:b1:
         87:26:50:65:ef:e4:ae:2f:3a:71:9c:ca:ce:61:b7:e2:68:00:
         98:36:9d:e9:15:61:f7:88:25:f8:2d:6c:4a:07:27:d7:1e:9c:
         32:cf:ba:61:a6:d2:d2:69:60:c8:12:20:7a:91:a1:1f:08:60:
         3e:47:0c:b3:82:d7:e1:67:f0:ea:40:11:17:2b:79:c4:f1:df:
         54:13:e7:db:5e:d4:e1:4e:8a:6b:0b:a1:7c:79:dc:91:3a:94:
         26:47:6a:6d:b5:d9:35:b6:b8:1b:8d:2c:42:87:85:9f:2c:0c:
         b9:a6:64:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:03:50 2026 by rpki-client