Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File:                     t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier:          JVAVf5CI2g7b0hRJP1zkdGrB4Ikm9/Ll3zeC3ZTG/RU=
Subject key identifier:   AE:E3:E3:4D:1D:AD:18:0C:41:25:9D:7A:CB:83:6B:E4:87:16:B7:38
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer:       /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial:       019D273B0304394C01D841EE1B092E704295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number:          0806
Signing time:             Wed 25 Mar 2026 23:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:11 +0000
Files and hashes:         1: 4avV52VadcXyjmFmkPiOZqd4aEo.roa (hash: rACIPz05aOD1m23fMqk7AR2NAoediVEN3H+EA6u4xuE=)
                          2: m9o4a-Sp907mkuh7yKVYLJl1LEA.roa (hash: 6qxzfM0ywaM1roIqQKQwRjB4scmKgnfULeAbobju2pc=)
                          3: p99sKQd64TY87IGdtOWr6iPqp8Y.roa (hash: TOjdieep1rBeaY3tAvDOKKLMjGOfaC+22A+UcO2sOVg=)
                          4: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: xAiF/vheYVlJOFjqClxHnKGqh5oZ5u2JMn/SryC7hWs=)
                          5: uxXZ_hKsmnhQRsfJ1EfmQad0ATE.roa (hash: GZswREwDe56hmbMlhE5Azz0F2ZeFdeK1GV3fvvLTRak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:03:04:39:4c:01:d8:41:ee:1b:09:2e:70:42:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
        Validity
            Not Before: Mar 25 23:01:11 2026 GMT
            Not After : Mar 26 23:01:11 2026 GMT
        Subject: CN=aee3e34d1dad180c41259d7acb836be48716b738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:c1:fe:04:10:c3:4a:40:15:33:81:ae:3d:
                    53:80:b0:27:ec:20:0d:c9:b2:eb:dc:5e:85:7b:98:
                    33:69:50:f3:09:2b:2d:07:86:5f:cd:a5:7a:9d:1e:
                    72:6b:29:04:ec:ca:7c:4d:41:b1:2c:61:41:55:96:
                    d6:a7:e4:83:a8:91:67:12:64:91:c1:18:d6:36:65:
                    d6:70:f8:7f:85:1b:a9:8f:f1:d2:59:f2:de:05:ea:
                    c3:25:db:7e:c4:74:d6:38:24:c9:49:f3:00:1f:d0:
                    87:e7:f4:6e:cc:6a:b2:11:e6:50:1a:d2:80:1c:ed:
                    8e:a4:cc:34:76:77:c0:48:d1:10:a6:cd:7c:15:e9:
                    12:44:9a:ae:be:37:75:d0:7e:d9:75:3a:bb:f2:3e:
                    26:21:7a:62:65:31:6e:1e:4e:dc:54:8b:24:e4:7b:
                    b7:74:fc:8c:de:9e:58:ed:13:ad:dc:d0:3f:23:7a:
                    0e:6d:f9:b6:b9:84:f9:43:22:b1:77:06:08:55:e6:
                    da:a3:76:35:0d:68:e9:72:a7:97:06:76:5e:29:19:
                    4b:60:a0:56:f6:48:d9:8c:de:03:a4:23:e2:6c:45:
                    e0:85:93:ff:8b:24:cf:9b:7f:ee:93:e5:b5:80:72:
                    18:2e:a9:42:8f:c6:c4:b4:41:91:62:7e:b5:e6:1b:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E3:E3:4D:1D:AD:18:0C:41:25:9D:7A:CB:83:6B:E4:87:16:B7:38
            X509v3 Authority Key Identifier:
                keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:56:6b:0c:2d:31:32:65:03:7f:4c:72:2e:03:62:28:41:b5:
         3e:cc:36:e5:a5:93:73:a7:4e:d2:41:44:40:ec:5e:83:09:00:
         56:32:cb:78:91:37:ae:bf:01:9b:24:92:52:89:37:d1:f2:f9:
         7c:8b:7c:5c:64:ec:5d:91:38:52:dd:a2:70:8f:45:bd:96:ad:
         f9:95:d0:27:2b:8f:e5:d0:c2:e8:e4:7f:94:f4:a6:4f:b2:01:
         fb:34:4f:3f:d4:6b:6e:0f:ef:87:63:4b:ae:d0:43:12:73:72:
         9f:51:31:98:c4:a5:f1:2b:9d:22:e1:5a:80:1a:2a:42:b7:40:
         8e:b1:29:df:1f:4b:04:c1:e7:09:60:3b:35:cd:40:c5:3c:9d:
         09:5e:61:05:d9:fa:e3:bb:82:2d:61:d9:ac:c2:bd:29:f5:51:
         0a:08:ba:e7:45:a7:19:1f:3e:d8:87:de:b4:ee:de:1b:f6:69:
         89:66:17:30:0d:de:cf:f5:70:88:a6:c3:9c:07:0f:05:c3:fc:
         96:8f:69:aa:83:f4:9c:31:96:fb:a2:9f:84:46:2a:32:3f:68:
         00:5a:5e:8f:14:18:53:9c:85:63:bb:84:ec:b1:e4:4c:f7:17:
         79:fd:ed:38:19:db:74:ba:55:46:e7:e7:b5:fa:64:0a:dd:36:
         bc:22:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:58:00 2026 by rpki-client