Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File:                     TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier:          yu9DfxBu5BAK68M+4mqdaQhdT4/woBGKdMsJERF4VFs=
Subject key identifier:   B1:59:53:62:92:3F:BA:F4:32:D6:F8:7D:2B:5E:D9:43:49:A3:EF:AA
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer:       /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial:       01A10BF04F75AE3FCEEF87E2D2919F89F4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number:          1A8F
Signing time:             Mon 05 Oct 2026 12:01:00 +0000
Manifest this update:     Mon 05 Oct 2026 12:01:00 +0000
Manifest next update:     Tue 06 Oct 2026 12:01:00 +0000
Files and hashes:         1: 9nRBo0Yomhpgm9TNkjDZWwhznG4.roa (hash: JVKW/CXhEruKd4nkDT8EtdFwFBbGNGwV/vGyVQso2YA=)
                          2: CJ1p60ncJ6lwmkba6tzp8PwUtGA.roa (hash: Fs77R9OF/tCUM07EJYitJlab1am9Hn64q8ob0oebDkA=)
                          3: PabEzo_xhzNh86GJKwujZAVSaKY.roa (hash: KpQX2bvuJbagEXNR3/7qIg5Rru1wDlXdCAjMjXG/6Mc=)
                          4: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: 35E5au+UtCOMETCaGiU25Ol+74YgJwFXLCMKSNYzBEI=)
                          5: fTj8VjA3jlGkhYbcidRdlQKvw2s.roa (hash: jRzOWOgwnHuf2EMT7ZgwseHhtj6/xt+nW051JNR2aY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0b:f0:4f:75:ae:3f:ce:ef:87:e2:d2:91:9f:89:f4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
        Validity
            Not Before: Oct  5 12:01:00 2026 GMT
            Not After : Oct  6 12:01:00 2026 GMT
        Subject: CN=b1595362923fbaf432d6f87d2b5ed94349a3efaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:09:e7:a2:4f:a9:9d:b4:1c:b4:03:3d:98:
                    70:84:b9:78:19:cd:fe:46:65:e8:c3:f2:3b:48:a6:
                    cc:08:f2:7d:7c:3d:55:f9:88:11:fc:ca:ad:0e:f3:
                    a8:88:67:a7:5e:d2:3e:3c:4b:a3:1f:81:53:cd:3f:
                    22:40:9d:5e:a0:03:6b:bd:53:78:97:d6:f5:28:70:
                    c9:da:56:e2:98:98:ed:1b:41:e1:bf:74:97:3b:b8:
                    80:da:2b:30:1f:87:7d:f3:35:9f:d2:9d:a1:24:14:
                    a0:48:50:b4:cb:2f:8e:c8:a0:e0:63:e0:fe:64:22:
                    66:5c:c4:3d:19:fc:1f:57:a5:40:a4:7f:38:7d:a8:
                    08:61:b8:80:1c:2e:e6:af:47:53:95:09:32:38:d9:
                    29:03:ec:08:96:0d:4a:ec:5a:e8:a2:25:13:4e:6c:
                    b3:6e:49:8f:43:f3:87:ff:49:b3:09:d3:79:bb:fa:
                    6a:72:d8:3a:e1:aa:8e:8f:72:ee:99:31:5f:5f:e1:
                    e6:95:37:4d:76:64:ff:fd:d4:44:7c:d3:c7:5b:6c:
                    48:70:f6:e9:4a:cc:df:dd:26:a3:07:13:ad:6f:d0:
                    94:e8:e5:9f:36:fe:dc:de:f5:5b:17:0d:4a:69:8d:
                    fc:09:3b:33:0c:9c:c5:71:e4:4e:d8:02:32:aa:31:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:59:53:62:92:3F:BA:F4:32:D6:F8:7D:2B:5E:D9:43:49:A3:EF:AA
            X509v3 Authority Key Identifier:
                keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c2:64:d5:25:56:f6:27:99:fb:4e:bb:6c:50:30:f9:6c:84:
         3e:9f:ad:ae:65:2a:c6:93:4a:9a:ad:dc:fb:f1:8a:64:76:08:
         b5:48:b8:dd:96:c2:ac:84:ee:46:93:56:cf:17:83:58:b6:cc:
         69:67:71:e7:b7:2f:af:7d:f8:db:9f:fe:28:a4:af:72:8b:f8:
         20:26:84:3e:17:b9:ff:24:7b:c1:87:23:59:7a:e0:4f:27:aa:
         aa:9f:e0:0c:bf:50:db:cc:02:13:2e:98:3a:8a:50:60:3f:c1:
         dd:88:5c:dd:2d:30:79:5d:88:1b:1d:34:45:8f:87:30:35:d4:
         4c:32:7d:e2:51:55:ce:61:a6:46:61:a3:8f:01:6e:f5:a0:39:
         7a:fa:22:24:e6:8e:f3:f2:f6:c2:e8:88:38:2c:da:22:7b:1e:
         35:88:22:bd:02:6e:f4:c4:65:8f:9a:07:83:48:89:8d:fd:8d:
         a9:24:9c:15:86:69:24:4a:c4:b2:df:a1:9f:36:e0:f7:44:ad:
         9c:69:59:fa:cd:7a:d1:a3:33:71:e6:f8:0d:17:b2:e6:c2:65:
         18:8c:dc:e7:49:7c:67:18:78:eb:e9:aa:8e:03:d7:d9:d4:e5:
         ec:fb:cf:16:18:88:88:c7:90:dc:c8:d3:80:3b:52:d7:f6:fb:
         7b:6d:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:56:37 2026 by rpki-client