Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
File:                     Txf-YMOq5IFd21vYFp7wiLD_iAA.mft (raw, json)
Hash identifier:          TFw57ihnUrpWiLpTbdTZwC1BbnzyITu4OALg0N9n13U=
Subject key identifier:   E3:D5:A0:1E:39:2C:50:CF:B8:30:4A:AD:4D:30:90:29:05:3C:8E:7E
Authority key identifier: 4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00
Certificate issuer:       /CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
Certificate serial:       01A0D5DEFD9F125432BF19381681F5AD2498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
Manifest number:          016F
Signing time:             Fri 25 Sep 2026 00:02:35 +0000
Manifest this update:     Fri 25 Sep 2026 00:02:35 +0000
Manifest next update:     Sat 26 Sep 2026 00:02:35 +0000
Files and hashes:         1: 8QmLJNa-_EnzDtcCcd2zqbb73Z8.asa (hash: E1mQECWPw1tiHBtWESa7EJB6He3X4+7LGeXYc5u2GM4=)
                          2: Txf-YMOq5IFd21vYFp7wiLD_iAA.crl (hash: DXjJonSJz+je4/QwJ1JW9cG0ODQCjnaG0IV+m68e65A=)
                          3: sfOsjn-CrEsbuGZfo_GU02Seuc0.roa (hash: QuCtUcV2rfjyf/avZCog8Qa9or52pG6qZ7ZDsQCk2sE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:fd:9f:12:54:32:bf:19:38:16:81:f5:ad:24:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
        Validity
            Not Before: Sep 25 00:02:35 2026 GMT
            Not After : Sep 26 00:02:35 2026 GMT
        Subject: CN=e3d5a01e392c50cfb8304aad4d309029053c8e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:bb:67:6a:85:05:e8:06:20:46:47:17:9c:
                    e4:fa:e9:54:4c:fb:4a:d1:b7:aa:45:17:b9:31:86:
                    b0:90:25:22:df:e0:58:1d:44:7d:2a:cd:1d:4a:44:
                    0c:17:da:e1:f4:9c:c1:a3:a0:94:9e:95:e5:2b:4e:
                    f7:51:36:c6:9e:95:ee:cd:99:26:bd:55:cf:e1:cd:
                    95:3a:c5:ca:b9:c8:2b:e5:61:1f:ac:85:bb:2c:2c:
                    ef:a2:4d:14:04:31:fa:13:24:1c:b8:ad:34:ca:9b:
                    31:4d:6a:57:27:97:cd:bc:50:69:a7:c0:58:94:fd:
                    ed:01:6e:09:e5:4d:2c:a4:4a:5f:c3:90:b8:d0:c4:
                    a7:7d:35:0c:7d:4a:4f:61:63:b3:86:fa:03:45:e9:
                    c1:fd:50:ae:93:98:1a:d3:75:4e:3f:16:f9:ac:93:
                    25:c6:b0:fa:d8:fb:5c:d0:d8:fe:63:2b:a5:b0:69:
                    d6:b7:d1:4c:f8:f5:df:35:cc:b2:f8:79:64:cb:c3:
                    b6:6d:17:d1:49:af:be:56:68:2a:05:01:1b:a0:85:
                    bc:0e:09:02:ac:f6:f6:51:17:e2:4d:8c:64:1a:ca:
                    df:ac:ba:cc:72:2e:08:39:bc:a9:96:5b:38:7c:40:
                    a0:a5:22:83:26:6d:c7:df:fb:7e:29:6c:20:1f:85:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D5:A0:1E:39:2C:50:CF:B8:30:4A:AD:4D:30:90:29:05:3C:8E:7E
