Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File:                     v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier:          i59ZkH5IZReNorky5n26vC4N/wQFPw/XsK1d9vfqxfk=
Subject key identifier:   19:7B:A8:DC:1A:CE:34:C3:81:20:F4:AC:C0:EE:DF:A6:AF:8B:22:8D
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer:       /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial:       01A0D56FB7B4B4D855BA7927A94B53BE7AD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number:          0648
Signing time:             Thu 24 Sep 2026 22:01:03 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:03 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:03 +0000
Files and hashes:         1: 3RsLnrTTWTLPQLyhD4gSJN-DaTI.roa (hash: P//UvOt3ZaB3uh3PmS1jjSG8dYP/ZrhMVhcmC8uqPak=)
                          2: Qsmck_Q1LRjc9BFJ4PRK8hkx8lE.roa (hash: tFHy5YIAzvBM7ghe1eYeoeXBK1W4SJOIgpN7n9hkr8Q=)
                          3: XbyXTy2eUaONfFWw8BChIBWa36M.roa (hash: xn0X7nDb94H6uKDvSt+XEo1r5ooPCWsDBnVyrR9GWjM=)
                          4: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: kR9fLkoqht/X82x/56EeHen5NfpJiX24VXaKA73to1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:6f:b7:b4:b4:d8:55:ba:79:27:a9:4b:53:be:7a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
        Validity
            Not Before: Sep 24 22:01:03 2026 GMT
            Not After : Sep 25 22:01:03 2026 GMT
        Subject: CN=197ba8dc1ace34c38120f4acc0eedfa6af8b228d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:08:6e:d1:c1:d2:52:31:57:f7:0e:db:c9:d7:
                    ac:ce:a1:f2:10:e6:86:6b:b4:73:3c:8e:24:7e:5b:
                    ef:6e:c9:01:3c:8c:96:16:f1:cc:78:f4:4b:53:28:
                    c8:3b:de:a6:ef:3c:00:80:60:f6:01:7a:ff:ef:b6:
                    45:b2:0d:50:cf:09:83:6f:8f:7e:5d:76:99:c8:1e:
                    f2:b8:55:c2:b9:20:ec:ec:29:e5:c0:05:7d:08:21:
                    75:28:45:a1:15:ac:2f:5e:5f:57:5f:a9:70:65:46:
                    9f:f0:3f:d9:e2:d0:16:d8:4f:7c:72:37:4d:de:ae:
                    8d:25:72:2e:7a:ad:7a:c7:7e:2d:df:26:03:6b:32:
                    47:32:c5:3a:92:41:a0:5e:d4:a2:d6:15:99:5d:e2:
                    d0:40:6c:8f:dd:92:fd:f3:ba:72:87:c1:04:68:8a:
                    f6:13:7d:ad:e2:66:e0:5d:f9:57:44:c5:d1:f9:d8:
                    68:43:38:eb:c5:9f:d2:4c:ca:30:52:b2:7d:65:7e:
                    cc:df:28:95:28:d4:aa:da:b9:f7:dc:7d:78:d5:0e:
                    8b:6d:91:51:3f:e3:a7:5d:9e:fb:bb:e0:6d:19:e9:
                    13:bf:67:3a:fb:a1:75:96:7a:39:fe:4e:3b:81:ee:
                    ba:1c:db:af:df:e3:a4:68:ca:fe:1a:0f:d3:86:f7:
                    9f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7B:A8:DC:1A:CE:34:C3:81:20:F4:AC:C0:EE:DF:A6:AF:8B:22:8D
            X509v3 Authority Key Identifier:
                keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:93:f6:eb:07:38:cd:5f:ae:73:93:5e:fa:88:d7:c3:a3:c1:
         52:c2:cd:3c:92:39:7c:59:a1:c4:7a:30:e5:d2:04:54:7e:2b:
         4e:f1:16:2d:e4:bd:ca:d7:6f:60:80:da:33:ca:24:f8:55:c1:
         97:ba:4b:f5:47:81:ec:3d:8b:1b:86:d9:23:a7:7b:da:84:cd:
         6c:b1:bd:60:99:40:4d:d7:34:2b:2f:20:ba:ef:b4:41:01:d7:
         b3:bb:b8:70:66:01:70:e2:f5:c2:92:24:4a:0f:cf:21:97:d9:
         bc:41:08:52:47:1d:91:c8:3d:61:89:96:0a:73:33:1f:19:92:
         52:96:72:fe:3d:23:cc:17:c6:98:15:5c:14:9c:37:0d:fd:05:
         6f:15:96:fb:07:67:18:9d:f5:4e:85:48:a0:e8:81:ea:67:7d:
         66:1e:cb:be:f3:a2:0c:74:5c:96:e7:8d:2c:33:2f:39:3c:2c:
         43:0f:b9:55:6a:f1:10:21:8c:f9:00:c1:b6:3d:09:e5:2c:f8:
         83:e8:2f:ae:28:1f:8e:3c:10:70:2e:2c:38:c2:63:53:de:86:
         62:ac:42:fd:8a:3d:54:95:73:0f:d8:3c:c5:04:70:f4:a8:1a:
         06:e2:d7:de:e7:5b:7b:c9:87:7a:84:d8:fa:dc:c4:5c:a8:45:
         31:ec:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:08:36 2026 by rpki-client