Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File:                     tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier:          5RgyNbyjoe68U+McUxN+I+Q7kxBP0zdGkIAvPye5tw0=
Subject key identifier:   31:17:0C:BE:E6:D2:D8:00:C2:8D:6C:13:4A:98:03:87:11:CE:AC:38
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer:       /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial:       01A0CFDB0ED9476EE873A47AE469BFD9E573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number:          17F1
Signing time:             Wed 23 Sep 2026 20:00:34 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:34 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:34 +0000
Files and hashes:         1: 7zP-vrGMSLLfqRfiE-wgv93MQnc.roa (hash: RFbWknjP21J0ZtXdcY+/jqdLrNcb7a87Mqd1uXals1g=)
                          2: GmKON0n4q41F09JbkIeSWlYg2vg.roa (hash: MA8HRllJQ5XTGjB4uhWUi8OdDfPzCM6iy7P4PReIInE=)
                          3: XP6_BAcYWa5WMtXOqsr8Nd4YOXQ.roa (hash: koRMWG7PfVh3x7ZWhsKfazhU/Y927qVy5yPx2a20iGM=)
                          4: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: kskoqvzyCAMWdW4Q6TSNk3J2yrqxKMupQX+QjPF/u3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:db:0e:d9:47:6e:e8:73:a4:7a:e4:69:bf:d9:e5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
        Validity
            Not Before: Sep 23 20:00:34 2026 GMT
            Not After : Sep 24 20:00:34 2026 GMT
        Subject: CN=31170cbee6d2d800c28d6c134a98038711ceac38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:16:ba:73:6a:76:ed:47:c0:3c:af:f2:c9:
                    53:b6:a5:ba:b4:b2:35:b1:44:70:ae:97:a2:e8:19:
                    91:cf:1c:c5:6f:f5:48:99:24:74:a4:d8:1b:0f:ce:
                    0d:68:3b:43:b5:ca:53:13:67:bc:9f:43:1f:99:b3:
                    85:d8:44:b3:70:4b:5f:4c:13:c7:13:d0:e5:49:8f:
                    10:18:70:a2:03:df:8b:8f:a4:89:4e:a9:4a:4f:fb:
                    52:a3:7f:f5:34:a4:b5:17:a5:f7:3b:6c:96:91:18:
                    7d:fc:79:0f:11:30:96:a5:84:23:bd:a8:3d:da:da:
                    69:ca:20:1c:c0:b9:25:df:f2:d4:56:ab:7d:f8:c0:
                    91:79:ba:8a:d0:40:92:49:d8:7f:16:d1:ad:c6:09:
                    84:16:21:d2:bf:29:4a:44:eb:55:cf:b1:9c:12:af:
                    9c:ef:f1:98:2f:ec:fe:0e:e7:ef:19:b6:23:1c:1e:
                    3e:66:66:d4:d8:ee:b2:c7:b4:11:29:ed:57:7b:68:
                    46:78:bf:c1:91:85:f4:6d:90:e1:77:95:51:b5:48:
                    c2:94:21:6b:bb:e8:54:7a:1d:85:40:cf:14:d7:6f:
                    d7:5a:ec:ce:f3:d9:3c:71:a3:69:f9:cb:76:50:e5:
                    f3:74:81:cf:03:db:5d:f3:9e:b6:1d:a0:50:96:9e:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:17:0C:BE:E6:D2:D8:00:C2:8D:6C:13:4A:98:03:87:11:CE:AC:38
            X509v3 Authority Key Identifier:
                keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6f:da:51:af:d9:f8:3c:30:41:8c:74:04:c7:cc:6a:04:af:
         ca:95:d5:b8:45:f1:5a:64:f0:f2:9d:2d:aa:28:7b:d8:21:6d:
         83:92:53:61:7c:68:ba:74:61:30:9a:e1:11:f2:0e:41:7d:f3:
         3b:b0:8c:ff:15:2e:bf:97:33:f1:f6:49:a1:5f:d2:67:e9:3e:
         5f:fe:80:0d:df:7b:f2:e4:e4:48:0b:c2:a1:83:c1:12:db:70:
         7b:b6:8e:68:5b:fc:e4:1d:2a:d1:f2:ba:19:7b:68:f4:e4:3c:
         5a:14:d3:70:f0:ae:24:57:0b:d2:0a:ed:5d:86:a2:3e:c4:2f:
         6e:8a:bf:32:90:51:5c:45:3f:96:cc:f7:88:21:80:e3:2c:e3:
         80:1f:6c:d4:1f:bd:fe:21:cd:fb:de:b1:45:6f:e4:eb:ba:0c:
         f8:16:d6:70:5a:10:ce:ee:94:d3:4a:b3:e3:e8:0f:a3:8c:09:
         69:ee:83:40:e6:e5:17:df:f7:35:e5:cb:2c:a5:10:cb:ec:4b:
         21:b2:64:ca:60:1b:58:ab:99:0e:c7:cf:5b:b3:37:8e:0c:de:
         3c:8e:62:c3:b7:c4:38:07:d3:36:08:3a:d2:bd:27:ea:78:0b:
         7b:22:df:88:75:37:f1:1c:37:b4:67:00:76:7f:32:8d:72:c4:
         c6:b7:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:01:36 2026 by rpki-client