Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File:                     TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier:          LtexiYyjE8navcw3cJmcMA0cVTKVj9KIj/L8FqWVeR4=
Subject key identifier:   12:AB:FB:BD:32:70:A9:D7:7A:C1:D4:E6:92:B3:1A:94:D1:7C:94:22
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer:       /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial:       01A11E63A17DEF86D807239D0E104E44C4A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number:          0E84
Signing time:             Fri 09 Oct 2026 02:00:07 +0000
Manifest this update:     Fri 09 Oct 2026 02:00:07 +0000
Manifest next update:     Sat 10 Oct 2026 02:00:07 +0000
Files and hashes:         1: 4GpPsuXyTB7mqbStOGGvgQlaA3c.roa (hash: YkMMZt5aZTSuVgtlcIOQUlozXasUkQvk7oFEC+EzncM=)
                          2: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: YIWkfkv4veJCf3IV7TDvOVkQ/eyYl2L2SuKQ9uWaOC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 22:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1e:63:a1:7d:ef:86:d8:07:23:9d:0e:10:4e:44:c4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
        Validity
            Not Before: Oct  9 02:00:07 2026 GMT
            Not After : Oct 10 02:00:07 2026 GMT
        Subject: CN=12abfbbd3270a9d77ac1d4e692b31a94d17c9422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:5f:91:15:bb:74:c8:e2:20:08:30:5c:d5:
                    7a:db:08:b7:63:cd:2e:22:c8:68:86:c3:cc:1c:9a:
                    6a:6b:66:e3:4c:6a:d3:9a:01:ac:c7:4e:5d:75:31:
                    51:de:72:a2:8d:aa:03:6d:6d:de:81:d0:63:f0:50:
                    39:b3:e3:69:f9:89:13:a6:32:2b:5c:2b:d6:ca:98:
                    d8:3a:08:96:ce:12:1b:e0:d8:64:ec:74:a6:06:f4:
                    ef:fb:82:21:69:c6:d0:da:f8:f8:89:65:2e:47:f2:
                    e8:00:0e:28:e0:b9:35:e8:d4:f9:5d:ba:90:23:37:
                    82:e5:73:44:eb:b0:11:57:a3:31:62:e6:12:b9:df:
                    86:92:4b:be:46:dc:43:62:b7:02:bf:dc:be:d4:b1:
                    d3:8a:7e:8a:a9:a8:f7:fb:18:96:99:3e:80:04:36:
                    31:b8:b4:c8:83:a7:fb:78:f1:0b:98:c2:c4:50:3c:
                    b0:7b:07:71:92:12:4f:ce:e4:ee:89:91:ab:90:90:
                    b6:04:9b:7d:29:a4:90:5a:2e:41:b1:11:e3:57:bd:
                    3d:3c:de:8d:83:75:15:f7:c3:bc:df:26:ed:6c:8c:
                    d0:74:4b:a4:7c:22:00:2f:41:ad:56:e0:8a:c2:db:
                    59:d1:66:8d:68:2f:6d:8d:44:01:b2:c6:23:3a:23:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AB:FB:BD:32:70:A9:D7:7A:C1:D4:E6:92:B3:1A:94:D1:7C:94:22
            X509v3 Authority Key Identifier:
                keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9f:7e:e0:77:25:c5:44:69:4e:84:c7:0e:0e:40:fd:75:e8:
         42:62:44:f3:85:ca:da:0b:9c:81:d4:dd:19:ef:5a:21:18:ed:
         e4:ea:4a:37:96:11:32:e0:98:dd:9a:85:32:93:aa:90:89:5c:
         97:a2:1b:a8:29:f7:fa:90:30:ac:e8:2f:fd:c1:ff:00:4e:dc:
         cc:71:48:e6:69:a0:ae:0e:fd:12:0a:5b:71:77:d8:74:00:08:
         2f:d1:a6:71:f9:6d:26:18:94:db:8b:2d:9b:69:55:3d:13:36:
         3a:3e:d2:f1:15:49:e9:78:70:f4:a8:dd:db:17:05:6a:c7:ce:
         a8:fa:a6:45:7f:1e:1b:25:62:f0:d2:1c:98:fc:d7:73:02:3d:
         fa:23:34:2e:97:8d:2c:8e:58:f3:81:18:78:c1:c5:a2:8a:fe:
         19:6d:32:01:46:70:03:7a:08:8d:00:43:c7:e0:30:55:dc:39:
         ed:39:33:f8:45:48:8d:1e:23:1d:5e:e5:d4:43:5f:73:d0:56:
         07:53:4a:be:1a:c0:24:bb:d7:63:90:eb:02:98:9e:04:e4:f4:
         d1:b8:45:26:42:4f:e1:00:80:89:bd:a5:cd:49:62:a4:f5:29:
         ee:fe:39:f2:4c:53:27:c0:91:e9:94:07:d3:48:5d:45:bd:0a:
         a8:bb:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 07:42:41 2026 by rpki-client