Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
File:                     yQOCdRxNpmg2pwsS5vX59gkDcJc.mft (raw, json)
Hash identifier:          aVYc0LP8JYvBJgS6i6gu0HoHfDY94Y1KL1NQ0HyWqAA=
Subject key identifier:   B0:8E:C7:C2:70:D7:8B:71:AE:E5:0F:68:F3:15:05:C3:FC:0B:44:D2
Authority key identifier: C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
Certificate issuer:       /CN=c90382751c4da66836a70b12e6f5f9f609037097
Certificate serial:       01A0CE24353D5E58C6179CE68E0AE8014BB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 12:01:14 +0000
Manifest this update:     Wed 23 Sep 2026 12:01:14 +0000
Manifest next update:     Thu 24 Sep 2026 12:01:14 +0000
Files and hashes:         1: B3DS4HJGG4HWOr7o9IT8qpQjVZI.roa (hash: DzSLMEFuOBEqMQodLY/kdl1XgZrJLKWCvwvjcgrKpKU=)
                          2: Peen3CtettZzC0PJ5pu05ABu0FY.roa (hash: 5jkaTX/MH1OVfcjWCZ4E7LeORQN6ZsvE/s7yqGM/joo=)
                          3: bi31Q0XO8XBmiMif1MfQZXUKbN8.roa (hash: MAQCwFvg1XrLXK/b8xx9RuAHmqdb0hXt9uketFPnkuo=)
                          4: dpx3E6wicTHuvW_Jj3Hg_iG1Xso.roa (hash: 0sKuxPi/M8NOaenb/QR3bdMnX+yJukAyGT+fktwdqXQ=)
                          5: yQOCdRxNpmg2pwsS5vX59gkDcJc.crl (hash: e8CGAlkG83uLqh6+8GBmZjtRiHFBGKM4Zc5WiC20b/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:24:35:3d:5e:58:c6:17:9c:e6:8e:0a:e8:01:4b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c90382751c4da66836a70b12e6f5f9f609037097
        Validity
            Not Before: Sep 23 12:01:14 2026 GMT
            Not After : Sep 24 12:01:14 2026 GMT
        Subject: CN=b08ec7c270d78b71aee50f68f31505c3fc0b44d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:d1:11:1a:02:4c:07:05:16:0f:37:5c:b1:
                    0d:a8:27:19:f2:25:2a:c8:fc:78:f9:82:cb:39:cc:
                    8a:95:87:27:ae:35:ef:c1:a0:11:9a:28:00:79:5c:
                    3b:8e:84:2c:8b:6f:3b:c7:fe:62:01:3f:37:64:63:
                    c4:db:be:1c:56:a1:c9:56:d4:17:e9:67:15:3f:33:
                    4a:2d:13:41:16:34:45:57:b1:54:7a:7b:4b:ba:a1:
                    ea:ee:6d:7a:ca:06:09:6c:0b:35:12:8e:35:16:d5:
                    00:1a:56:b4:b1:14:cc:57:48:e2:57:48:35:68:9e:
                    16:65:6f:7e:14:26:6b:50:be:d7:9c:18:3a:2d:30:
                    d6:53:8f:57:09:60:ba:78:d5:d7:e3:db:80:11:75:
                    1c:09:02:d0:2b:c2:15:30:b4:ac:fb:72:05:9a:2b:
                    de:8c:00:a8:15:62:d7:a2:70:9f:ea:a4:18:ed:e9:
                    89:92:3d:de:6d:19:62:5e:7e:3d:fa:7d:99:5d:d8:
                    8f:9d:b6:45:6b:33:35:1e:9e:e4:d6:95:af:8f:99:
                    1e:85:36:4a:ac:aa:41:bc:1f:7a:70:42:81:9d:8c:
                    47:63:8d:f8:86:d8:8a:e5:f8:65:db:43:da:f9:e2:
