Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File:                     tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier:          Jc0P6qzlug2KSNsc1kBr4xKPpjTL01QlDSwDJb/UvTQ=
Subject key identifier:   9E:3F:39:A2:5D:5A:3F:19:9F:EF:5C:71:49:00:83:20:C0:43:C8:23
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer:       /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial:       01A1092689203DA214BEB407FA49F4C64AD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number:          1A91
Signing time:             Sun 04 Oct 2026 23:01:22 +0000
Manifest this update:     Sun 04 Oct 2026 23:01:22 +0000
Manifest next update:     Mon 05 Oct 2026 23:01:22 +0000
Files and hashes:         1: fK9aO2I8AtgF0c0rdh_GX4O4_G4.roa (hash: u0RKyLKqUhdTzKSmpaGBlbuO8M5rtJXGLGs1u6N9C1g=)
                          2: nUmXXOPkWjccJgN8O22tzPhWVlA.roa (hash: UqKB7riKgf3jbIKMj8rldXeyuF7eaO+XqFxWCXQioCw=)
                          3: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: 14sDOwKba4CM1YYAKgtilze8RuPmJjpZwYDp5TqJs74=)
                          4: xYSs50B2xtsvWdJxMD0UuyzwnRE.roa (hash: wUK1v8a3MmWnPSffQ5f8oxAVVqstmvh7KosqvxbaO78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:09:26:89:20:3d:a2:14:be:b4:07:fa:49:f4:c6:4a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
        Validity
            Not Before: Oct  4 23:01:22 2026 GMT
            Not After : Oct  5 23:01:22 2026 GMT
        Subject: CN=9e3f39a25d5a3f199fef5c7149008320c043c823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:d0:67:42:91:e7:33:cd:7f:ce:95:c8:0d:
                    c0:ca:81:57:a4:8d:f8:4d:65:57:03:e0:7b:41:d3:
                    ee:0d:9a:dd:90:58:fb:0f:df:5e:61:c2:b5:fc:f9:
                    f0:91:6b:11:9d:39:e2:47:2e:5c:23:8b:37:df:9e:
                    f2:7a:c2:a4:94:cc:63:e4:9a:ce:94:9a:95:44:12:
                    68:51:f5:a1:58:04:e6:39:45:01:c9:d5:5e:82:36:
                    28:0c:41:46:83:8d:10:f4:13:78:f4:34:f0:ba:18:
                    48:82:60:b5:df:5c:23:d1:9a:ec:11:87:53:32:b5:
                    ae:7f:24:08:06:24:3e:e3:d0:66:5c:1b:7b:1e:c3:
                    eb:3a:88:ed:ac:f5:f6:fe:9c:18:92:da:50:51:48:
                    8e:f0:93:48:89:da:33:97:70:c2:13:1c:e0:eb:9f:
                    cc:f4:e9:bb:3a:77:24:46:86:e0:a6:4b:1c:7b:7b:
                    e0:a7:b1:42:f9:d3:fc:fa:72:54:ea:03:6f:7c:93:
                    e2:80:d9:21:ec:e6:02:2d:77:68:97:a8:63:38:bb:
                    5c:31:eb:4f:4f:b8:6a:65:57:b8:08:e7:16:71:1e:
                    a3:e1:a3:dc:55:b4:29:90:ed:6b:57:b9:fd:30:57:
