Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
File:                     TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json)
Hash identifier:          EfgnHXXLYTqTqU2uajaXb2XTJwSW4ULz9n1j+92zocA=
Subject key identifier:   A8:04:C4:B1:63:4A:48:5E:E8:CC:C5:C9:AA:EA:A3:DD:EC:26:11:C8
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Certificate issuer:       /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial:       01A1DFBA56391119082B16FB8F9C8B406820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
Manifest number:          1B0F
Signing time:             Sun 15 Nov 2026 15:01:33 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:33 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:33 +0000
Files and hashes:         1: 5VIlaSHQH8NxTnw-lkuxFUsxkAY.roa (hash: sPTPxc0CroKVp6si6UEZ5BaO2FHxg18oEZaAVxG/qgA=)
                          2: JwHH6LBZedJ4Hv0TunMjXoDshWM.roa (hash: D5XiTo1X7KneliPOhbgW7WFXSwpdBlipBaJGWbMwuis=)
                          3: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: WaD06MbgxSPvkxqY6UwlPvV3yWqn6deVl+nSc+lsdTA=)
                          4: c-8uzc_bF5FkL0h-HqsGRbGhsWg.roa (hash: +aU4slc8iEEQxB/Bu7Kcz1ZF7yrHgsBSwr8YzuDbZ/0=)
                          5: g3ecyqqZSPjg-6ccrLkDwCQkrnQ.roa (hash: SV51OkrNOpOVdTqiKqHM9Ro93TRFuichJHgxteFHtRM=)
                          6: tYudPSYbftTU4j3hgTGLKXhO4P4.roa (hash: Wb5twGJdbpT/Rb1UlbeVOOTStMG3K3OQ+0w1qq8xOmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:ba:56:39:11:19:08:2b:16:fb:8f:9c:8b:40:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
        Validity
            Not Before: Nov 15 15:01:33 2026 GMT
            Not After : Nov 16 15:01:33 2026 GMT
        Subject: CN=a804c4b1634a485ee8ccc5c9aaeaa3ddec2611c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:5e:7e:5c:16:18:18:22:11:a2:8e:95:88:
                    ea:4f:5c:93:fe:b0:22:f0:48:87:00:4a:1f:68:85:
                    8e:49:39:66:87:30:c2:ed:69:d2:7d:3b:ff:ff:8f:
                    e2:8c:e5:aa:16:a7:09:4b:68:bd:bb:f4:ef:09:19:
                    f5:ac:c8:fb:db:98:d9:0f:d6:65:f2:d9:f6:e1:d9:
                    ba:87:7f:ed:88:9a:81:3a:9f:0d:fd:55:aa:35:87:
                    b0:88:41:42:5f:03:4a:4b:43:4b:c5:ae:f9:56:b3:
                    79:05:68:bb:90:fc:30:36:79:84:79:1b:8b:fd:e6:
                    09:63:f3:43:3e:70:e4:5f:ae:48:7d:aa:28:1a:90:
                    82:ac:9c:11:3e:73:dd:de:26:f6:3f:3f:c2:48:16:
                    ba:43:df:cd:52:6f:c5:82:42:e5:72:17:40:28:e6:
                    17:b3:58:49:be:67:40:c2:71:0c:a9:c2:a6:5c:b4:
                    cb:d6:88:d9:5c:f6:73:cb:4a:ee:2d:ba:8b:35:d8:
                    a4:80:e5:a7:92:ee:95:26:12:9a:68:1c:b0:a1:46:
                    7c:ea:75:a0:a5:9c:1c:71:78:ca:cf:32:03:2b:1a:
                    a9:3d:cd:fd:0d:4e:08:b1:30:e6:f6:c1:c6:4c:54:
                    dc:2f:9e:bb:2b:86:64:52:6b:b3:52:fd:f7:3e:7d:
                    c3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:04:C4:B1:63:4A:48:5E:E8:CC:C5:C9:AA:EA:A3:DD:EC:26:11:C8
            X509v3 Authority Key Identifier:
                keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e2:07:d7:d3:7e:05:c5:c2:39:22:51:68:28:4c:33:6e:29:
         00:84:5c:01:ba:2a:b4:9a:6c:6f:fc:db:4c:89:d7:10:d1:03:
         35:13:e7:d2:f1:28:ed:7d:27:3c:89:51:89:77:38:f7:3a:49:
         ee:6c:5b:4c:96:fa:3e:90:1e:2d:b9:e4:9f:f2:f4:b0:65:bb:
         2e:aa:ae:09:8b:48:f1:f7:e0:06:00:3e:5b:73:2b:f9:4e:06:
         16:e9:36:f4:78:bc:27:63:98:d2:37:f0:88:47:6a:67:6b:86:
         5c:66:d6:84:99:fa:df:8b:9e:2a:d5:bd:c2:1f:29:6f:90:31:
         63:42:e8:59:ad:16:6f:69:88:f2:96:ec:e5:47:67:ab:49:bc:
         3d:1c:fb:c1:9e:eb:e8:5e:ed:49:16:d8:95:17:51:d9:89:3e:
         5b:b3:db:cc:72:c7:11:71:07:d7:36:db:a1:79:34:d3:10:1f:
         50:1d:a1:b2:1b:56:04:82:82:73:5c:54:f1:22:18:c3:d9:57:
         96:5b:63:33:21:f0:3d:91:07:32:ac:d7:a1:20:fd:1a:1a:1d:
         fa:14:57:62:e6:ef:ae:ad:c3:c2:f6:0c:b0:be:12:85:1f:77:
         b8:b6:27:20:d6:b4:64:87:46:78:bf:0c:e9:d8:bc:c4:5f:ce:
         10:c5:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:48:21 2026 by rpki-client