Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File:                     tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier:          VXA52wyC8QKVMYaPj2VL6vIoxcWvXXsFvb4AAswCHlg=
Subject key identifier:   21:C8:6E:22:DE:C8:BD:63:8D:78:00:A6:26:18:D6:0D:C4:C7:73:39
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer:       /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial:       01A0D0EE4F4D99EED636C7B25D709F9F82CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number:          1A7E
Signing time:             Thu 24 Sep 2026 01:01:13 +0000
Manifest this update:     Thu 24 Sep 2026 01:01:13 +0000
Manifest next update:     Fri 25 Sep 2026 01:01:13 +0000
Files and hashes:         1: VKzW31jeaMdmyxMzR7AUw7WIDUA.asa (hash: pk6lHC6s+JJLCaiknEGPfBAKyURwygceJXu/R2chfr0=)
                          2: VvqzmjNZq8EAn7upk3HKESnO2Sg.roa (hash: zi8li6T/eNUQAuUi6F1iTu5taSL1qMtfO51QFh76N4Q=)
                          3: sjjd2NSPITr68O034mRL8pEZKMI.roa (hash: 30S0+p6CD4KKucy2+C7TNS9Bj85H/OWFO73Ch6x2P2o=)
                          4: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: LZbV0dS3JQU0JHwBv0KNg8blHHt0mfXyBhwN9nYiXQo=)
                          5: xA8I-Ycp1q2fcI8xsU1jW8I19hg.asa (hash: EBMdaG4QdyhLtZe7WkvdRNMZTr2xN3HzQQNtxbfhCyM=)
                          6: zfs1n8rEspCcwaljPO1LWoriK7A.roa (hash: Cw4La7Iv+J3S/kv3dOrnyO46Wye0r7XGdA/N85GgLG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ee:4f:4d:99:ee:d6:36:c7:b2:5d:70:9f:9f:82:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
        Validity
            Not Before: Sep 24 01:01:13 2026 GMT
            Not After : Sep 25 01:01:13 2026 GMT
        Subject: CN=21c86e22dec8bd638d7800a62618d60dc4c77339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3c:55:cc:42:fc:8d:cf:8f:f3:5c:9a:00:48:
                    20:c0:9c:5f:f7:1d:67:79:0f:0a:89:c7:c5:a5:76:
                    cb:85:5f:cf:08:78:88:ab:46:ac:2c:5f:5b:3f:f4:
                    d2:b6:58:91:a8:f1:7b:ab:4a:0b:cd:1e:4b:3d:92:
                    e2:34:16:ca:90:a4:e1:7c:87:eb:06:39:23:2a:22:
                    95:a1:28:0f:c8:de:20:4e:2d:8c:da:a2:32:6a:15:
                    8e:c2:d9:e6:ce:09:74:db:62:ee:98:22:d9:12:16:
                    85:c9:62:8a:32:25:b5:90:c9:07:ac:ec:52:7a:82:
                    18:5d:2e:b6:87:9f:eb:01:dd:22:c2:5b:6a:d9:63:
                    ca:e7:6c:22:90:47:87:90:2f:9c:0f:fa:f6:83:03:
                    1f:8b:4e:5a:ad:aa:da:b5:91:47:75:36:2d:74:c9:
                    74:ac:45:cd:50:0b:c6:a5:a5:d2:81:b6:ee:ac:e2:
                    fc:80:29:0b:62:50:bc:a8:b6:d7:68:f8:5d:c0:62:
                    4a:b2:52:26:7c:46:ce:5e:78:25:16:ad:70:3e:25:
                    6c:16:46:3c:c5:b9:96:77:73:67:16:6b:1c:68:ac:
                    77:f6:9d:72:19:0b:76:75:44:a9:65:19:c7:9c:1f:
                    df:2d:57:96:65:e2:38:40:2d:61:85:5b:9f:c1:55:
                    4c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C8:6E:22:DE:C8:BD:63:8D:78:00:A6:26:18:D6:0D:C4:C7:73:39
            X509v3 Authority Key Identifier:
                keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:85:6e:67:73:b5:4c:2a:db:23:e4:58:f6:79:7c:64:a7:88:
         06:c6:58:1c:e5:1a:de:b6:ea:71:96:45:af:d1:a1:c8:f4:70:
         35:04:73:79:e3:df:50:6b:72:ec:0c:02:c3:31:92:4e:69:c8:
         ea:19:a4:f2:2b:4c:1d:96:8c:77:a1:9c:75:4f:07:64:d1:ba:
         d8:31:b7:4d:53:c4:5e:78:b3:61:1f:13:ed:35:43:53:bf:f1:
         5c:2e:d0:b1:a0:a1:78:ba:40:e1:4c:a3:18:3b:14:3c:e2:a9:
         35:b5:61:66:4a:aa:5e:ba:f6:a8:3b:cf:da:2e:6d:79:27:28:
         83:5d:54:69:3d:31:7a:f7:6e:ed:44:c4:3e:62:de:79:38:21:
         9f:c3:57:b3:34:14:62:ab:8b:82:9b:1d:45:a4:d9:ac:a9:e3:
         87:3a:23:a6:57:7e:d4:57:39:7a:46:7f:11:45:3a:d6:3c:4e:
         53:01:7a:10:34:0c:29:4e:f6:c4:2b:97:14:44:0a:a3:0a:f4:
         ef:9d:cb:3c:0f:87:9a:f4:26:0b:e6:51:6d:8e:a7:92:c3:c0:
         db:97:7a:ee:fa:b4:79:5b:5d:0a:fa:bd:89:ba:fa:0b:b5:fa:
         68:e1:f0:ea:c1:b4:f1:c0:a2:1d:d9:cc:40:3d:65:22:8a:5c:
         73:57:b1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:08:06 2026 by rpki-client