Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
File:                     TYSYYfMMjxxiytuIlYRGumIAIe0.mft (raw, json)
Hash identifier:          9Aae/3LrjbC7xkmiKfWFn5bOc5G90ZFbAEWCW+stKds=
Subject key identifier:   91:5F:35:6D:8E:C9:33:86:C6:23:EE:8C:B8:9F:2B:ED:B1:EB:DE:7D
Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
Certificate issuer:       /CN=4d849861f30c8f1c62cadb88958446ba620021ed
Certificate serial:       01A0E2F51195458FCE9B55AEADA7B64F8F2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
Manifest number:          026F
Signing time:             Sun 27 Sep 2026 13:01:46 +0000
Manifest this update:     Sun 27 Sep 2026 13:01:46 +0000
Manifest next update:     Mon 28 Sep 2026 13:01:46 +0000
Files and hashes:         1: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (hash: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0=)
                          2: TYSYYfMMjxxiytuIlYRGumIAIe0.crl (hash: cgsqyi5aMyhTe02QY9zkfOgimgsM4MPfhy5NBUwSgrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:f5:11:95:45:8f:ce:9b:55:ae:ad:a7:b6:4f:8f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed
        Validity
            Not Before: Sep 27 13:01:46 2026 GMT
            Not After : Sep 28 13:01:46 2026 GMT
        Subject: CN=915f356d8ec93386c623ee8cb89f2bedb1ebde7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:75:97:5c:c8:c6:e0:4b:e5:de:a8:e6:d5:
                    70:a8:4b:d1:48:dd:c9:3c:98:97:24:7d:a9:73:33:
                    b6:c0:b3:8e:fc:19:1d:e9:e8:06:66:54:96:d2:7c:
                    7e:6a:3f:93:e5:e9:70:db:de:36:e6:0d:9a:13:1a:
                    6e:eb:69:c7:6e:a6:74:97:e4:52:06:cc:fd:23:ed:
                    b9:1b:1f:26:c7:b3:a1:4a:0d:cd:34:28:98:28:b9:
                    42:db:bd:96:af:bf:98:77:45:16:42:0f:e1:78:ed:
                    1a:d9:75:57:09:b3:04:b2:b1:22:f1:d2:48:3b:60:
                    1b:11:6d:50:52:72:4a:f6:11:ca:b3:84:79:23:49:
                    66:0d:40:a8:59:5c:05:c2:4c:36:c8:25:8f:58:c2:
                    6d:16:3f:53:45:35:30:21:f3:5b:b0:52:7d:d5:08:
                    50:1a:2c:58:ab:b6:c3:a2:3e:01:88:67:ef:7e:7d:
                    c8:c3:9f:e1:03:86:fb:5e:cc:73:10:89:c6:04:b5:
                    15:0a:0c:d6:e1:e2:0b:c2:ca:45:ea:11:06:2e:75:
                    87:90:71:72:b9:69:59:22:28:82:3f:e0:36:83:60:
                    85:5e:9f:61:db:d6:30:c4:bf:a0:c2:cf:ac:10:9e:
                    0e:ca:90:69:1f:7d:4a:20:d7:5e:70:5a:3a:ee:be:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5F:35:6D:8E:C9:33:86:C6:23:EE:8C:B8:9F:2B:ED:B1:EB:DE:7D
            X509v3 Authority Key Identifier:
                keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:37:99:11:98:a7:a1:ef:d8:32:10:1a:4d:70:60:59:00:6e:
         b4:b5:83:1e:ba:52:1c:09:de:5e:be:a3:24:24:ff:0d:cd:9d:
         c5:e2:6b:9b:26:8b:65:76:98:45:fa:ac:2e:bb:84:6a:ff:3c:
         80:9b:98:7b:03:7f:33:6d:59:cf:bc:bb:32:77:05:2c:3d:dd:
         0f:5d:6b:32:12:32:e2:13:cc:f2:40:6a:c8:27:b9:e2:4f:8d:
         22:84:6f:c0:54:86:48:ad:c5:f2:a1:94:81:fc:a8:14:be:1c:
         4b:76:dc:7a:c6:16:4c:1b:86:aa:29:df:c4:53:01:39:8b:89:
         d2:8e:0e:68:94:a2:af:da:66:2a:02:ee:61:48:c6:a9:1c:61:
         79:4c:07:9b:0a:e0:4c:5d:ee:26:cc:38:de:b4:2e:dd:4f:8b:
         c5:17:ea:1c:ab:f9:4d:7f:b2:09:70:e8:60:4a:71:b6:f6:50:
         d0:a6:f3:7e:9f:94:99:5c:42:2b:d0:58:36:99:8c:10:c8:7c:
         42:6c:62:0e:51:6c:5e:f2:90:84:33:5a:34:c7:8b:d0:39:0a:
         b8:61:c8:eb:85:70:5c:74:90:c5:13:01:71:27:89:ef:5d:44:
         68:37:52:89:0f:9b:ac:b6:c5:da:06:80:c9:39:50:47:a4:21:
         55:9f:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:11:58 2026 by rpki-client