Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File:                     TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier:          Bfw73wh9eZJq4z3a5WjIUNxb0PFW2pil7cBwRAe2ZZM=
Subject key identifier:   28:B0:4C:FF:40:C6:C4:19:73:3E:C7:78:1D:5C:F7:42:48:AC:91:4A
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer:       /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial:       01A0E0986D7C855F3D813290604129A6FC7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number:          0B69
Signing time:             Sun 27 Sep 2026 02:01:20 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:20 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:20 +0000
Files and hashes:         1: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: MnPL9diNbEavhkW7Av2DwsaEQk9xzlNmqQdPL05ov9A=)
                          2: oPCuq54P2bsSATikpn82yn6-AEM.roa (hash: lHLmqu6Ruee6ZqCasWZKuPLRXPXPUX8ZgrdyBMM4hU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:98:6d:7c:85:5f:3d:81:32:90:60:41:29:a6:fc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
        Validity
            Not Before: Sep 27 02:01:20 2026 GMT
            Not After : Sep 28 02:01:20 2026 GMT
        Subject: CN=28b04cff40c6c419733ec7781d5cf74248ac914a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:f6:82:e0:28:ef:1e:28:07:ac:e2:58:eb:
                    a4:f7:6d:49:88:55:88:4b:fe:b8:69:92:8f:24:08:
                    db:99:82:26:8e:b4:fb:d6:ac:80:d9:4f:54:52:29:
                    ad:07:90:a2:a4:2f:0c:92:9e:03:ce:07:a3:66:2f:
                    00:52:ea:a6:ce:62:b6:3e:88:89:b1:80:9d:06:c0:
                    8d:1a:57:f1:5b:cf:a6:8d:b8:45:bb:ba:84:90:e7:
                    44:2b:46:29:6b:90:61:93:e8:1f:b1:30:27:2c:ba:
                    e4:96:83:09:d0:a5:e8:9b:d0:39:6b:16:93:22:43:
                    2f:f5:fb:f2:7e:38:86:bd:b4:90:24:42:b0:19:79:
                    05:2d:ba:69:47:fe:69:b3:e9:05:64:be:97:a8:9e:
                    37:fc:3a:0e:ec:5f:76:36:24:15:74:5e:09:38:64:
                    57:e8:00:87:f3:05:29:49:1e:9f:8f:c0:a6:c9:7c:
                    b1:a0:f8:6a:7d:36:66:22:4b:26:ef:36:56:30:a7:
                    6c:16:f9:66:52:76:5c:e9:dc:79:f6:75:32:05:87:
                    e3:36:f1:88:e8:a4:62:d5:45:b2:d2:18:bf:af:59:
                    d0:eb:eb:1e:e4:da:db:95:cb:76:b9:23:fa:d4:63:
                    ef:46:56:17:3b:7d:07:3c:1b:60:ff:a4:4f:3f:00:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B0:4C:FF:40:C6:C4:19:73:3E:C7:78:1D:5C:F7:42:48:AC:91:4A
            X509v3 Authority Key Identifier:
                keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6c:f5:fe:7a:2c:f1:e2:83:fc:8d:57:1b:15:21:82:29:d2:
         38:cf:da:9e:5e:03:97:99:59:55:d6:36:bb:58:73:ef:b6:9b:
         f1:1a:b1:f6:ab:3c:3e:9f:40:2b:ef:d9:7f:5a:18:70:1e:17:
         41:d6:2b:48:dc:58:b8:06:80:02:2e:90:75:71:8b:f5:dc:57:
         15:77:0e:2a:23:46:46:d2:5c:cc:96:79:34:27:33:50:b6:f1:
         f2:dc:9a:06:51:07:2b:29:88:8a:58:f6:18:94:75:cf:fd:4e:
         fb:f4:1f:cc:db:93:bf:ab:97:00:25:30:9b:27:ad:54:1f:2f:
         af:a3:66:f8:b1:10:fe:3d:f8:5f:65:0a:fa:39:aa:10:85:f9:
         fe:4c:0d:b2:72:05:27:00:f0:86:8f:a5:8d:47:3a:27:f9:b0:
         ec:e1:d2:c5:30:75:26:bc:c8:ea:ec:d5:e6:af:65:3d:c6:86:
         a4:5d:21:9f:38:59:e2:34:e0:fb:ca:72:17:e9:ee:c9:1d:83:
         5b:43:21:f4:fd:17:40:8a:14:d1:fa:11:48:4d:7d:39:17:8b:
         b6:b7:c8:07:55:e4:27:77:4b:99:ae:25:10:a8:d2:d2:b3:75:
         3a:8a:b9:88:00:03:06:ae:4a:3c:5d:79:3a:49:7c:8c:b4:e0:
         0e:da:0d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:23:22 2026 by rpki-client