Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
File:                     t0FAkE6TQngaQguYXmTMNc3vy64.mft (raw, json)
Hash identifier:          vQOEQKi5mBFMWzJnDSED30q4ALU9hFZu8XPQnUurr2A=
Subject key identifier:   4A:84:B3:99:92:3D:CD:39:9E:97:F4:2C:F6:B5:A5:52:F8:E6:BF:DD
Authority key identifier: B7:41:40:90:4E:93:42:78:1A:42:0B:98:5E:64:CC:35:CD:EF:CB:AE
Certificate issuer:       /CN=b74140904e9342781a420b985e64cc35cdefcbae
Certificate serial:       01A106C9E77214267E3483054AF1AE86A5F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0FAkE6TQngaQguYXmTMNc3vy64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
Manifest number:          0288
Signing time:             Sun 04 Oct 2026 12:00:57 +0000
Manifest this update:     Sun 04 Oct 2026 12:00:57 +0000
Manifest next update:     Mon 05 Oct 2026 12:00:57 +0000
Files and hashes:         1: cJb3OglO7xZXnqgcS4IiacfQEF0.roa (hash: vl8NCITgrbY5cswSzS8XkdQGpkVi77gvR63+VLkTCM4=)
                          2: t0FAkE6TQngaQguYXmTMNc3vy64.crl (hash: vPFdJmj2fytmV7A0+SysZ1JQbNr3/om8pg+ExMwF98Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0FAkE6TQngaQguYXmTMNc3vy64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:c9:e7:72:14:26:7e:34:83:05:4a:f1:ae:86:a5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74140904e9342781a420b985e64cc35cdefcbae
        Validity
            Not Before: Oct  4 12:00:57 2026 GMT
            Not After : Oct  5 12:00:57 2026 GMT
        Subject: CN=4a84b399923dcd399e97f42cf6b5a552f8e6bfdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:69:3d:39:0b:7f:2d:40:df:8d:a6:83:ea:
                    18:ba:b9:d5:39:a0:cb:42:4c:86:3f:fa:dd:59:73:
                    21:ee:35:78:07:b3:91:11:67:44:3d:b2:79:9d:7f:
                    be:5b:11:d0:d4:68:da:2c:fc:64:30:32:5a:eb:a4:
                    8e:20:40:b5:e6:5e:62:9a:f0:00:84:4a:89:2f:eb:
                    9b:07:57:d4:39:1c:48:7e:61:8d:c9:7e:18:01:07:
                    3e:e7:2f:05:f9:69:52:91:3c:51:8b:49:4e:64:76:
                    e8:87:9e:cb:ff:79:0e:f3:ec:1a:4e:94:ed:62:09:
                    54:dd:ab:77:ed:d0:74:3f:3c:46:b3:2b:3c:0a:31:
                    68:3f:59:a2:64:81:db:37:87:da:54:bb:3b:41:83:
                    2c:aa:d4:4b:e6:b7:ff:6b:a7:cd:6c:13:2a:83:88:
                    48:bd:01:9e:f5:4e:5f:37:a0:03:3d:70:b7:f2:7f:
                    ba:a6:2b:3f:7f:8a:d7:d4:63:35:b4:d5:56:2b:1f:
                    5d:0c:aa:bf:9d:b0:cd:77:43:96:d9:a1:0c:80:08:
                    ae:9f:5f:5a:49:0c:f9:cd:5f:ab:26:c5:c8:a8:4a:
                    e1:7b:59:e6:7a:e3:da:43:df:94:1c:f1:8d:7c:00:
                    a1:9f:f0:e1:11:2b:04:16:37:ae:b2:35:63:3f:62:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:84:B3:99:92:3D:CD:39:9E:97:F4:2C:F6:B5:A5:52:F8:E6:BF:DD
            X509v3 Authority Key Identifier:
                keyid:B7:41:40:90:4E:93:42:78:1A:42:0B:98:5E:64:CC:35:CD:EF:CB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0FAkE6TQngaQguYXmTMNc3vy64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d6:da:28:b1:c5:2e:35:1d:e0:be:f7:64:8b:ad:47:25:4f:
         87:b1:9f:49:46:bf:db:66:3b:6c:2c:5c:c4:76:c5:c6:a2:c8:
         8e:a5:80:a5:c6:46:a0:f3:8b:4c:cf:1e:3e:16:31:0f:9a:e1:
         10:b9:c3:c2:69:af:37:fc:e1:de:fa:9b:07:01:ec:94:ba:74:
         4d:46:63:81:5d:37:5a:6c:9c:ec:83:06:f2:0b:fb:94:a3:43:
         86:f4:ad:de:aa:bf:b9:63:c8:00:a2:b9:5f:65:f3:27:bf:1d:
         6c:55:73:60:93:dc:f8:b0:8e:68:b8:2f:ff:8d:40:ef:cc:5b:
         26:a3:d7:24:fe:7b:92:2e:f7:4e:15:f0:5c:5b:82:8a:a3:98:
         1e:5f:b5:3e:28:4e:e0:40:95:33:9e:a8:77:78:fa:c2:41:71:
         28:31:c5:f9:1a:ca:94:55:d7:3c:0b:f0:9c:17:30:ba:6e:2a:
         cd:f5:bc:54:1f:1f:45:95:ad:31:ed:bb:2b:95:57:cc:ab:41:
         e4:d1:c4:10:40:4d:37:0a:2f:61:5b:9f:5c:8a:5e:8a:e9:72:
         88:b4:f7:b4:91:2d:4a:f4:e8:88:b3:c6:16:0e:dc:df:0b:b2:
         02:01:04:8f:16:65:f6:6a:9a:bf:11:5c:8c:01:bd:40:e9:94:
         12:92:9a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:03:45 2026 by rpki-client