Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File:                     t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier:          BfjffRWio3G4oX08OjCWFaQSWIlqKThIRnUiv8DMiYU=
Subject key identifier:   7C:8B:52:DC:C7:6B:EA:43:9B:4F:D8:CF:7F:A7:F9:5A:E9:46:BD:06
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer:       /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial:       01A0D048DDE64D37ABF288CA89F64A17A0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number:          1720
Signing time:             Wed 23 Sep 2026 22:00:31 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:31 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:31 +0000
Files and hashes:         1: 2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa (hash: VpwFMCxf02N3s6qbKcrB7OwUNutAGhYjp7y72GSVaW4=)
                          2: fZqDSJnUbHG62IvLERx4tiEWKgg.roa (hash: GDZnevYXZ2UVLkiVPlwZRqNZ2Bo/evXbLjj481Slbr4=)
                          3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: KO0gVcn+/r+G10ch8TPdIpGeajLEXrk9i7LFDQhCppw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:48:dd:e6:4d:37:ab:f2:88:ca:89:f6:4a:17:a0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
        Validity
            Not Before: Sep 23 22:00:31 2026 GMT
            Not After : Sep 24 22:00:31 2026 GMT
        Subject: CN=7c8b52dcc76bea439b4fd8cf7fa7f95ae946bd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a9:9d:1a:f0:d6:94:df:76:c0:9e:34:62:cf:
                    1c:67:77:16:83:49:1e:04:f7:33:bd:55:ee:5a:83:
                    de:07:bc:70:06:a6:8d:d1:2a:80:12:6c:dc:4f:8a:
                    3f:6c:09:06:57:e7:db:c6:0a:3e:b0:de:00:e4:8e:
                    a7:00:61:e2:d2:fd:48:55:5b:22:57:3f:a3:41:9a:
                    9a:1c:65:3c:4a:59:f0:23:f0:cf:1c:14:ae:dd:83:
                    e7:ae:2f:14:b8:4b:c8:c4:eb:66:b3:27:9f:5b:5e:
                    51:a2:44:05:79:2a:89:cf:ce:ba:be:a7:5f:96:8e:
                    73:a9:88:7c:ec:65:48:2a:54:5a:22:5d:08:26:e6:
                    06:d3:b1:37:6e:f9:ef:93:91:e3:2b:e2:c7:a7:ee:
                    96:e0:99:ac:97:b6:2a:d2:cc:7d:59:ff:d7:a5:18:
                    12:f4:68:37:ee:1e:ff:92:25:37:53:e6:9b:06:9d:
                    d1:26:60:03:15:a4:57:7b:c6:af:10:66:10:3b:e2:
                    3c:14:86:de:07:5a:26:5e:ff:03:0b:99:a5:b6:12:
                    a2:d7:22:e8:71:38:e1:c4:8c:ac:f2:18:b1:d9:61:
                    ee:49:02:8b:32:01:3e:5f:60:9e:ca:2d:e1:b1:8f:
                    d1:98:7b:ed:99:1f:d4:31:f4:99:b2:88:2d:f5:24:
                    a0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8B:52:DC:C7:6B:EA:43:9B:4F:D8:CF:7F:A7:F9:5A:E9:46:BD:06
            X509v3 Authority Key Identifier:
                keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:fa:e5:59:86:11:d4:08:a5:5f:19:e9:b5:84:6e:80:5c:61:
         d0:13:8f:40:89:ba:70:5f:b3:ba:f8:be:07:63:7d:67:0a:2e:
         0f:05:32:8b:f0:91:40:e4:f2:ee:96:4c:b7:24:65:a0:65:ae:
         d1:d1:35:9a:34:ee:04:f4:6b:76:49:6c:da:09:3e:ed:fc:1a:
         83:77:d2:bb:8a:02:f0:d3:31:5a:20:d3:dc:90:5f:cb:e0:8f:
         4e:5e:3a:5c:f2:45:ae:a8:96:97:86:bf:a4:5b:1c:92:62:6f:
         13:0a:50:63:5a:07:fd:0a:4a:39:26:a7:2f:cf:0a:b7:66:71:
         47:13:cd:62:b7:08:c1:2c:db:b7:48:e4:a7:08:ca:e4:ce:9d:
         a6:36:89:a1:14:86:64:91:93:f5:4c:a9:9c:85:38:14:0e:fe:
         88:93:de:28:58:a9:63:e4:d9:52:77:57:99:87:7f:45:3a:df:
         1c:da:10:1d:b3:99:6a:ed:c2:84:09:80:38:91:13:02:0f:57:
         78:e2:52:f6:32:01:1c:5a:35:46:82:3c:2b:c7:40:da:11:c4:
         eb:08:a1:8c:da:06:ae:a7:ef:d0:4a:91:60:16:81:17:b6:28:
         46:bc:1f:d3:f0:03:ee:12:9d:4c:75:34:7c:53:d1:b3:25:f9:
         fb:1f:64:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:46:26 2026 by rpki-client