Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
File:                     TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft (raw, json)
Hash identifier:          9qn9JZ+b40udy4LJmRODBC6PO7zPA5bPdZ+v01/w3E8=
Subject key identifier:   86:75:55:B2:25:A3:1D:FE:DD:E5:CB:B4:1B:04:87:6A:71:46:75:8F
Authority key identifier: 4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
Certificate issuer:       /CN=4c92657196d39360f3201338f4b13805ba69e230
Certificate serial:       01A0D872360DCBD727CEFBD026BBA88381C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
Manifest number:          B1
Signing time:             Fri 25 Sep 2026 12:02:38 +0000
Manifest this update:     Fri 25 Sep 2026 12:02:38 +0000
Manifest next update:     Sat 26 Sep 2026 12:02:38 +0000
Files and hashes:         1: GsCWehWfuR0Y5YAQxihGBdvrxRg.roa (hash: z7BYtMDbjCrW08d8JA7x90045Wib1Z+pxaVr97f8FKU=)
                          2: NNYJKSx4PH4wHLznLKSJ_tdSV74.roa (hash: tz4qDyJHR65GtxJWUzlYMsmg6QvJmo2pArNsj2Sgvek=)
                          3: TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl (hash: vRj3bqSi7pU/pbaFptzawsX5R9eh2iXX8rrRCYhXM48=)
                          4: luf1YTB9xStV-pMcK9RhrzVtwoI.roa (hash: diCNzTBi/BtQjQQlSYdbD6MqDG03HWPnxAs6lAtK11o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:36:0d:cb:d7:27:ce:fb:d0:26:bb:a8:83:81:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c92657196d39360f3201338f4b13805ba69e230
        Validity
            Not Before: Sep 25 12:02:38 2026 GMT
            Not After : Sep 26 12:02:38 2026 GMT
        Subject: CN=867555b225a31dfedde5cbb41b04876a7146758f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:01:8e:11:67:7b:12:bf:f1:c0:97:04:93:
                    01:cf:33:dd:fe:80:72:39:f6:31:2a:23:39:5d:33:
                    ae:b0:73:c0:d6:de:38:8a:2b:d1:ca:e4:5a:81:d8:
                    b0:82:7d:0f:1f:6b:a5:03:45:c2:3f:ef:48:20:fc:
                    c7:62:2b:62:31:5a:3c:f4:50:eb:8e:b0:fe:7e:c6:
                    ff:3f:15:ac:41:7b:d7:5c:0e:44:51:6b:0b:8d:4a:
                    c4:b8:27:04:05:70:ca:2f:13:65:04:1d:94:57:b0:
                    d0:d3:0e:ab:26:ee:34:32:d8:ef:01:72:3f:4e:a5:
                    4c:5b:f6:19:7a:c5:b0:10:2e:4d:69:61:e1:b5:05:
                    4f:c3:d1:c8:b4:08:53:90:05:40:d7:70:42:24:35:
                    9e:27:b9:dc:db:f0:2f:a1:31:68:8d:6f:e0:46:75:
                    64:71:45:25:79:19:10:54:52:46:a7:5c:32:d2:11:
                    66:ee:4b:c3:85:57:53:85:ae:e4:b3:83:c6:10:7c:
                    6b:92:ff:fe:12:58:53:e0:ee:26:df:59:85:e5:4b:
                    89:ab:bb:6a:e0:31:53:54:c8:0e:71:0f:a7:8b:74:
                    10:1f:4a:c9:9a:61:6e:ab:10:2a:be:86:9f:40:55:
