Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File:                     TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier:          LJWvuepfHlHh72+CbvAOJONQFd9Acdju0ZCZqxOf538=
Subject key identifier:   00:ED:C1:74:B8:F2:00:3E:5A:36:1E:D4:89:C7:B0:E8:CD:34:90:9A
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       01A10CCBE59BA610E663D0B96FFE6FC8BA14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number:          0B4B
Signing time:             Mon 05 Oct 2026 16:00:51 +0000
Manifest this update:     Mon 05 Oct 2026 16:00:51 +0000
Manifest next update:     Tue 06 Oct 2026 16:00:51 +0000
Files and hashes:         1: 5cyx45wBsDWUW4HLBveZ_qT2fcI.roa (hash: 8zrBvmy9ZVUIH/JDFlTLI0bEMjkf56i51k/bt1Lb1pQ=)
                          2: BGnZrxh766n-RwiVyZM8GwNTqh0.roa (hash: /zWDyCDhQQVXOZUHRipaDLFDgbYWX/UYPO8XJtBp0uE=)
                          3: JI6F6sKwmFDB-S9XODKhAA660AM.roa (hash: /b/qNAizl4V5sFYHPlaPbBReehGSPPstai3HlyE9iGo=)
                          4: OB0voxOvgqvD6w4CwDmCo19dJlY.roa (hash: 9mhFY39YjN1Cc/funyTGbxD0WJvEdMakoR8u2Fsujz0=)
                          5: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: ZYZoXuHhDvWmV5ohPHB4Tf7o/vSQ+hn6U6KPkiOwhrI=)
                          6: X14l7kvlYYBF3EHNWSg-svsFuOQ.roa (hash: Y9BNprLjsgal1cKXYYlZbO0fiea/j/rMdHY3dC/wqFY=)
                          7: sGobVjVtmpTG3eIQoRngSBlxcMU.roa (hash: UMoTBGpuj0hrOh47PvNUlOhwfEbv/t4MSoG5XZ2RuSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0c:cb:e5:9b:a6:10:e6:63:d0:b9:6f:fe:6f:c8:ba:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: Oct  5 16:00:51 2026 GMT
            Not After : Oct  6 16:00:51 2026 GMT
        Subject: CN=00edc174b8f2003e5a361ed489c7b0e8cd34909a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:93:42:7c:6d:17:ad:cf:7a:39:66:f2:5d:58:
                    91:13:ab:5e:48:81:b1:55:3a:1f:7e:a7:ee:d7:04:
                    e7:f1:f3:44:af:3f:49:e6:22:3c:56:9e:1a:b5:97:
                    81:2c:73:01:b2:15:d7:13:c3:b4:ad:66:dc:e9:4e:
                    b5:a7:28:d3:cc:e1:80:35:d0:71:77:34:09:f8:50:
                    db:d3:63:5a:2c:d7:a1:63:5e:06:17:e9:d0:48:6d:
                    e5:7c:e8:92:36:32:1d:d9:6c:18:12:fd:bc:26:5c:
                    ee:2a:48:48:48:c6:7f:d8:47:dc:2f:31:63:0e:ef:
                    6f:3b:55:aa:03:5c:8c:3d:9d:a5:e3:0d:c4:69:8c:
                    10:24:6b:c0:7d:4c:49:a8:4d:68:4a:b2:e8:01:15:
                    13:91:f0:8c:8b:28:bb:ac:59:e8:15:ba:09:2a:fe:
                    b2:45:55:24:21:15:ed:db:97:01:b8:28:38:24:61:
                    9d:f8:3c:42:f1:f7:99:a4:d2:3f:18:e1:5b:59:cf:
                    1f:20:72:a1:00:06:d1:fa:e1:fd:40:7d:67:d9:e5:
                    76:c7:f0:a5:97:62:b5:e3:29:99:37:b8:2e:83:a9:
                    2b:f6:ce:da:46:51:74:f6:b6:c6:45:42:3d:62:3e:
                    b9:d2:af:35:75:2b:f7:0b:a4:0d:bb:ec:63:c2:a5:
                    68:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:ED:C1:74:B8:F2:00:3E:5A:36:1E:D4:89:C7:B0:E8:CD:34:90:9A
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c7:aa:a5:97:c3:34:47:7d:69:7a:43:88:55:55:fa:6f:c2:
         25:b6:f6:b7:6e:8f:42:89:79:e6:51:d8:9b:0b:b1:f9:de:aa:
         5c:41:7a:cb:9c:b8:74:97:00:47:18:d3:08:3e:09:95:0b:a6:
         35:f1:b8:aa:29:88:8e:95:c8:a3:f8:d7:12:a7:ac:0f:e5:d7:
         55:35:1f:9d:18:1f:c0:22:f3:11:5f:23:9f:80:ea:b7:52:b1:
         20:1a:70:5c:fc:c2:1b:63:e1:d1:4d:89:ba:69:1f:2d:c4:21:
         53:60:23:7d:91:8d:be:8b:c9:6c:86:56:ea:c6:18:1d:c2:bc:
         64:a7:21:dd:dc:ad:16:2f:c8:c1:f2:57:cb:06:1d:9d:e4:3a:
         b9:f7:d3:88:64:b3:77:ac:9c:7b:f8:7b:9a:88:1a:33:56:6a:
         65:68:f7:4c:30:65:d8:0f:56:23:15:45:91:a3:f8:88:4b:47:
         e7:9e:a2:66:63:73:40:a6:08:7e:77:5c:11:c1:a0:82:e5:d3:
         35:ab:5f:d3:1f:d8:3d:ce:4c:db:c5:ad:48:8a:9a:00:04:6e:
         25:f4:f4:c8:15:25:4b:bd:da:fe:01:5d:7b:19:4c:83:13:a0:
         ea:93:eb:df:10:18:d2:69:2e:1a:72:ea:93:36:e0:cc:59:be:
         1e:97:18:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:53:12 2026 by rpki-client