Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File:                     a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier:          70nqhZivguJ3eeLnXs6woP+ez8jjHF4Z1cWyvwWlZYY=
Subject key identifier:   C4:53:F9:FF:08:1A:3E:8C:D4:5F:3F:13:EF:4D:2D:E8:7D:72:DC:9F
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer:       /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial:       01A0DFBD09569E8F769BD3BA6F636F167B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number:          1A78
Signing time:             Sat 26 Sep 2026 22:01:42 +0000
Manifest this update:     Sat 26 Sep 2026 22:01:42 +0000
Manifest next update:     Sun 27 Sep 2026 22:01:42 +0000
Files and hashes:         1: 2RbeqdMiyrwCVLR5chpWY1wVXBs.roa (hash: FV2Q/IEBTvjzgG5NIpgTYEVedEVCT2bxukDMuyGlG3g=)
                          2: Lijwv8ed8pOLySWZZGE9d68r6MQ.roa (hash: 9P+vvVo2WGEbeXwE6ljHBigsAywfbwq49GCsuySXDx4=)
                          3: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: AR6+9wrGro/ONfmtaE/q2PFRZYM2iregh/mOqJ8EiXo=)
                          4: g5j5FZkvMABlDgQ1VxUj3-qHrIQ.roa (hash: GDgyOidVPTAYf13W4o/hjNWE5JEbUK7OcD6kn+Y2gxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bd:09:56:9e:8f:76:9b:d3:ba:6f:63:6f:16:7b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
        Validity
            Not Before: Sep 26 22:01:42 2026 GMT
            Not After : Sep 27 22:01:42 2026 GMT
        Subject: CN=c453f9ff081a3e8cd45f3f13ef4d2de87d72dc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:33:cc:bf:7d:51:49:36:80:c6:35:62:ed:
                    93:a6:24:12:28:60:68:1f:92:82:ab:27:1f:29:18:
                    3f:5c:f1:61:60:f0:c5:a0:50:ae:32:8c:85:90:c7:
                    16:a3:36:aa:af:6e:28:f5:13:92:a5:0c:68:f5:2a:
                    20:29:d2:9f:49:51:ad:10:7a:64:3a:d7:38:35:d3:
                    21:8e:ad:dc:73:5a:3f:43:88:e3:cc:bf:2e:e2:a9:
                    30:cd:7f:14:26:c4:42:9b:3f:5f:a9:68:f3:99:80:
                    17:03:f9:dd:aa:90:0c:68:b1:c2:e6:36:cc:e9:82:
                    84:20:4e:70:d9:25:3f:84:6f:39:38:f0:01:f4:67:
                    ad:fe:77:16:76:fd:f0:28:06:b8:89:d3:94:c1:7d:
                    6a:d8:97:ab:dc:0a:4e:3f:c9:a7:f0:80:58:7b:1b:
                    58:7b:23:de:96:57:de:04:69:53:f3:0f:05:4b:93:
                    e1:f1:46:0e:24:c4:2f:84:0e:f8:e5:1c:c1:ba:67:
                    0d:9e:10:1a:2f:67:f7:fa:b7:7f:cc:14:67:e9:03:
                    7c:12:c4:15:f7:67:06:c3:8a:d6:a2:72:b7:ce:70:
                    82:28:04:ab:58:43:d1:18:42:ad:a8:dd:5a:7a:c5:
                    cb:40:7b:fa:3c:63:16:88:29:45:bf:d6:24:eb:eb:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:53:F9:FF:08:1A:3E:8C:D4:5F:3F:13:EF:4D:2D:E8:7D:72:DC:9F
            X509v3 Authority Key Identifier:
                keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e2:05:ef:cb:85:16:db:eb:95:e6:87:b1:49:cc:3f:56:0c:
         f6:e7:97:80:09:5a:04:bf:5f:8f:68:4c:e4:4d:71:67:38:ff:
         db:aa:ea:ec:2d:a0:f3:dd:1c:31:f8:6a:47:c1:d9:ff:53:99:
         c4:ab:2a:1f:dd:5d:af:c5:87:c1:d6:4f:a2:4d:8f:ae:95:97:
         57:bb:35:d2:a3:1e:15:69:9a:31:55:25:14:68:01:33:49:58:
         1c:36:e7:de:4f:32:4c:eb:df:d2:7c:a2:88:3e:52:08:86:eb:
         d6:9c:bf:32:3e:18:99:b8:00:d4:25:59:da:7f:80:1e:43:cd:
         e7:1d:f1:f1:dc:6c:05:a9:ea:ae:2d:8a:e3:1d:5f:bd:9a:57:
         ce:16:e3:63:a3:95:fd:1e:00:5e:11:48:67:c8:1b:db:4a:60:
         8b:e4:57:1e:c8:cb:4f:c0:37:c6:8e:26:d6:42:f4:3f:6b:64:
         98:85:4f:e5:a3:dc:e5:bc:a6:8e:1d:b7:c3:cb:a1:c9:1b:6f:
         32:a1:6d:e9:59:9f:61:94:ed:67:dd:6a:92:e7:b1:17:b7:19:
         9f:50:65:75:55:68:d9:94:65:9d:33:2f:4e:de:66:85:ad:8a:
         cc:13:1a:69:eb:77:56:d9:a5:36:7d:59:76:8c:3a:bc:98:ee:
         30:32:35:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:30:41 2026 by rpki-client