Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File:                     t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier:          s9CRGcu5VtO43i0wQkMFfqrtpKN2y25GbcvYMoNnku0=
Subject key identifier:   F6:D9:F8:68:C9:AA:B9:9F:7C:8F:D3:05:82:E6:42:9C:79:E3:BE:E4
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer:       /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial:       01A0FBD913CE3953A6BC7821F54EAD55E012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number:          1307
Signing time:             Fri 02 Oct 2026 09:01:42 +0000
Manifest this update:     Fri 02 Oct 2026 09:01:42 +0000
Manifest next update:     Sat 03 Oct 2026 09:01:42 +0000
Files and hashes:         1: BPWonk1YJrq5k0grAOFs28a78ys.roa (hash: vH3GEq/JyMlXOt+FXRkIPXcscRxAUxYgLT+/b2jWLHo=)
                          2: kZq33BHakZDY4YJudXNmheZzloo.roa (hash: KtUW+9Vb1TNUqTSbu6bQAx1rz4MVZIFaAepB6yKKaic=)
                          3: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (hash: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8=)
                          4: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: a5BMYBcmtjdIrYRJ+Pt1945l5ua0r1AXaEAKKg8yLHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fb:d9:13:ce:39:53:a6:bc:78:21:f5:4e:ad:55:e0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
        Validity
            Not Before: Oct  2 09:01:42 2026 GMT
            Not After : Oct  3 09:01:42 2026 GMT
        Subject: CN=f6d9f868c9aab99f7c8fd30582e6429c79e3bee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:c3:33:d0:ef:ba:36:63:44:56:10:45:86:
                    8b:4d:90:2d:e3:0d:48:37:1a:e5:35:41:80:55:8b:
                    30:1a:cf:f7:13:41:06:e2:06:d0:87:10:f1:3b:d6:
                    2a:26:a9:8b:11:7a:4c:a6:5c:75:73:3a:16:8e:c2:
                    f3:44:b9:b5:8a:5c:e1:d6:ad:ba:ba:e6:1c:90:01:
                    22:b1:13:84:94:5a:d4:69:e7:79:10:ff:12:d6:41:
                    1c:54:12:89:83:80:fe:bd:92:96:ed:bc:73:2f:9a:
                    8e:e3:5f:b6:aa:23:e7:a4:a9:89:09:72:28:c0:d5:
                    3d:c3:8a:a2:f0:02:a3:9c:8b:3b:ec:e7:75:91:af:
                    5e:88:2b:1d:90:12:74:ea:3a:7a:99:5b:73:41:ea:
                    f2:4a:3e:7a:d6:d4:d6:41:c3:49:cc:c1:89:93:27:
                    11:9a:97:ed:7f:be:e0:e1:ca:88:47:12:05:22:9e:
                    34:cb:b1:84:fe:ea:5d:0a:12:1e:70:fc:79:6f:82:
                    56:01:c1:c7:f5:f5:4a:6e:33:5a:f5:a0:16:94:d3:
                    a7:cf:10:ab:6e:0e:f2:34:13:1b:d8:42:b0:b1:76:
                    da:59:d3:39:4c:90:38:b9:ff:d0:38:de:17:15:af:
                    b7:da:ec:50:10:41:8e:6c:91:31:28:1b:87:83:4e:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D9:F8:68:C9:AA:B9:9F:7C:8F:D3:05:82:E6:42:9C:79:E3:BE:E4
            X509v3 Authority Key Identifier:
                keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d6:e2:f4:b8:34:27:ca:fd:43:14:96:91:ea:dc:0a:7e:91:
         ee:0c:be:48:b6:fe:5b:e0:7b:e5:67:4f:ff:bc:c1:d5:29:5d:
         1e:8c:97:ad:b1:da:f9:28:fc:ae:c7:73:6b:81:88:ee:fa:30:
         8e:5e:3d:1a:f4:3f:80:54:f8:31:dd:06:a2:f2:53:67:78:11:
         2d:8b:2f:83:2c:39:ee:23:d3:7d:79:19:ab:d9:1c:07:eb:aa:
         1e:a2:bc:be:8f:30:38:2c:85:f2:6b:82:6f:0f:32:5c:ea:42:
         95:14:13:7b:9f:3c:a6:7a:ee:e7:55:ca:64:64:bb:7d:a1:45:
         07:3b:cf:f4:b8:f8:cd:0c:46:e5:d4:e5:4f:cb:1f:24:17:85:
         27:24:5a:48:09:0a:e3:b0:1b:fa:b1:2a:c1:6d:93:e7:a7:8c:
         09:bc:fb:00:07:20:08:19:4a:5d:80:24:10:3b:6f:32:fb:d1:
         42:df:51:f6:bc:7e:a2:79:d8:3b:49:74:79:e8:f0:e0:2d:d2:
         9e:15:f7:54:a3:fe:2a:f5:6e:ac:51:15:41:ef:89:c1:01:55:
         9b:6a:a7:5b:17:f4:7e:86:68:dd:77:cb:ae:83:f9:38:50:f7:
         38:c2:dc:70:66:06:47:fa:15:93:ac:bc:2d:12:13:89:75:db:
         ac:d6:5c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 15:51:24 2026 by rpki-client