                    44:ce:5a:4f:5f:a1:88:9c:b7:3e:a3:99:d9:f5:52:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8E:C7:C2:70:D7:8B:71:AE:E5:0F:68:F3:15:05:C3:FC:0B:44:D2
            X509v3 Authority Key Identifier:
                keyid:C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:15:f8:db:73:60:02:68:14:e4:6b:ea:32:8f:80:92:5c:72:
         c6:6f:43:46:90:f1:0b:14:1b:db:37:bc:ae:08:c5:2a:ad:0e:
         7a:b2:04:54:c3:c0:a7:d7:53:65:51:3e:8d:78:a3:5a:7e:e8:
         72:9b:56:53:90:42:36:3b:86:92:ac:b0:63:8c:a3:98:19:96:
         45:28:67:c9:f8:d8:ab:06:d8:0b:46:4b:33:02:12:b8:02:a2:
         63:e7:eb:e5:cf:44:56:21:8a:dd:21:12:a4:8f:1e:f7:bb:63:
         54:0a:97:5f:db:17:21:7b:d7:d1:a1:cc:f3:6d:fa:ce:3b:8f:
         7f:48:7b:f1:f5:bf:f0:a5:56:8f:02:9f:4b:34:b4:4b:e4:f0:
         83:82:03:d6:ca:30:17:43:64:38:7f:f0:da:10:0b:47:e5:23:
         2a:63:98:73:51:40:1b:99:43:2a:a2:05:d0:75:6f:18:93:53:
         74:9c:e2:3b:ef:70:7e:4b:3c:06:6a:b9:be:4f:ff:17:b3:e5:
         4b:42:36:d2:06:a1:60:18:35:58:59:d2:e7:71:c1:35:20:dd:
         40:74:8f:b5:e4:14:42:eb:d7:52:a9:fc:07:d6:66:d4:cd:0f:
         13:37:67:5b:6d:a7:45:16:5f:f0:28:88:da:95:21:4e:4b:65:
         22:78:a7:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOJDU9XljGF5zmjgroAUuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MDM4Mjc1MWM0ZGE2NjgzNmE3MGIxMmU2ZjVmOWY2MDkw
MzcwOTcwHhcNMjYwOTIzMTIwMTE0WhcNMjYwOTI0MTIwMTE0WjAzMTEwLwYDVQQD
EyhiMDhlYzdjMjcwZDc4YjcxYWVlNTBmNjhmMzE1MDVjM2ZjMGI0NGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDrRERoCTAcFFg83XLENqCcZ8iUq
yPx4+YLLOcyKlYcnrjXvwaARmigAeVw7joQsi287x/5iAT83ZGPE274cVqHJVtQX
6WcVPzNKLRNBFjRFV7FUentLuqHq7m16ygYJbAs1Eo41FtUAGla0sRTMV0jiV0g1
aJ4WZW9+FCZrUL7XnBg6LTDWU49XCWC6eNXX49uAEXUcCQLQK8IVMLSs+3IFmive
jACoFWLXonCf6qQY7emJkj3ebRliXn49+n2ZXdiPnbZFazM1Hp7k1pWvj5kehTZK
rKpBvB96cEKBnYxHY434htiK5fhl20Pa+eJEzlpPX6GInLc+o5nZ9VJqIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCOx8Jw14txruUPaPMVBcP8C0TSMB8GA1UdIwQY
MBaAFMkDgnUcTaZoNqcLEub1+fYJA3CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVFPQ2RSeE5wbWcycHdzUzV2WDU5Z2tEY0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt
NDA2MGU5ZWVlYjllLzEveVFPQ2RSeE5wbWcycHdzUzV2WDU5Z2tEY0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll
LzEveVFPQ2RSeE5wbWcycHdzUzV2WDU5Z2tEY0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRX423Ng
AmgU5GvqMo+Aklxyxm9DRpDxCxQb2ze8rgjFKq0OerIEVMPAp9dTZVE+jXijWn7o
cptWU5BCNjuGkqywY4yjmBmWRShnyfjYqwbYC0ZLMwISuAKiY+fr5c9EViGK3SES
pI8e97tjVAqXX9sXIXvX0aHM8236zjuPf0h78fW/8KVWjwKfSzS0S+Twg4ID1sow
F0NkOH/w2hALR+UjKmOYc1FAG5lDKqIF0HVvGJNTdJziO+9wfks8Bmq5vk//F7Pl
S0I20gahYBg1WFnS53HBNSDdQHSPteQUQuvXUqn8B9Zm1M0PEzdnW22nRRZf8CiI
2pUhTktlInin8Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:53:42 2026 by rpki-client