Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File:                     t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier:          pxgpvrMcR8lad4d1Cr9Nsh61cWsiUdKkTSglr6UR2z0=
Subject key identifier:   0D:18:D5:B6:20:CD:F4:85:61:7E:2A:74:2F:C7:CD:54:B3:D2:37:53
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer:       /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial:       01A1DE39B56E750576C0C38BC64D842155EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number:          0A79
Signing time:             Sun 15 Nov 2026 08:01:26 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:26 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:26 +0000
Files and hashes:         1: 4avV52VadcXyjmFmkPiOZqd4aEo.roa (hash: rACIPz05aOD1m23fMqk7AR2NAoediVEN3H+EA6u4xuE=)
                          2: TAKoOld3ZdA95DrV9NuS6A8DvoA.roa (hash: 6IxDivB67LK66jWvSp4ogMWZ8x+3ThGPDhXWBMTQzD8=)
                          3: X7ac4XA1tpGm-YT6i7tT6fbzYY8.roa (hash: vEQjrEenJSqoTsTtPfT7M/Rb7txYfAfPWEy15g3YYqE=)
                          4: p99sKQd64TY87IGdtOWr6iPqp8Y.roa (hash: TOjdieep1rBeaY3tAvDOKKLMjGOfaC+22A+UcO2sOVg=)
                          5: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: 90oMqOv2bug002MErBAeb05DUATF/d1uAjHtbmD/EYo=)
                          6: uxXZ_hKsmnhQRsfJ1EfmQad0ATE.roa (hash: GZswREwDe56hmbMlhE5Azz0F2ZeFdeK1GV3fvvLTRak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:b5:6e:75:05:76:c0:c3:8b:c6:4d:84:21:55:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
        Validity
            Not Before: Nov 15 08:01:26 2026 GMT
            Not After : Nov 16 08:01:26 2026 GMT
        Subject: CN=0d18d5b620cdf485617e2a742fc7cd54b3d23753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:88:d6:75:c8:43:cf:cf:c8:ae:80:e3:a3:
                    b0:e2:bb:4c:ee:e9:27:22:09:78:53:c4:76:50:40:
                    61:94:87:a7:91:21:bf:9d:88:36:1f:0a:6e:3e:a5:
                    a1:f4:41:db:a6:85:7c:d2:9e:14:1f:b3:01:90:3b:
                    f2:ff:3e:f9:90:3a:a8:f5:d8:25:24:ab:3f:51:7f:
                    b4:d3:04:0f:07:19:24:34:52:5c:a6:09:55:85:c1:
                    87:2f:2b:96:50:4a:d7:e7:d3:80:df:6c:2d:06:20:
                    34:73:db:08:cb:df:61:f9:bc:8a:8f:93:fa:ef:b7:
                    d8:1b:03:c2:53:56:e5:08:9c:98:33:c5:0e:44:82:
                    3d:c7:98:bc:7d:50:fc:ae:06:fc:65:39:6f:2b:01:
                    d9:3d:1e:a4:fa:32:2f:47:36:7e:a4:8d:16:cc:3a:
                    bf:e6:6f:83:67:ef:1d:22:b7:4a:70:9d:ac:e6:b5:
                    29:8e:61:38:72:70:4b:e1:c0:98:1f:77:ba:5a:50:
                    39:98:5b:b4:ad:84:42:00:00:44:f2:ee:59:57:b4:
                    2c:40:8a:03:74:d3:c4:4a:f7:ea:83:e3:2d:40:47:
                    39:68:07:5a:a4:ff:e8:42:46:77:64:dc:72:d6:c5:
                    44:ee:a2:41:c7:91:e8:49:cc:30:73:07:79:3e:cb:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:18:D5:B6:20:CD:F4:85:61:7E:2A:74:2F:C7:CD:54:B3:D2:37:53
            X509v3 Authority Key Identifier:
                keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:34:f5:79:e1:c9:c7:2d:57:6f:f4:49:c3:8f:e4:80:6d:ca:
         b5:4d:a7:a1:62:32:34:9a:30:76:19:78:ef:55:47:84:6b:51:
         ef:ec:3a:8f:42:8c:3c:66:e8:c2:3e:3a:23:14:a4:f9:f3:5b:
         a7:8d:3e:50:3e:84:18:cd:f3:63:57:2a:32:8a:70:93:d9:0f:
         3a:c1:9e:46:67:27:8d:53:14:a6:57:cd:30:dd:ab:a2:b6:ca:
         ff:5b:71:fc:5d:65:47:36:7e:33:6d:42:b9:35:af:c0:89:b6:
         b6:d6:37:c5:54:1c:be:8d:db:1c:89:17:00:ef:6c:d4:03:b7:
         06:72:38:1a:3a:0f:81:ca:03:ef:8f:fe:85:53:80:0f:37:c5:
         1e:6e:6b:7e:90:87:03:55:b5:18:09:29:80:32:1a:df:eb:de:
         b2:84:a2:3b:18:5a:e4:36:24:42:8f:f2:a6:ea:f3:ad:c4:07:
         53:34:a1:6c:00:90:16:6e:04:5f:bb:54:51:c3:ed:ff:1d:56:
         20:a9:12:0c:23:89:3b:76:b4:6e:f2:55:ce:4a:fe:a7:2b:78:
         a4:d2:e9:99:5b:15:96:72:35:d2:08:3c:86:ca:f6:54:4d:14:
         fc:2b:5d:d5:dd:75:5a:c3:e6:59:72:d9:4d:fc:53:bd:d3:1e:
         86:e2:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:32:49 2026 by rpki-client