Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
File:                     TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json)
Hash identifier:          ZQUzINd99/K5GF19ngoz8qfBGkxET0JZXq30Hg9uziE=
Subject key identifier:   CB:3C:5B:9D:E3:BF:26:01:7E:E7:04:19:29:DA:B9:72:84:7C:A1:A2
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Certificate issuer:       /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial:       01A0D314D799C090BF7455AFCB795A41CF27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 11:02:33 +0000
Manifest this update:     Thu 24 Sep 2026 11:02:33 +0000
Manifest next update:     Fri 25 Sep 2026 11:02:33 +0000
Files and hashes:         1: 665tLmaCcMewxouqGyV9AcCyzHQ.roa (hash: q0YXAbJvDBEEtJJ3Km15Pnm2Ou6SZOvu9jgXiMCzq2o=)
                          2: C7Heg8nbJh5gPNx3smEmsF9i1rg.roa (hash: tvX4saAC2lDOGizl6LS7T8WHcp1UVuikBaA2xfEmzko=)
                          3: HvD-KyEebZg0h4HW06zJm6RwnGU.roa (hash: VtrmuoyXYF78h8UEa9MliL+Xy0F2Gl7FRj7/hpHAjYA=)
                          4: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: Af9GyYwAzt/lWVrhzJyCMhU1H26/wlUz1gs+X6EUTmE=)
                          5: Vka3aB9XlaAZaXatPcABq9MMMZ8.asa (hash: 2gWes96a72UxE1XgEF2/Y4kVdM/LCqKAtV5HrBf3vqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:14:d7:99:c0:90:bf:74:55:af:cb:79:5a:41:cf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
        Validity
            Not Before: Sep 24 11:02:33 2026 GMT
            Not After : Sep 25 11:02:33 2026 GMT
        Subject: CN=cb3c5b9de3bf26017ee7041929dab972847ca1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0d:65:ea:d1:8a:99:21:e3:06:e6:99:e6:50:
                    7b:98:03:18:bf:57:79:9c:1b:d5:44:cb:f3:94:09:
                    b7:80:76:48:6a:e5:16:83:f5:9e:a2:81:59:ef:31:
                    9f:d7:c8:bc:67:47:10:98:27:c2:30:2e:01:d4:ee:
                    82:05:25:bc:33:87:ea:7a:1d:f7:de:d4:57:af:71:
                    74:00:06:93:92:8e:73:f8:7a:dd:99:64:52:08:d0:
                    9a:b9:a5:cd:c6:39:3f:ab:86:af:d2:e6:d1:38:ec:
                    ef:74:a0:c3:42:e4:6a:a1:72:1c:0e:42:56:e3:ee:
                    b8:f1:e7:e5:83:b3:42:84:d3:8f:fe:93:a0:59:72:
                    8c:36:a5:3a:fe:bb:39:4e:02:17:66:14:13:22:86:
                    3f:73:10:91:71:54:21:5c:85:87:c2:6a:29:b6:5f:
                    4c:36:b0:64:af:f8:64:e9:11:e9:dd:27:0a:1e:7f:
                    6f:6b:2f:79:2e:51:db:9e:fd:b4:c0:44:c5:29:07:
                    04:1d:25:c2:61:21:ff:1f:78:d2:7f:2e:96:96:a7:
                    47:1c:e7:e4:d4:88:b1:50:b4:d9:45:cc:98:46:c1:
                    cd:be:07:00:92:0a:03:ad:a3:03:2f:0f:54:42:d1:
                    ec:a9:4a:38:da:83:41:59:f8:f8:30:40:ee:da:8b:
                    0b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3C:5B:9D:E3:BF:26:01:7E:E7:04:19:29:DA:B9:72:84:7C:A1:A2
            X509v3 Authority Key Identifier:
                keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:ae:be:61:1b:de:4d:cc:0a:24:b1:1c:1f:cc:44:76:76:
         89:17:2c:31:87:ca:67:7c:83:c2:47:e3:44:61:d5:61:36:de:
         1f:6b:2b:cd:ee:1b:a4:9b:d9:e5:a3:85:4c:9d:8c:c5:4e:ad:
         14:af:0e:a0:09:b3:66:c0:76:34:b3:f2:95:fa:62:81:af:8b:
         95:a7:0d:84:3b:ca:61:43:c5:89:37:61:b9:16:bd:11:e4:85:
         f6:c9:e3:60:84:bd:78:13:a3:c5:9a:94:2b:e6:d5:21:51:2f:
         24:12:ba:09:3b:b4:da:62:30:1a:34:2e:7b:65:f1:5c:99:39:
         75:73:50:4c:e3:4c:61:e2:88:19:a1:4c:82:ba:3a:bb:95:f1:
         f5:71:a6:32:fc:fa:0c:e0:fd:b7:8d:c5:9f:ef:27:98:07:f6:
         ff:9d:4d:68:94:8a:76:70:0d:4d:7e:19:8e:d6:3f:79:f3:06:
         8c:6e:6b:3f:14:98:27:ad:4a:ce:64:ec:8d:76:0f:07:4c:93:
         59:01:a6:93:c5:6c:4a:1e:8b:9a:a1:2d:f9:de:e4:d5:3f:c1:
         b4:bf:24:fe:8b:e3:db:6c:04:77:0a:50:2c:88:4e:c2:a3:76:
         ff:56:77:4b:96:ab:af:f7:88:5e:95:e7:62:94:a1:90:8c:48:
         f6:44:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:27:12 2026 by rpki-client