                    8d:81:71:0b:08:f8:09:6b:0d:af:4b:30:a8:c0:9e:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:75:55:B2:25:A3:1D:FE:DD:E5:CB:B4:1B:04:87:6A:71:46:75:8F
            X509v3 Authority Key Identifier:
                keyid:4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c3:47:3a:07:09:20:4f:5b:60:a2:68:3d:2c:41:a8:7f:1f:
         b4:98:68:69:60:18:70:82:e0:9f:63:ea:d1:fe:80:ca:a7:be:
         b8:52:fb:c8:71:6f:9f:a4:b6:1c:e2:2a:bf:c7:8a:11:07:a4:
         34:94:6b:38:96:21:0a:75:60:7c:a7:9a:af:79:45:69:de:45:
         da:5b:ca:84:42:5a:2d:12:bb:51:c0:00:1c:63:08:9b:cf:34:
         fd:9d:8d:8d:52:2f:43:92:a1:26:a1:bc:82:4d:c2:b5:0c:46:
         89:49:ba:82:61:a1:86:91:f2:81:ea:91:99:3d:1b:13:12:54:
         17:87:89:63:b8:b3:05:95:17:92:dc:73:4e:12:9c:96:b5:09:
         34:0b:4b:6a:8c:e0:90:7b:ee:d5:16:05:fc:ad:f7:d2:5b:c3:
         46:0d:5d:c7:a2:a7:63:a2:fb:9e:30:27:f3:59:70:68:7d:b7:
         da:46:89:d8:c9:41:7e:09:d0:fe:7d:3a:18:d8:90:20:be:a6:
         fc:56:61:92:92:9f:c8:d3:2c:4e:a0:38:60:67:df:f0:66:32:
         f6:fd:7a:4d:bc:62:5b:2e:57:df:55:9e:66:83:9e:ba:40:a3:
         c3:61:3f:1d:b4:8e:fb:d8:60:09:f8:fe:a2:74:3e:f9:f2:61:
         2c:24:f1:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcjYNy9cnzvvQJruog4HBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTI2NTcxOTZkMzkzNjBmMzIwMTMzOGY0YjEzODA1YmE2
OWUyMzAwHhcNMjYwOTI1MTIwMjM4WhcNMjYwOTI2MTIwMjM4WjAzMTEwLwYDVQQD
Eyg4Njc1NTViMjI1YTMxZGZlZGRlNWNiYjQxYjA0ODc2YTcxNDY3NThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t0BjhFnexK/8cCXBJMBzzPd/oBy
OfYxKiM5XTOusHPA1t44iivRyuRagdiwgn0PH2ulA0XCP+9IIPzHYitiMVo89FDr
jrD+fsb/PxWsQXvXXA5EUWsLjUrEuCcEBXDKLxNlBB2UV7DQ0w6rJu40MtjvAXI/
TqVMW/YZesWwEC5NaWHhtQVPw9HItAhTkAVA13BCJDWeJ7nc2/AvoTFojW/gRnVk
cUUleRkQVFJGp1wy0hFm7kvDhVdTha7ks4PGEHxrkv/+ElhT4O4m31mF5UuJq7tq
4DFTVMgOcQ+ni3QQH0rJmmFuqxAqvoafQFWNgXELCPgJaw2vSzCowJ4N8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZ1VbIlox3+3eXLtBsEh2pxRnWPMB8GA1UdIwQY
MBaAFEySZXGW05Ng8yATOPSxOAW6aeIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpKbGNaYlRrMkR6SUJNNDlMRTRCYnBwNGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jNDVhOWMtYjk4My00M2Y2LWE0NDkt
Y2Q5ZDZhYzgwMWJkLzEvVEpKbGNaYlRrMkR6SUJNNDlMRTRCYnBwNGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9jNDVhOWMtYjk4My00M2Y2LWE0NDktY2Q5ZDZhYzgwMWJk
LzEvVEpKbGNaYlRrMkR6SUJNNDlMRTRCYnBwNGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcNHOgcJ
IE9bYKJoPSxBqH8ftJhoaWAYcILgn2Pq0f6Ayqe+uFL7yHFvn6S2HOIqv8eKEQek
NJRrOJYhCnVgfKear3lFad5F2lvKhEJaLRK7UcAAHGMIm880/Z2NjVIvQ5KhJqG8
gk3CtQxGiUm6gmGhhpHygeqRmT0bExJUF4eJY7izBZUXktxzThKclrUJNAtLaozg
kHvu1RYF/K330lvDRg1dx6KnY6L7njAn81lwaH232kaJ2MlBfgnQ/n06GNiQIL6m
/FZhkpKfyNMsTqA4YGff8GYy9v16TbxiWy5X31WeZoOeukCjw2E/HbSO+9hgCfj+
onQ++fJhLCTxVw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:29:47 2026 by rpki-client