Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          K9wMnCXWV4jgs1F9kFBhZPdc+ij2GQ1zqC4ucRNUU0g=
Subject key identifier:   F0:89:59:6F:44:F7:FA:C7:96:F2:05:4D:59:F1:9D:90:3C:A3:9B:F1
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       01A0F230EAE150E2C61013565A28695FF330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          1A87
Signing time:             Wed 30 Sep 2026 12:01:27 +0000
Manifest this update:     Wed 30 Sep 2026 12:01:27 +0000
Manifest next update:     Thu 01 Oct 2026 12:01:27 +0000
Files and hashes:         1: 0dAC8_MIFapVxgRzs4TlZHVEeEY.roa (hash: 49clzQhW1ftGGWowSAxsNPEboDX4Z+TOAbVsOQgEQas=)
                          2: P1u4eEpMlt9VP1A_Q7ba9uco-DE.roa (hash: FS9C2EZkw3xynye9bdmDp7IY0lMQ/RYNxAFxC1rEr8A=)
                          3: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: NHAsnP6HWrr21G7ZqbrOVk/VsR2ZaPhjy/K/TnSAs/c=)
                          4: jx00a_pu7cUe7ylsCN_mAD4NHH0.roa (hash: qbhokNXhBId7yUMzZ5kksb51Uw6RLNqqZ85yZyQ9F7g=)
                          5: ug2lwdEDypbroUTh-MUKjX7xHxM.roa (hash: tzIgDVhwzntyEbgry33zKLqLx6I3KowYd/8dZ4T/e/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:30:ea:e1:50:e2:c6:10:13:56:5a:28:69:5f:f3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Sep 30 12:01:27 2026 GMT
            Not After : Oct  1 12:01:27 2026 GMT
        Subject: CN=f089596f44f7fac796f2054d59f19d903ca39bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:23:e1:5b:92:7f:0b:bc:cb:88:bd:4f:e1:
                    f1:fc:c3:5f:bc:26:56:94:06:85:60:fd:67:5c:c5:
                    4c:a8:b5:1a:67:30:0a:6a:9e:78:79:de:46:07:5e:
                    22:ca:67:c9:61:dd:25:3f:5c:1c:fb:e7:53:d1:78:
                    51:c9:49:e3:4e:51:5e:ef:b6:52:56:2a:e5:a9:75:
                    ee:89:45:5f:47:98:e0:23:12:8f:7f:44:71:9b:2e:
                    e1:70:ac:25:ba:b3:6d:63:72:9a:1f:a9:c0:95:36:
                    75:a7:9e:8f:7e:7c:70:76:34:10:3c:74:3c:bf:29:
                    26:ea:d8:c2:9a:89:b8:a5:b3:42:50:7f:65:0b:38:
                    17:de:b2:0c:da:c5:69:bd:0a:6f:58:18:27:58:a4:
                    97:4a:54:e6:53:f1:0d:97:9a:01:c5:95:50:fb:58:
                    fe:17:9a:28:08:3b:a1:f7:6d:6d:3c:47:fb:03:0f:
                    1b:94:89:4e:80:26:69:03:da:4e:e9:62:52:b8:4e:
                    ac:bd:7c:7c:2c:3a:4d:2b:a7:e5:b0:21:80:93:ae:
                    2c:96:03:68:11:27:69:ed:bd:99:ce:bc:11:dc:7c:
                    7c:f1:ac:72:6f:2c:01:ed:c5:01:5a:11:6c:e7:91:
                    d6:9b:c0:d0:e1:a4:4d:57:2f:ae:da:82:1f:22:d1:
                    f1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:89:59:6F:44:F7:FA:C7:96:F2:05:4D:59:F1:9D:90:3C:A3:9B:F1
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:75:5a:ca:8a:e4:25:25:ad:0e:e7:79:36:be:a0:6d:39:
         06:33:7b:17:c3:f7:01:9b:fb:da:16:f2:c8:39:76:5b:18:c9:
         18:8d:ce:ed:38:86:1a:b5:c9:36:c3:8e:43:11:35:e0:44:94:
         0c:52:44:b1:7d:9d:99:d4:0c:cc:21:fb:d8:03:88:67:ce:27:
         92:de:e0:45:de:e8:37:fc:ee:68:45:36:23:53:8c:14:b2:5c:
         00:80:18:e3:08:4d:c0:35:51:65:ab:8a:33:17:6c:5e:29:a9:
         c7:fb:d0:f4:c2:e4:da:31:aa:b5:12:fa:35:58:8e:0a:98:58:
         4a:41:c0:86:de:ec:3a:04:cc:45:f5:53:54:20:be:55:8f:d9:
         06:bd:40:28:4d:03:4b:be:fc:c1:4e:75:7e:74:17:88:10:55:
         2d:4c:65:ed:35:4d:5a:15:88:11:1b:4a:0f:35:48:84:6b:de:
         01:c3:c4:54:20:7f:10:87:0f:26:a3:2b:45:d8:0f:4d:0d:7f:
         0c:2d:6b:5e:41:94:4a:aa:91:2b:ac:73:19:09:26:3f:fc:af:
         1f:c7:24:d5:1b:1f:66:9f:eb:ee:78:86:61:13:b9:0f:07:13:
         ce:ed:be:bc:61:b6:3c:ad:ef:96:31:e2:ec:fa:71:8d:50:ac:
         6a:5e:3b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:59:30 2026 by rpki-client