Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File:                     t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier:          JgOrlP5VPE4eXQsrT3JQ5gAOy44yBk/6EWSdCPthOfg=
Subject key identifier:   73:DA:82:72:B2:9C:03:60:3A:A9:04:94:FA:15:98:12:B9:6A:90:B4
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer:       /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial:       01A0CFDAF654A55DFB942ECFE9FBC5DD6A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number:          09EB
Signing time:             Wed 23 Sep 2026 20:00:28 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:28 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:28 +0000
Files and hashes:         1: 4avV52VadcXyjmFmkPiOZqd4aEo.roa (hash: rACIPz05aOD1m23fMqk7AR2NAoediVEN3H+EA6u4xuE=)
                          2: m9o4a-Sp907mkuh7yKVYLJl1LEA.roa (hash: 6qxzfM0ywaM1roIqQKQwRjB4scmKgnfULeAbobju2pc=)
                          3: p99sKQd64TY87IGdtOWr6iPqp8Y.roa (hash: TOjdieep1rBeaY3tAvDOKKLMjGOfaC+22A+UcO2sOVg=)
                          4: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: xZBqNUeyyZrGEOkagpVxCzUzFwXFUuQ6fZMSKqjiwrQ=)
                          5: uxXZ_hKsmnhQRsfJ1EfmQad0ATE.roa (hash: GZswREwDe56hmbMlhE5Azz0F2ZeFdeK1GV3fvvLTRak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 20:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:da:f6:54:a5:5d:fb:94:2e:cf:e9:fb:c5:dd:6a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
        Validity
            Not Before: Sep 23 20:00:28 2026 GMT
            Not After : Sep 24 20:00:28 2026 GMT
        Subject: CN=73da8272b29c03603aa90494fa159812b96a90b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:4e:e7:7b:5b:85:f6:39:9b:9b:f2:45:e1:
                    d9:97:22:fb:02:11:74:ca:85:78:38:60:83:6c:6a:
                    d4:c1:0c:b2:db:75:6e:4b:7e:56:86:db:40:a7:dd:
                    b2:4d:86:5b:b2:42:f8:d8:31:dd:60:7a:07:54:bb:
                    71:e8:6d:76:b2:0e:1c:f8:6a:0f:cb:a8:a1:43:42:
                    8c:b5:4d:d2:03:f5:25:b3:66:62:62:af:3e:5f:47:
                    25:b8:89:4d:e4:45:51:c4:ba:17:4f:f1:54:b5:68:
                    1c:d6:e2:0a:81:7a:07:bc:79:8f:df:4e:cd:c2:e3:
                    d8:75:67:d3:b0:0e:5f:59:f2:f7:cf:85:24:40:66:
                    99:94:90:c7:bd:b7:ad:51:49:30:29:16:c3:4e:a8:
                    d9:87:ae:c5:e7:ec:22:8d:f5:76:3b:1d:07:96:26:
                    83:eb:9f:ec:64:ca:c8:5b:4e:78:f5:75:6d:8d:d1:
                    7e:c4:a1:dc:03:1b:38:5e:7b:95:ae:b4:6f:c5:85:
                    cf:ba:75:e0:12:7b:0b:e4:0e:24:54:5f:a9:e3:07:
                    d2:f2:96:cd:7b:e5:3e:7c:3b:96:34:2c:32:af:51:
                    8e:54:74:1a:40:c1:3d:c9:3d:87:c4:78:24:2f:5a:
                    2a:0e:d3:38:71:7d:2c:81:bb:bb:a2:75:56:28:9b:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DA:82:72:B2:9C:03:60:3A:A9:04:94:FA:15:98:12:B9:6A:90:B4
            X509v3 Authority Key Identifier:
                keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cf:15:cc:ce:6a:29:11:67:0a:71:26:6c:c8:17:19:ef:18:
         cd:7a:ed:98:86:c2:95:ea:e3:6e:3a:02:f7:67:b6:8c:1e:4b:
         34:14:25:02:b0:66:e6:cf:ad:9c:fa:11:8e:6e:a8:4a:ba:e2:
         c7:a6:20:fc:6e:a7:4b:f3:f7:e8:b1:f8:45:75:d7:1b:cb:fe:
         5e:d3:68:6d:f7:4d:52:0a:2b:7d:1c:3f:f4:3e:61:e7:c2:2c:
         e8:86:f7:3c:ad:f7:d6:4a:74:10:59:d1:ea:6a:f4:56:9d:85:
         65:f5:08:d6:20:26:d7:05:b0:bb:c2:df:0a:79:05:7f:51:a3:
         28:92:25:6c:4d:ab:9d:c1:81:98:c9:a4:7f:d2:8a:d7:09:da:
         46:70:41:13:ad:fe:fa:97:70:73:25:d6:a2:da:05:78:55:6d:
         75:bb:c0:de:3f:8f:9e:57:d5:21:6a:71:ed:c8:65:32:0b:5d:
         df:78:85:2b:20:6d:61:06:16:53:b5:c9:10:72:2c:9d:1a:3a:
         40:a5:82:a6:c9:13:05:23:8e:5e:ab:7e:ae:cf:2f:93:82:f4:
         36:26:b1:5a:06:51:47:8b:64:8c:a9:f7:f1:b7:b5:bc:40:b6:
         bc:53:22:43:07:ce:87:84:3f:61:b8:79:e1:ce:44:3f:93:56:
         fa:49:3c:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2vZUpV37lC7P6fvF3Wo8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODY3OGJkNjU0Y2E2YjEwYTVjNzczYmMyNjk3NTRkYzIz
NGNmZDUwHhcNMjYwOTIzMjAwMDI4WhcNMjYwOTI0MjAwMDI4WjAzMTEwLwYDVQQD
Eyg3M2RhODI3MmIyOWMwMzYwM2FhOTA0OTRmYTE1OTgxMmI5NmE5MGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb9O53tbhfY5m5vyReHZlyL7AhF0
yoV4OGCDbGrUwQyy23VuS35WhttAp92yTYZbskL42DHdYHoHVLtx6G12sg4c+GoP
y6ihQ0KMtU3SA/Uls2ZiYq8+X0cluIlN5EVRxLoXT/FUtWgc1uIKgXoHvHmP307N
wuPYdWfTsA5fWfL3z4UkQGaZlJDHvbetUUkwKRbDTqjZh67F5+wijfV2Ox0HliaD
65/sZMrIW0549XVtjdF+xKHcAxs4XnuVrrRvxYXPunXgEnsL5A4kVF+p4wfS8pbN
e+U+fDuWNCwyr1GOVHQaQME9yT2HxHgkL1oqDtM4cX0sgbu7onVWKJtSHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPagnKynANgOqkElPoVmBK5apC0MB8GA1UdIwQY
MBaAFLeGeL1lTKaxClx3O8JpdU3CNM/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgt
ZTMyOTI0YWM3YjYzLzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgtZTMyOTI0YWM3YjYz
LzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcc8VzM5q
KRFnCnEmbMgXGe8YzXrtmIbClerjbjoC92e2jB5LNBQlArBm5s+tnPoRjm6oSrri
x6Yg/G6nS/P36LH4RXXXG8v+XtNobfdNUgorfRw/9D5h58Is6Ib3PK331kp0EFnR
6mr0Vp2FZfUI1iAm1wWwu8LfCnkFf1GjKJIlbE2rncGBmMmkf9KK1wnaRnBBE63+
+pdwcyXWotoFeFVtdbvA3j+PnlfVIWpx7chlMgtd33iFKyBtYQYWU7XJEHIsnRo6
QKWCpskTBSOOXqt+rs8vk4L0NiaxWgZRR4tkjKn38be1vEC2vFMiQwfOh4Q/Ybh5
4c5EP5NW+kk8Og==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:02:50 2026 by rpki-client