Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File:                     TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier:          A1xezc90eyc3SCpQCpB+2337aaKTE4JWDtKy7+2Cgyc=
Subject key identifier:   E1:45:FC:46:C0:DA:8D:BE:80:A5:67:10:10:39:33:2B:03:DB:E1:79
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer:       /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial:       01A10DA746DA8F8FCB53A884B21932C478A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number:          1A8E
Signing time:             Mon 05 Oct 2026 20:00:28 +0000
Manifest this update:     Mon 05 Oct 2026 20:00:28 +0000
Manifest next update:     Tue 06 Oct 2026 20:00:28 +0000
Files and hashes:         1: 2k317uytVg1LgjGnM4csFnuL6uw.roa (hash: X5Q8tV/hqbcuK15v8loayY7mcbXwTofvZ2nrjL9ZwFs=)
                          2: RQBMarFkU3OrDTBkZypKiOwxqg8.roa (hash: WhhYg2h0zkcqk2yaFPJERRYww67tY59hAk64ZXv/RAg=)
                          3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: mhp2e47R0jLfZDzXpjjvkapq7eCFGc9+zgS7XHUFvGY=)
                          4: v9i47anpnbrdLEZ-n1nwTrZVjyg.roa (hash: z6aINaroQHvMvD3JovJtp4EHLXzys7G2ZYIjVrJrEgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:a7:46:da:8f:8f:cb:53:a8:84:b2:19:32:c4:78:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
        Validity
            Not Before: Oct  5 20:00:28 2026 GMT
            Not After : Oct  6 20:00:28 2026 GMT
        Subject: CN=e145fc46c0da8dbe80a567101039332b03dbe179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:da:9d:2b:34:8b:11:6a:74:c6:53:4f:d2:d5:
                    43:60:06:8b:e7:4d:7e:5b:36:46:5c:9b:72:c6:c6:
                    d9:08:82:74:8d:b4:2c:a1:6b:33:01:04:47:b2:2e:
                    ce:21:44:b8:3b:5d:c4:af:5a:0f:3c:b5:07:16:18:
                    4b:41:22:6f:a7:26:41:a2:da:4a:52:04:03:b5:66:
                    ac:29:ad:af:99:1b:81:25:17:65:c1:23:ce:19:9c:
                    4e:d2:20:4a:6e:8f:72:8d:06:1d:9b:c7:36:e2:a8:
                    ad:ed:51:6d:7f:a8:7c:0d:c1:78:53:8e:7a:94:3c:
                    67:ee:6b:31:9c:f0:b3:b1:61:c7:8f:d9:e0:41:b0:
                    a7:ac:bd:22:a9:9f:c5:87:d0:84:05:8d:54:3d:5f:
                    ad:fa:0a:f4:43:86:1e:2a:d0:28:a7:44:b0:a7:c8:
                    94:8b:4d:4b:63:64:54:a3:0f:38:fe:14:0a:5e:c2:
                    e9:70:40:72:1a:48:da:cf:9c:4d:b4:46:27:68:ce:
                    9a:57:4b:3c:43:eb:90:b9:1e:43:e7:4c:01:cd:01:
                    99:cb:83:7c:e0:c8:65:71:b5:6e:66:72:f0:19:0e:
                    69:4a:bd:9d:60:76:70:1c:d4:64:b5:c8:e0:b4:cc:
                    0a:0b:af:16:28:b8:33:cf:ed:a6:60:0a:45:c6:a5:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:45:FC:46:C0:DA:8D:BE:80:A5:67:10:10:39:33:2B:03:DB:E1:79
            X509v3 Authority Key Identifier:
                keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:f7:ed:4c:1f:86:f6:fe:65:83:f9:01:79:2c:16:89:5e:
         fe:3f:26:0a:c8:68:7c:3b:2b:b3:48:32:5c:04:b0:c5:c5:df:
         92:39:8c:4f:4a:d3:19:68:e3:75:38:45:4e:52:61:e4:af:6e:
         2a:dd:f2:9e:77:9c:32:11:39:1a:7c:82:3f:22:ce:64:a3:e4:
         ae:f6:4e:53:26:aa:2e:38:4c:08:5e:66:31:f5:29:39:b6:d4:
         89:c3:f4:d5:58:c2:7b:6e:b9:b4:d8:c7:8c:6b:bc:8c:55:5d:
         9f:31:ec:de:66:26:29:87:8b:34:b6:f1:5f:8c:3f:df:8c:40:
         2d:50:79:8a:76:87:cc:75:8e:a6:42:1b:94:ae:29:85:df:27:
         a8:dc:d4:a9:4e:e6:3b:4f:e4:90:ad:ab:2f:e4:48:7d:04:da:
         85:58:17:fb:66:53:c1:f3:f2:7f:d8:4c:f7:ca:3f:22:bf:4f:
         d3:50:00:64:86:ec:f0:13:72:48:0a:b0:25:c2:74:20:b3:3f:
         a1:74:d7:7f:96:c8:98:09:27:21:d1:6b:8a:21:c3:2c:6b:aa:
         47:f5:44:76:23:2b:d0:7e:6b:52:a1:f1:16:18:b5:8c:a8:45:
         22:8c:04:af:2d:a7:b8:1c:d3:67:7e:97:b7:07:83:36:d4:b2:
         09:9b:31:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 23:43:46 2026 by rpki-client