Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File:                     tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier:          J4fO1YRoOT9cX3UqRRehbMFNZ8uZfZzv9lrePevnd8o=
Subject key identifier:   BC:2C:0D:B1:F3:11:78:0A:CF:8E:6F:0B:D4:21:06:70:8B:4A:27:8B
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer:       /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial:       01A0D80457FA4F725C5A53FF1FA20DEB9CE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number:          1A82
Signing time:             Fri 25 Sep 2026 10:02:38 +0000
Manifest this update:     Fri 25 Sep 2026 10:02:38 +0000
Manifest next update:     Sat 26 Sep 2026 10:02:38 +0000
Files and hashes:         1: 2ZaoqGM6aCKm2bNlZEaeL94Fv10.roa (hash: S0GcAEqKxfe6Q+R2X0UdUocPpyMaBe0EXrwdyrx4AUA=)
                          2: AhPH5Tgl0c0erZbQ41UBHqChXvM.asa (hash: VLsiR2fO2EInnp5+SzZn2B8DlyrzWlf2oyjngstqi6E=)
                          3: CANUIzLfJR4qYVodzcMnNDXdUDE.roa (hash: w932Ollir53g5y+ieb37C38JTybDNf6UCpclagO7ofc=)
                          4: RKWiv_b8Hsm7TZP6_GQSd0RgdgM.asa (hash: QKVQOXrc16Rv1esQVhy/4W+ZeekcFYY56OZCN7aSiBQ=)
                          5: j5nMyhDkND_N1Ut4UNIil32kLZ0.roa (hash: UBj4OSufFBsr7TYpnQq+Obve4nAQx39q2B1z153K9mU=)
                          6: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: dimOL7s7evsD5AbSEO7orYmgTELGoS5tC/UCeoJ8DFc=)
                          7: ulEfQmAzeVskbbMTaRHzrFLs4BI.asa (hash: CcZN/YfO0jHOlqqjuNqceiQx+t9WDbjO4d8kXQUVf+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:57:fa:4f:72:5c:5a:53:ff:1f:a2:0d:eb:9c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
        Validity
            Not Before: Sep 25 10:02:38 2026 GMT
            Not After : Sep 26 10:02:38 2026 GMT
        Subject: CN=bc2c0db1f311780acf8e6f0bd42106708b4a278b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:aa:55:69:65:49:bc:03:bc:bd:1a:13:72:
                    24:f1:5f:16:c5:4d:e1:7d:04:93:fa:be:ca:7f:6e:
                    6c:34:30:3f:5c:ef:f3:65:80:e2:87:0f:d7:3b:26:
                    da:02:bf:ce:a9:08:3a:7d:28:93:28:eb:0b:03:ed:
                    af:0e:31:cb:cc:82:7a:ec:da:aa:ff:37:47:c9:fe:
                    25:f4:78:50:e4:41:7c:f7:e4:13:1c:6d:79:ab:2d:
                    6d:f1:af:a0:1b:e7:42:70:cd:eb:ec:2e:0e:99:9e:
                    0d:3b:68:53:ac:d1:76:57:ff:75:99:31:1c:18:b0:
                    0c:65:90:a5:86:3e:75:75:a4:68:c6:b3:4d:f5:33:
                    b3:3e:af:31:c9:63:72:60:e9:77:ed:df:2e:d0:25:
                    40:7c:30:d7:30:b1:8d:9f:7b:d9:70:80:ef:a2:3e:
                    e3:80:6e:74:c6:3c:ab:c8:0a:2d:5d:c9:13:2c:14:
                    a4:79:3b:0a:6c:17:2d:03:f4:d3:d8:b7:4b:23:35:
                    23:65:6a:24:23:57:2f:c7:36:12:db:69:03:e5:13:
                    3e:4c:65:af:2c:24:45:7b:6b:9b:40:67:a0:24:e9:
                    5b:e6:b8:b6:7d:82:6c:e8:4d:5c:4a:85:1e:69:de:
                    70:d0:92:58:1d:0c:a8:35:55:ff:63:4e:a0:94:23:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2C:0D:B1:F3:11:78:0A:CF:8E:6F:0B:D4:21:06:70:8B:4A:27:8B
            X509v3 Authority Key Identifier:
                keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:cc:52:18:80:43:9f:fe:23:a2:df:8f:f5:b9:47:4a:3c:
         b0:11:94:12:3f:a5:b7:dd:3f:de:2a:9a:68:9b:c3:6a:cf:ad:
         31:89:d4:50:6c:8b:5d:2c:d5:a5:86:db:eb:fc:92:9b:ca:22:
         73:fe:82:f1:4b:30:3c:70:8f:46:4f:70:51:c1:fd:1a:fa:f7:
         b5:e6:2e:49:9d:9f:69:99:9f:ae:e6:a1:31:58:07:4e:cb:64:
         4c:c2:52:3a:47:9a:6b:d0:f5:d8:54:cd:52:0e:f7:88:e6:92:
         41:a9:2a:1e:f2:4e:4b:0b:d7:f0:88:00:09:39:86:b4:9d:93:
         87:f4:9a:d6:77:64:e7:8e:7e:b2:51:40:ed:c4:08:0b:15:06:
         2e:6e:1a:fd:bc:33:db:43:77:06:22:40:20:2b:fd:61:ad:cd:
         45:66:e6:b7:35:66:76:a5:32:cc:95:d7:43:05:30:a6:e7:aa:
         ef:d9:02:94:7f:bf:ba:b8:63:bf:26:a4:c3:bd:8b:28:7a:85:
         fb:30:2a:70:b0:c7:e8:b6:8c:33:d2:36:00:e6:54:04:98:36:
         55:bd:0b:50:50:ff:ad:5d:cc:84:b7:78:8b:e4:0e:ff:03:ac:
         87:83:96:21:10:67:10:48:ca:0d:54:3b:9e:a6:6b:44:4b:8e:
         8e:72:ea:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:07:37 2026 by rpki-client