Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File:                     ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier:          0tZNVdBPU9LZBoxvcCoj/QckdYOLsZru3EmQ5RFVM3I=
Subject key identifier:   A7:75:3F:B4:45:7E:B9:86:84:F9:F1:96:F3:14:ED:FD:E6:EA:A1:4C
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer:       /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial:       01A0D9BAFFE732B0A4EA7285F8BE857D6A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number:          07B5
Signing time:             Fri 25 Sep 2026 18:01:46 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:46 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:46 +0000
Files and hashes:         1: 7vpwKA_xkK2KFRVK-1Bl0paJeQo.roa (hash: VRkqBPN/9BIZfGsddu7EhNguv5Ir9sO9OazfQFdIK6s=)
                          2: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: pcUaOBcDSa6ZqUi0ojHeDL1MsjBJZCKWra6na5gRKAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:ff:e7:32:b0:a4:ea:72:85:f8:be:85:7d:6a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
        Validity
            Not Before: Sep 25 18:01:46 2026 GMT
            Not After : Sep 26 18:01:46 2026 GMT
        Subject: CN=a7753fb4457eb98684f9f196f314edfde6eaa14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:0e:20:2d:39:02:74:bf:5c:ca:78:6b:4d:
                    2c:e7:03:50:96:69:92:fb:27:69:4b:ad:2e:06:37:
                    46:62:83:6b:83:5c:1c:28:54:11:46:87:e8:c8:b2:
                    79:ff:78:e9:db:48:c2:41:36:6b:1c:51:10:f0:b0:
                    77:c3:fd:38:df:32:d5:38:8d:d8:16:da:de:09:2d:
                    69:f7:2b:43:6a:a5:e4:e5:8a:d4:62:d8:df:48:38:
                    0b:eb:e6:d1:22:44:75:09:55:b6:1f:93:54:58:1c:
                    b8:45:3c:6f:08:9c:36:56:a5:2b:8f:22:29:d1:a9:
                    05:66:68:9f:b9:dd:79:ed:9a:e6:50:2a:3e:6c:14:
                    af:1c:96:a1:0f:d9:3f:59:63:e7:d9:23:ba:fb:c7:
                    88:0e:ab:00:6d:57:7b:39:36:ba:12:4a:ff:a5:c8:
                    a0:cf:71:34:03:88:8c:9e:38:a1:9c:ce:5f:e4:6d:
                    9a:75:d3:18:15:9e:d0:61:c2:dd:59:05:d4:df:b1:
                    7a:80:69:90:4f:4d:22:ae:9b:cf:22:0f:8a:5b:ef:
                    9e:68:8c:ee:7c:2c:e1:66:28:03:6a:5b:e2:10:a4:
                    d7:0a:bd:36:91:98:99:31:41:26:89:6c:ef:0d:91:
                    b8:31:fb:55:2e:7a:26:11:39:2f:51:82:a3:dc:ee:
                    7f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:75:3F:B4:45:7E:B9:86:84:F9:F1:96:F3:14:ED:FD:E6:EA:A1:4C
            X509v3 Authority Key Identifier:
                keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:44:b4:c8:7a:e8:85:ba:50:19:d3:4f:33:46:2c:4c:fc:48:
         db:e7:c7:10:cd:77:75:bc:a0:ce:ad:e6:bc:8c:a5:30:f3:fd:
         32:e8:85:52:9f:78:a5:49:3e:cf:f1:bf:f9:0e:93:9f:ec:89:
         80:b0:b4:1f:84:e0:43:d6:ce:a5:2c:6b:8f:e8:e7:80:d8:d9:
         c9:a6:06:ee:79:66:26:ad:f1:24:6b:c9:2b:98:68:84:d3:e3:
         59:cd:a6:57:5c:ab:72:32:d6:0b:b7:ce:6c:42:cc:7c:08:d1:
         7d:01:23:d4:a6:d8:4d:e6:14:c7:c9:d9:9e:21:56:41:e1:db:
         98:2d:ed:87:77:c9:66:47:38:b8:16:22:3a:a4:32:ea:72:bd:
         a2:b7:21:81:d1:bd:e3:95:a4:40:29:77:fe:7a:89:cf:a5:48:
         e3:70:41:8f:c4:4c:f1:b5:c7:61:93:32:7a:ad:59:1d:1a:5a:
         1a:1e:5f:05:f8:24:5e:29:db:7b:fe:22:2e:64:75:8f:30:1b:
         a9:49:12:44:e7:19:d3:00:44:6e:e9:b1:1a:30:06:80:48:34:
         ad:9f:6c:5b:dd:b5:74:f9:da:9c:7c:b4:6b:a6:46:35:bc:13:
         f6:ba:22:9a:38:9c:0f:94:fd:6f:13:41:9d:c2:01:7f:56:d8:
         bd:31:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:10:53 2026 by rpki-client