Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
File:                     TXfM16lEFd_GjMyodOlMLowiIC0.mft (raw, json)
Hash identifier:          C+laX3+racvYg2w2Z89sT3ISGnPWnzyj7hsj/uAppLM=
Subject key identifier:   1A:4A:5F:B5:AC:C4:4C:67:B2:8A:F3:6C:43:C5:CA:BD:63:D0:ED:DA
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Certificate issuer:       /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial:       01A0D26DE70343DD2598CFE26C605BC85C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 08:00:12 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:12 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:12 +0000
Files and hashes:         1: Na30MdB5zwEKr_r0SUKu8zdQTw4.roa (hash: xfnkXnSAbtguyfEj9MIvTb5o3BtX77AXLc2VZsYQIqg=)
                          2: TXfM16lEFd_GjMyodOlMLowiIC0.crl (hash: /kXpA+JZH7EfEQmVkR6yXU5FeyP60kT473qF/Fvnqm8=)
                          3: gVi39EeTsdnoO7eTwDanhGM1H0I.roa (hash: DtiliU1JGliSpHI+PJT+vAy9Sc5gsRSb35eDO6PM7lY=)
                          4: iCDdGA_7tQsgfDibWuYcU70NfTs.roa (hash: BwHpqgb+51nQjkzwTsIhaODzLjTxX1oHWG2GvyC+9Qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6d:e7:03:43:dd:25:98:cf:e2:6c:60:5b:c8:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
        Validity
            Not Before: Sep 24 08:00:12 2026 GMT
            Not After : Sep 25 08:00:12 2026 GMT
        Subject: CN=1a4a5fb5acc44c67b28af36c43c5cabd63d0edda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:ef:27:5a:aa:24:7e:0a:05:70:ba:58:83:
                    ae:e4:f0:b0:9b:c4:f5:d4:9e:f8:51:32:bb:7a:a8:
                    44:b1:5d:f2:84:3d:8f:d2:96:ca:2d:3c:23:13:58:
                    f0:ac:49:61:99:23:9d:bd:7d:1e:ad:55:7c:5f:ee:
                    13:55:d1:54:f0:8f:44:64:8d:ab:54:7a:0d:e2:65:
                    b7:43:c1:7f:f1:2c:7a:d8:7d:49:7c:c2:52:90:db:
                    28:72:b4:6f:7a:8b:57:a8:a9:1e:a2:1a:82:75:00:
                    5c:6f:c5:59:bf:7b:62:09:1b:a8:4e:45:70:90:b6:
                    95:d1:74:00:11:0f:85:7c:f6:b2:72:df:db:ab:e6:
                    7d:47:16:62:b3:8f:ca:df:02:92:c5:65:44:32:1a:
                    d3:86:69:cd:8e:7f:5a:8c:ba:d3:aa:95:93:5c:3c:
                    b5:70:8f:c6:be:f7:69:8e:21:03:c0:bc:0e:09:3c:
                    bc:ec:c6:a4:8b:a5:e4:10:db:1a:9a:3c:95:c7:4d:
                    ac:82:81:7f:11:f7:05:a8:85:c8:88:2b:26:64:44:
                    b6:3a:f1:e4:76:f6:98:94:1e:a4:d8:b5:71:32:d0:
                    45:67:2a:32:57:97:f7:d0:15:19:de:d7:ea:31:25:
                    93:16:37:73:e5:2d:de:4a:64:64:cf:24:b4:1b:a5:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4A:5F:B5:AC:C4:4C:67:B2:8A:F3:6C:43:C5:CA:BD:63:D0:ED:DA
            X509v3 Authority Key Identifier:
                keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fc:b7:38:8d:0c:66:28:43:a8:18:9a:c5:61:30:cb:24:7c:
         6b:1c:b4:17:3a:0d:2c:8e:db:c1:d0:67:2e:b2:81:b1:66:a5:
         eb:01:69:aa:67:ee:3d:4c:53:9d:89:bf:15:f9:be:b4:30:ce:
         fc:32:db:26:cc:a7:4f:15:d4:5e:ab:73:c2:93:38:1f:b2:f4:
         02:51:05:1f:7a:7f:d9:10:a2:3b:25:d8:ad:15:43:af:70:cf:
         1d:11:01:32:99:45:fc:e4:59:c1:cf:fb:0e:6d:66:64:a8:05:
         50:8a:6d:7a:bd:0d:a2:ea:0f:e3:20:6f:fb:04:8c:56:ee:d4:
         99:d5:95:db:99:23:5b:86:93:b5:f7:a1:13:d1:01:d1:56:af:
         c2:3f:38:ac:59:1d:00:bb:8e:2b:87:b0:c3:f8:ad:0f:69:c7:
         25:f3:be:97:b7:ed:02:d4:ee:06:e9:2f:0d:c4:0a:91:36:cd:
         33:ea:f4:6b:0a:c6:cc:0b:df:76:12:9d:4f:87:2d:8e:65:11:
         23:8e:83:d3:57:1d:43:32:5c:20:1f:41:55:48:1b:b8:5b:e9:
         8c:ee:8e:31:59:90:b3:ea:b8:d4:ef:34:1c:2b:a3:63:f8:0a:
         4d:c5:d4:db:46:c6:18:9d:27:c0:8e:ce:96:2b:bb:53:c2:6d:
         10:10:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:05:57 2026 by rpki-client