            X509v3 Authority Key Identifier:
                keyid:4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4e:f2:2b:d7:6d:73:dd:6a:a9:f5:0f:f1:3f:c0:41:67:c5:
         36:b0:50:34:fe:83:f0:d9:c3:85:75:5f:e0:77:f9:e9:30:76:
         0f:92:c1:44:63:3f:c8:4e:de:8b:ff:e8:cd:ab:a5:b8:ca:36:
         41:e5:e9:68:f1:9d:59:8e:d2:c2:30:ca:1a:5b:8f:10:f3:f8:
         d2:16:e9:5b:34:6b:f2:7e:9e:32:3a:ae:17:77:b5:19:e6:5f:
         d2:f6:a2:1a:4d:7e:27:6f:98:c9:08:39:d8:a1:f2:a0:26:03:
         5f:45:fa:13:3f:93:4b:94:98:58:58:56:3f:fa:a6:71:b7:9c:
         d4:20:eb:a8:3f:c7:0e:c5:20:a2:3d:30:14:01:3a:a1:18:29:
         ef:fc:9f:cc:bf:52:f4:42:94:91:9b:9c:e0:84:ca:14:a3:1e:
         76:be:ec:c9:68:48:4b:4e:0a:bf:4d:68:c9:26:5b:a6:9d:3e:
         0f:65:b1:11:1e:dc:d3:64:68:53:79:55:4d:66:95:0c:19:e1:
         0f:5b:47:cb:c1:65:64:73:af:09:94:2c:81:29:8c:0c:9d:2f:
         7a:05:cf:17:03:c7:22:83:11:de:c7:4c:32:0a:82:aa:1b:d0:
         af:81:78:fb:f3:90:81:56:88:0e:cb:a2:0a:31:e8:4c:06:d1:
         31:cd:92:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3v2fElQyvxk4FoH1rSSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTdmZTYwYzNhYWU0ODE1ZGRiNWJkODE2OWVmMDg4YjBm
Zjg4MDAwHhcNMjYwOTI1MDAwMjM1WhcNMjYwOTI2MDAwMjM1WjAzMTEwLwYDVQQD
EyhlM2Q1YTAxZTM5MmM1MGNmYjgzMDRhYWQ0ZDMwOTAyOTA1M2M4ZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzS7Z2qFBegGIEZHF5zk+ulUTPtK
0beqRRe5MYawkCUi3+BYHUR9Ks0dSkQMF9rh9JzBo6CUnpXlK073UTbGnpXuzZkm
vVXP4c2VOsXKucgr5WEfrIW7LCzvok0UBDH6EyQcuK00ypsxTWpXJ5fNvFBpp8BY
lP3tAW4J5U0spEpfw5C40MSnfTUMfUpPYWOzhvoDRenB/VCuk5ga03VOPxb5rJMl
xrD62Ptc0Nj+YyulsGnWt9FM+PXfNcyy+Hlky8O2bRfRSa++VmgqBQEboIW8DgkC
rPb2URfiTYxkGsrfrLrMci4IObyplls4fECgpSKDJm3H3/t+KWwgH4XWzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPVoB45LFDPuDBKrU0wkCkFPI5+MB8GA1UdIwQY
MBaAFE8X/mDDquSBXdtb2Bae8Iiw/4gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhmLVlNT3E1SUZkMjF2WUZwN3dpTERfaUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzU4ZDQtN2E3My00ZDYyLWFmODYt
MjZmMDY2NjU5MGVkLzEvVHhmLVlNT3E1SUZkMjF2WUZwN3dpTERfaUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzU4ZDQtN2E3My00ZDYyLWFmODYtMjZmMDY2NjU5MGVk
LzEvVHhmLVlNT3E1SUZkMjF2WUZwN3dpTERfaUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlE7yK9dt
c91qqfUP8T/AQWfFNrBQNP6D8NnDhXVf4Hf56TB2D5LBRGM/yE7ei//ozauluMo2
QeXpaPGdWY7SwjDKGluPEPP40hbpWzRr8n6eMjquF3e1GeZf0vaiGk1+J2+YyQg5
2KHyoCYDX0X6Ez+TS5SYWFhWP/qmcbec1CDrqD/HDsUgoj0wFAE6oRgp7/yfzL9S
9EKUkZuc4ITKFKMedr7syWhIS04Kv01oySZbpp0+D2WxER7c02RoU3lVTWaVDBnh
D1tHy8FlZHOvCZQsgSmMDJ0vegXPFwPHIoMR3sdMMgqCqhvQr4F4+/OQgVaIDsui
CjHoTAbRMc2Sfw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:16:25 2026 by rpki-client