Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File:                     rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier:          IELySSF3idOmx3DOOeGLYZEpYBjtMexhLTGcdyfAnZI=
Subject key identifier:   8B:71:18:61:A4:E1:A1:C9:DF:02:90:1D:E4:2B:A9:2A:61:2A:B2:8A
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer:       /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial:       01A0CBC77EA8A9ADC37E57215116171E3DE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number:          19FC
Signing time:             Wed 23 Sep 2026 01:00:43 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:43 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:43 +0000
Files and hashes:         1: oPTsHymLci7fd09NsvXBq7O6RPk.roa (hash: LFrx4cQED0mzFhJ5bZEMbk7u2JP9cJJqjo6hpAnRfYc=)
                          2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: y+JRWzA30HpK75o9oZW467yXqkCZp0o2NZ3yPLujKzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:7e:a8:a9:ad:c3:7e:57:21:51:16:17:1e:3d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
        Validity
            Not Before: Sep 23 01:00:43 2026 GMT
            Not After : Sep 24 01:00:43 2026 GMT
        Subject: CN=8b711861a4e1a1c9df02901de42ba92a612ab28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:6e:23:76:f6:b5:5b:ac:ce:78:06:60:79:
                    7e:3c:16:9a:7d:7e:4e:d9:45:eb:ef:b9:8a:07:28:
                    58:63:7e:fc:fb:52:a1:d3:66:0b:aa:e7:86:be:67:
                    df:cf:93:17:88:22:fc:c2:73:3a:a2:c3:16:64:b5:
                    08:1f:fe:7c:86:a8:3d:8e:03:9b:de:67:d9:65:1a:
                    7f:2e:e8:cf:65:0e:f7:3a:e2:de:61:c3:5f:ea:00:
                    ca:8b:4b:bd:47:79:5d:d8:d1:b5:48:f3:eb:cb:57:
                    26:aa:78:c5:f5:4b:3f:7f:b9:a7:fb:d2:07:d6:62:
                    4a:b2:6d:a4:8d:57:0c:59:44:50:45:39:d1:3b:66:
                    e2:49:25:10:7d:e9:ff:8d:07:0a:23:1c:2f:56:63:
                    88:db:39:f8:64:7f:29:62:b7:e1:be:2e:f1:19:37:
                    0f:ec:6c:cb:7c:dc:cf:b9:d6:5c:d2:3c:ca:af:58:
                    bd:87:2e:cf:ad:64:fa:78:24:b7:a5:92:a2:51:54:
                    ec:fa:11:29:39:99:7b:43:f6:d1:d9:40:9f:39:04:
                    50:0d:e7:c1:88:1f:84:93:53:bc:5e:d5:45:63:0a:
                    02:e8:85:25:76:85:25:84:4b:7a:9e:1e:4d:76:25:
                    05:19:68:02:27:a0:dc:ea:fd:42:4f:51:5f:25:9c:
                    4c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:71:18:61:A4:E1:A1:C9:DF:02:90:1D:E4:2B:A9:2A:61:2A:B2:8A
            X509v3 Authority Key Identifier:
                keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:54:33:c9:28:64:f3:78:8f:03:a2:d8:90:61:67:4b:22:
         d4:43:55:d0:41:47:2c:e6:7c:88:2d:f4:9a:e4:3e:e3:6b:33:
         14:98:ba:46:ad:6f:47:91:b2:01:09:ee:0d:21:4b:dd:f6:28:
         17:d7:4d:c7:25:32:c3:fb:a4:26:21:64:42:8a:6b:db:b8:56:
         d5:c4:52:83:83:ee:73:d5:2d:6b:93:a6:cc:31:7e:14:59:f1:
         86:b5:5d:0f:f2:6f:2c:d2:93:bf:60:1d:df:0e:72:9a:37:39:
         71:d1:de:ed:8f:b6:6e:b3:cd:d7:cc:c4:61:c5:c9:bf:d1:28:
         6d:67:7a:57:c1:e3:8c:58:0b:f0:67:16:66:7f:73:7b:d8:95:
         6f:83:c6:5a:18:ea:e2:7c:81:a6:cb:07:69:ed:63:b8:8f:ee:
         79:b3:de:15:77:9f:b0:57:3c:20:7c:e2:ae:4a:43:e4:d2:7a:
         44:01:48:06:4e:c7:a4:bd:48:b7:4c:2a:57:7a:53:16:e0:85:
         f6:91:ee:a7:15:a0:c2:7a:79:3c:2e:cc:16:40:c2:26:75:58:
         b3:a1:85:be:46:55:65:79:d4:97:16:33:3b:e8:aa:38:d1:a0:
         32:89:ca:69:c4:3f:cf:73:be:2c:8e:76:08:b1:7c:4a:06:38:
         90:12:83:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLx36oqa3DflchURYXHj3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDk1MDNmY2FjMDE3Njk1MTVhMTlmMmRjMjY1N2Q5MmZk
MzUwZGYwHhcNMjYwOTIzMDEwMDQzWhcNMjYwOTI0MDEwMDQzWjAzMTEwLwYDVQQD
Eyg4YjcxMTg2MWE0ZTFhMWM5ZGYwMjkwMWRlNDJiYTkyYTYxMmFiMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi5uI3b2tVuszngGYHl+PBaafX5O
2UXr77mKByhYY378+1Kh02YLqueGvmffz5MXiCL8wnM6osMWZLUIH/58hqg9jgOb
3mfZZRp/LujPZQ73OuLeYcNf6gDKi0u9R3ld2NG1SPPry1cmqnjF9Us/f7mn+9IH
1mJKsm2kjVcMWURQRTnRO2biSSUQfen/jQcKIxwvVmOI2zn4ZH8pYrfhvi7xGTcP
7GzLfNzPudZc0jzKr1i9hy7PrWT6eCS3pZKiUVTs+hEpOZl7Q/bR2UCfOQRQDefB
iB+Ek1O8XtVFYwoC6IUldoUlhEt6nh5NdiUFGWgCJ6Dc6v1CT1FfJZxMcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItxGGGk4aHJ3wKQHeQrqSphKrKKMB8GA1UdIwQY
MBaAFK8JUD/KwBdpUVoZ8twmV9kv01DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndsUVA4ckFGMmxSV2hueTNDWlgyU19UVU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wZDEwODktZDk2Ny00M2I1LWJjMzAt
MTc1MDJkM2RmOTVmLzEvcndsUVA4ckFGMmxSV2hueTNDWlgyU19UVU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wZDEwODktZDk2Ny00M2I1LWJjMzAtMTc1MDJkM2RmOTVm
LzEvcndsUVA4ckFGMmxSV2hueTNDWlgyU19UVU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGxUM8ko
ZPN4jwOi2JBhZ0si1ENV0EFHLOZ8iC30muQ+42szFJi6Rq1vR5GyAQnuDSFL3fYo
F9dNxyUyw/ukJiFkQopr27hW1cRSg4Puc9Uta5OmzDF+FFnxhrVdD/JvLNKTv2Ad
3w5ymjc5cdHe7Y+2brPN18zEYcXJv9EobWd6V8HjjFgL8GcWZn9ze9iVb4PGWhjq
4nyBpssHae1juI/uebPeFXefsFc8IHzirkpD5NJ6RAFIBk7HpL1It0wqV3pTFuCF
9pHupxWgwnp5PC7MFkDCJnVYs6GFvkZVZXnUlxYzO+iqONGgMonKacQ/z3O+LI52
CLF8SgY4kBKD/Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:37:16 2026 by rpki-client