                    82:97:75:01:13:93:dd:ac:69:fe:5c:62:bd:38:4b:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3F:39:A2:5D:5A:3F:19:9F:EF:5C:71:49:00:83:20:C0:43:C8:23
            X509v3 Authority Key Identifier:
                keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:55:b8:e0:84:88:34:0c:ab:41:29:00:c8:8a:3b:d3:0b:f0:
         ab:49:13:d1:53:ed:c1:40:d7:dd:0a:20:8a:c5:ae:67:43:06:
         91:d1:60:00:64:e2:ec:c2:0b:3b:08:ae:35:0c:ae:d6:84:9a:
         10:ae:d2:0d:59:30:fa:ea:67:a0:a6:07:cf:18:8f:3e:ef:17:
         a2:32:43:d3:0d:46:b2:d5:37:65:e0:47:e4:84:ca:e5:14:47:
         7a:cb:4f:df:a3:b2:0d:f5:1e:60:5e:c9:63:c9:36:15:34:98:
         00:eb:04:0a:c8:1b:a2:77:4b:8a:bb:9b:25:19:8f:74:46:bb:
         7f:4e:ed:2d:7c:55:d8:da:57:1e:af:56:3e:26:c2:13:ad:5e:
         60:a3:00:44:84:e4:30:2c:98:70:72:ca:eb:e4:0a:b3:30:4e:
         10:ed:5d:a3:5b:be:19:fe:ed:3e:28:74:5f:bf:0f:23:e2:d2:
         9a:dc:5d:8e:23:f4:92:5f:e4:df:b3:a4:48:f3:3b:91:28:9c:
         7a:7e:ca:f5:21:16:6e:fd:49:78:d7:4b:5d:c7:b3:51:dd:9c:
         0b:47:ae:6b:3b:cc:83:ba:78:40:83:c4:09:f0:da:42:c6:67:
         5f:7b:c6:bc:6e:10:49:3c:82:46:9b:56:c9:d7:87:fc:1b:1b:
         43:9d:b9:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEJJokgPaIUvrQH+kn0xkrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NDA3NGFhODQ0OTgzMGRhOWIyMGIzYWZiMDY4MmQzYzAz
MmY5ZmUwHhcNMjYxMDA0MjMwMTIyWhcNMjYxMDA1MjMwMTIyWjAzMTEwLwYDVQQD
Eyg5ZTNmMzlhMjVkNWEzZjE5OWZlZjVjNzE0OTAwODMyMGMwNDNjODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyurQZ0KR5zPNf86VyA3AyoFXpI34
TWVXA+B7QdPuDZrdkFj7D99eYcK1/PnwkWsRnTniRy5cI4s3357yesKklMxj5JrO
lJqVRBJoUfWhWATmOUUBydVegjYoDEFGg40Q9BN49DTwuhhIgmC131wj0ZrsEYdT
MrWufyQIBiQ+49BmXBt7HsPrOojtrPX2/pwYktpQUUiO8JNIidozl3DCExzg65/M
9Om7OnckRobgpksce3vgp7FC+dP8+nJU6gNvfJPigNkh7OYCLXdol6hjOLtcMetP
T7hqZVe4COcWcR6j4aPcVbQpkO1rV7n9MFeCl3UBE5PdrGn+XGK9OEvyPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4/OaJdWj8Zn+9ccUkAgyDAQ8gjMB8GA1UdIwQY
MBaAFLZAdKqESYMNqbILOvsGgtPAMvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEt
MzUxNzFhZWRkMzEzLzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEtMzUxNzFhZWRkMzEz
LzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVW44ISI
NAyrQSkAyIo70wvwq0kT0VPtwUDX3QogisWuZ0MGkdFgAGTi7MILOwiuNQyu1oSa
EK7SDVkw+upnoKYHzxiPPu8XojJD0w1GstU3ZeBH5ITK5RRHestP36OyDfUeYF7J
Y8k2FTSYAOsECsgbondLirubJRmPdEa7f07tLXxV2NpXHq9WPibCE61eYKMARITk
MCyYcHLK6+QKszBOEO1do1u+Gf7tPih0X78PI+LSmtxdjiP0kl/k37OkSPM7kSic
en7K9SEWbv1JeNdLXcezUd2cC0euazvMg7p4QIPECfDaQsZnX3vGvG4QSTyCRptW
ydeH/BsbQ5259g==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:53:59 2026 by rpki-client