Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
File:                     tjrC5OTds-VAdW8XqpcNSoowqFw.mft (raw, json)
Hash identifier:          yMZ4x5PCqZSMnhqKH2QdouXw72QAMxlY1q4QVno7A60=
Subject key identifier:   17:1C:D0:5B:94:CB:DD:08:BF:D8:6C:E4:86:48:D5:8C:36:8C:4D:BC
Authority key identifier: B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
Certificate issuer:       /CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Certificate serial:       01A0D5A6D116F50F27C17F7485EE49EAC4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
Manifest number:          017B
Signing time:             Thu 24 Sep 2026 23:01:14 +0000
Manifest this update:     Thu 24 Sep 2026 23:01:14 +0000
Manifest next update:     Fri 25 Sep 2026 23:01:14 +0000
Files and hashes:         1: 3PEhY1Ws9IOo3cWNjYy5yOIjYaE.roa (hash: T/g5YfW0+zaGcZZDm52y51nspj0qwZi0sWsHMlKk/KI=)
                          2: GpwRgxH1rh6kYkbCLIqnbXHV5yc.roa (hash: /8lkVZUXTI5q0RD+ogbND16CeygsTyvjGJNPFWulD2U=)
                          3: tjrC5OTds-VAdW8XqpcNSoowqFw.crl (hash: NfhJrtxnCqFlS/4nqs4jFkTiZKfVRphyUXQTQVr4IL8=)
                          4: yZTKv672wHWKq63aWh-emOtWdus.roa (hash: 6Vhx+7brYUgL5kFF6TZGOji3UDVZOaK3kwdHUUol5S8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a6:d1:16:f5:0f:27:c1:7f:74:85:ee:49:ea:c4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
        Validity
            Not Before: Sep 24 23:01:14 2026 GMT
            Not After : Sep 25 23:01:14 2026 GMT
        Subject: CN=171cd05b94cbdd08bfd86ce48648d58c368c4dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:a6:c2:25:c0:c6:e9:47:55:c7:f2:b6:b7:
                    56:c9:de:b9:4b:ef:2c:ef:83:1c:5c:cc:8e:56:40:
                    58:8d:a0:5b:40:69:47:84:e4:c8:ea:06:7f:b0:ee:
                    4f:09:0e:81:81:92:a0:4c:84:aa:63:3d:86:1b:fc:
                    c7:cf:90:3e:c3:51:ff:b6:4f:78:e2:02:0a:05:11:
                    29:75:dc:23:7e:9f:40:b2:1a:1f:5f:7c:4d:d5:17:
                    f7:44:96:de:a4:ac:ca:2c:07:3c:77:cb:c0:0c:dd:
                    9b:06:18:3c:fb:f8:36:9a:9b:96:f4:9f:dd:b5:4b:
                    70:3d:84:af:3c:62:cc:d8:75:8e:6b:41:7a:74:ac:
                    1a:f7:da:0f:91:0e:89:f2:73:49:c8:d3:a7:e0:83:
                    2c:9d:73:b3:4e:44:a6:6b:e1:e9:87:c7:fa:2a:ce:
                    fe:af:1f:27:f1:55:a4:85:e4:78:93:93:30:47:4e:
                    59:a5:f0:22:5e:e9:2d:c1:bf:b1:67:f8:99:8b:a1:
                    04:ca:64:a7:75:9f:3a:07:7c:0a:a6:e7:31:e0:36:
                    77:6e:41:3b:4d:36:9c:7b:6d:e2:bd:20:06:c1:dc:
                    40:7c:c8:b8:67:6c:96:76:48:7f:4e:44:d5:99:fa:
                    d7:77:93:06:7d:e7:b7:5f:06:3c:2d:fc:d0:e8:cf:
                    35:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1C:D0:5B:94:CB:DD:08:BF:D8:6C:E4:86:48:D5:8C:36:8C:4D:BC
            X509v3 Authority Key Identifier:
                keyid:B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c8:4d:e8:46:dc:c0:28:b1:34:13:5f:54:ba:03:0e:e4:81:
         5c:ac:ad:e4:0c:34:ea:64:54:a7:f1:63:9e:76:3a:0a:93:a8:
         a3:c5:12:1f:62:35:1f:b9:2b:e4:e5:49:7e:19:56:18:58:39:
         30:d4:87:e0:67:fb:4b:ee:05:60:50:ba:9c:d6:05:57:8d:a7:
         1e:f0:57:4a:67:98:94:08:5c:96:6e:ab:48:b9:8e:19:a9:bd:
         dc:7e:87:c2:15:48:1d:12:63:d1:40:4c:c6:a3:0d:be:1d:94:
         52:a3:a3:f5:3e:b1:5b:be:c4:d5:58:89:75:db:ae:a8:fe:03:
         6f:6a:f1:66:44:13:5c:73:92:ae:a5:f0:f2:af:44:52:d1:c8:
         34:d1:7a:83:7f:67:fe:90:47:7e:80:d2:eb:37:5b:c8:3b:01:
         23:21:2b:25:8c:c1:a4:9b:45:d0:91:8e:64:12:b5:3f:8c:e9:
         28:ba:1e:29:35:ba:89:b1:a6:2d:19:b2:76:1b:00:83:24:ef:
         07:05:7a:ab:3d:7e:1d:db:db:3a:e3:3d:ee:7d:0e:0a:8b:48:
         da:59:60:3d:72:30:c6:d6:8f:53:4e:23:7e:f8:ef:a6:20:78:
         36:3c:41:cf:da:7f:d4:3f:27:36:4c:4f:ef:00:71:23:f5:04:
         e0:1e:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:37:01 2026 by rpki-client