Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File:                     TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier:          o6vgleWwAvpjbKttszOwKj4ifpW0hQQ4e7Bm4KmPOQg=
Subject key identifier:   05:E6:27:06:02:56:44:CD:3B:98:38:C2:0E:6C:02:24:45:13:2A:13
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer:       /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial:       01A1054982B826CDA3D199A325563E4EC3C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number:          1A85
Signing time:             Sun 04 Oct 2026 05:01:05 +0000
Manifest this update:     Sun 04 Oct 2026 05:01:05 +0000
Manifest next update:     Mon 05 Oct 2026 05:01:05 +0000
Files and hashes:         1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: U6dWjyn/hGkb9nLoSyW3m9ibX08YSp0gFgLUUuTDctc=)
                          2: pBnqzIAytKpHQhX8QDpU_OY1RKw.roa (hash: pra/+hq5WQ/StXcBlep+m5KO06sTkTgn3LjOqqbBjzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:49:82:b8:26:cd:a3:d1:99:a3:25:56:3e:4e:c3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
        Validity
            Not Before: Oct  4 05:01:05 2026 GMT
            Not After : Oct  5 05:01:05 2026 GMT
        Subject: CN=05e62706025644cd3b9838c20e6c022445132a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:fb:d1:54:5f:fe:fe:8d:c3:8e:fc:79:81:
                    5d:67:b4:ad:75:5a:84:e6:69:65:6c:55:61:d9:38:
                    a3:32:e2:f5:4f:f0:45:9f:bc:ff:b6:c7:b0:81:a2:
                    b7:b8:01:ef:3b:df:b3:65:ea:f7:ae:d5:30:50:1b:
                    1c:ae:4c:4c:c2:42:79:90:96:57:61:fc:3c:ec:34:
                    17:75:22:d8:24:18:23:1b:25:7b:b3:de:63:e5:58:
                    85:ef:e3:83:8d:a8:1f:7b:5d:99:c9:4f:62:27:84:
                    08:f0:b2:87:e3:68:7f:13:4d:4a:65:65:c8:db:00:
                    47:e7:0d:fc:fc:8d:f0:88:00:f4:e8:c5:90:63:fa:
                    a1:5e:11:a7:b2:33:ac:2b:02:61:de:9d:c8:a6:93:
                    c6:20:03:ba:9d:b1:b7:e5:fc:22:a5:f3:ee:9d:8d:
                    9f:89:7c:01:f1:9e:fa:71:29:f3:83:5f:92:23:1b:
                    99:86:b2:0f:22:91:ca:90:c1:f3:9d:d0:42:d1:09:
                    59:0f:dc:f5:19:cc:af:2a:3f:6e:c9:06:ad:1e:b5:
                    c6:05:f9:83:8d:55:e2:e2:3c:06:88:30:14:7b:90:
                    66:21:a4:fa:bb:3d:91:5f:66:f9:b0:36:de:b7:1e:
                    58:91:6d:e9:81:02:24:63:af:4f:c0:bb:27:58:d5:
                    30:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E6:27:06:02:56:44:CD:3B:98:38:C2:0E:6C:02:24:45:13:2A:13
            X509v3 Authority Key Identifier:
                keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3f:a0:74:49:c4:b3:54:10:8f:44:80:b6:7c:80:81:c6:3f:
         3b:1b:93:9c:fa:42:75:6b:65:cd:26:95:8f:cd:87:cf:52:0d:
         c4:1c:c6:92:a3:89:66:93:d6:86:6d:d0:50:c7:d2:5f:54:7c:
         85:ac:18:fb:54:c8:64:c9:40:79:b0:f3:d2:31:56:3e:d3:32:
         f1:84:31:1a:23:e6:86:7e:4d:a4:ac:3e:13:f1:94:25:da:5f:
         5e:1c:a3:e9:f7:8d:05:e7:81:a7:77:7e:44:78:37:bd:cd:97:
         48:e7:e0:73:bb:a9:0c:da:96:05:0f:a1:5c:86:22:90:a0:4c:
         ed:4d:0b:f9:59:64:e0:d7:d5:41:15:6f:7d:43:58:cd:3f:e2:
         b9:af:a2:89:43:e2:65:e2:9b:b0:d9:27:8a:cc:d0:76:ed:69:
         1e:ce:52:42:6a:02:ee:1f:2d:8b:53:63:4d:aa:37:79:c5:64:
         47:0a:4f:c5:2a:62:5d:9b:b7:da:1a:25:ee:3f:4f:ea:f0:cf:
         db:2b:f1:43:f1:da:26:12:71:8c:4e:79:41:d6:f5:c8:f5:36:
         fb:8a:52:85:da:70:5f:99:d0:8b:8a:4a:c1:cd:02:69:91:7c:
         2f:4a:0f:c6:04:73:1c:55:f9:96:c8:c1:1b:76:a1:5d:31:ec:
         0a:54:a4:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEFSYK4Js2j0ZmjJVY+TsPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2E3MWE3N2Y0Y2E5YmE1MzZmOTg2MTJhOWM1NmQ0MGMw
YzNiOWQwHhcNMjYxMDA0MDUwMTA1WhcNMjYxMDA1MDUwMTA1WjAzMTEwLwYDVQQD
EygwNWU2MjcwNjAyNTY0NGNkM2I5ODM4YzIwZTZjMDIyNDQ1MTMyYTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8370VRf/v6Nw478eYFdZ7StdVqE
5mllbFVh2TijMuL1T/BFn7z/tsewgaK3uAHvO9+zZer3rtUwUBscrkxMwkJ5kJZX
Yfw87DQXdSLYJBgjGyV7s95j5ViF7+ODjagfe12ZyU9iJ4QI8LKH42h/E01KZWXI
2wBH5w38/I3wiAD06MWQY/qhXhGnsjOsKwJh3p3IppPGIAO6nbG35fwipfPunY2f
iXwB8Z76cSnzg1+SIxuZhrIPIpHKkMHzndBC0QlZD9z1GcyvKj9uyQatHrXGBfmD
jVXi4jwGiDAUe5BmIaT6uz2RX2b5sDbetx5YkW3pgQIkY69PwLsnWNUwlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXmJwYCVkTNO5g4wg5sAiRFEyoTMB8GA1UdIwQY
MBaAFE06cad/TKm6U2+YYSqcVtQMDDudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAt
NjUwNzliNzU4NjhhLzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAtNjUwNzliNzU4Njhh
LzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgz+gdEnE
s1QQj0SAtnyAgcY/OxuTnPpCdWtlzSaVj82Hz1INxBzGkqOJZpPWhm3QUMfSX1R8
hawY+1TIZMlAebDz0jFWPtMy8YQxGiPmhn5NpKw+E/GUJdpfXhyj6feNBeeBp3d+
RHg3vc2XSOfgc7upDNqWBQ+hXIYikKBM7U0L+Vlk4NfVQRVvfUNYzT/iua+iiUPi
ZeKbsNkniszQdu1pHs5SQmoC7h8ti1NjTao3ecVkRwpPxSpiXZu32hol7j9P6vDP
2yvxQ/HaJhJxjE55Qdb1yPU2+4pShdpwX5nQi4pKwc0CaZF8L0oPxgRzHFX5lsjB
G3ahXTHsClSkHQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:42:50 2026 by rpki-client