Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File:                     Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier:          4DBZMl7vxy6TCyPraI/bvW9/ddFhnPhGQz0XvRWZ3rs=
Subject key identifier:   DA:D0:B6:64:6E:A6:07:69:D0:7E:D2:F9:BF:50:60:99:5A:06:C9:DC
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       01A0FC0FF632C5578FCE2C3DC7F9D7EFD0B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number:          1A8C
Signing time:             Fri 02 Oct 2026 10:01:39 +0000
Manifest this update:     Fri 02 Oct 2026 10:01:39 +0000
Manifest next update:     Sat 03 Oct 2026 10:01:39 +0000
Files and hashes:         1: 39rMz_WIR2e8L2mM9nRbVwSsWYs.asa (hash: 5o54GUaG5AJOqUjqrqNiS3NWFX9t0EEkMJIm09Gxdrg=)
                          2: 3XPbOVP5LZm9gbvbxeYXvE-UXNY.roa (hash: P5VCL1xp51uhegWvbhWmEVzPBE26QsXY7i6bNOoE28E=)
                          3: 4lw_9PAntET-B5MMVn16dO3Hcls.roa (hash: UDzY7XNVR7aRxZCWElIUyD0jHCPvLTcFxpVSeLZMRg4=)
                          4: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: qqqfVGHQnIKuu+S2HBg1Jt1DqF927IZl43SvRYVXp08=)
                          5: cqsm3cZPpf_tObwDEACdHxs7fkA.roa (hash: d+AU9b3PeXFxvtfVifLL55zjYWSVguy94TW2GQv8rLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 10:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:0f:f6:32:c5:57:8f:ce:2c:3d:c7:f9:d7:ef:d0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Oct  2 10:01:39 2026 GMT
            Not After : Oct  3 10:01:39 2026 GMT
        Subject: CN=dad0b6646ea60769d07ed2f9bf5060995a06c9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:4b:db:2b:38:06:83:ed:85:57:e5:d6:92:
                    91:b6:99:71:94:9c:d5:4c:8c:02:d6:79:31:30:45:
                    6e:1d:fc:8a:0d:1b:c7:f5:4e:fe:09:62:fd:fd:7f:
                    1e:8f:72:76:d6:e6:48:06:93:8f:8f:b9:33:9e:8b:
                    c1:24:75:93:22:d3:81:37:f4:76:05:c9:11:2e:f6:
                    78:5d:ad:15:c9:b9:18:53:fe:a7:87:6c:3f:28:60:
                    06:7e:4d:00:86:0f:a6:6b:c4:26:c6:6f:dd:cf:80:
                    70:b1:db:d7:7e:8a:21:2a:56:36:da:e6:ed:1c:49:
                    66:1a:c4:bd:5a:5a:68:dc:2e:09:7a:70:d2:f1:36:
                    2e:b5:ad:41:79:47:0c:79:1a:17:64:f9:eb:65:7d:
                    db:cf:d1:06:ee:99:cf:a5:f2:55:ab:5d:01:ba:39:
                    26:2a:2f:36:c4:5c:df:99:e3:c7:e5:c0:4c:0d:22:
                    19:37:2a:20:fe:e7:95:91:33:45:d8:85:63:1d:c4:
                    c9:2d:80:cc:59:dc:03:0c:1a:26:64:51:77:af:1f:
                    f4:2f:d1:28:2e:f8:81:b2:5d:3a:70:a8:24:e3:cb:
                    04:ef:ec:af:ff:9f:60:7e:06:7b:7c:33:3c:13:1e:
                    60:dc:5b:79:93:3f:82:eb:83:8a:04:c6:37:f6:26:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D0:B6:64:6E:A6:07:69:D0:7E:D2:F9:BF:50:60:99:5A:06:C9:DC
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4e:31:9c:18:62:42:d9:4f:ef:3b:26:ea:a6:01:f5:2b:c0:
         47:81:24:3c:25:e2:66:65:27:87:67:be:24:5d:19:ed:fd:68:
         8a:df:b2:d7:3b:8f:75:df:d5:e7:dd:99:1e:cd:ef:7a:fb:54:
         22:0e:f4:6e:78:d0:64:43:ac:db:07:33:64:04:25:77:c0:97:
         8d:31:b6:21:3c:61:38:d6:3c:84:8b:9b:18:08:16:30:36:01:
         1c:c0:d1:9f:77:ab:9c:0f:e0:1d:7f:35:fd:dc:2d:1f:4c:49:
         5a:22:6d:c5:10:69:25:71:fd:62:38:bf:cd:0d:4c:91:29:6f:
         41:a8:e0:b7:5d:49:75:88:15:25:dc:c8:26:df:34:47:b8:66:
         9a:90:76:af:b5:1e:5c:40:a0:60:1f:7c:fe:fb:2f:fe:0e:7d:
         27:3d:61:f1:f4:71:79:c2:5b:0d:e4:c0:c1:57:5a:01:2c:30:
         a5:66:66:d8:b2:0c:5b:19:fd:b9:ae:a0:18:8f:b6:79:d8:de:
         c6:c9:89:7b:44:e8:6b:2a:7d:1c:0a:dc:ad:47:4d:78:0a:c0:
         d0:ab:dd:d5:c0:06:30:66:2a:e1:a5:10:0d:de:b7:2d:9d:d2:
         27:fd:6a:36:60:66:47:68:b1:fe:15:2e:8d:f0:d9:33:62:50:
         76:a7:b0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:50:23 2026 by rpki-client