Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File:                     TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier:          kI2+41Y3CBOJ/uXQTqUwGHTpPrXU1yieIwJLi8ZsP/A=
Subject key identifier:   88:86:16:4A:9A:4E:2E:99:F0:B0:C0:48:B3:BD:35:00:3B:C5:D8:CE
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer:       /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial:       01A0E24F93B64E6A10A33C288DAC07BA413F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number:          1A75
Signing time:             Sun 27 Sep 2026 10:01:01 +0000
Manifest this update:     Sun 27 Sep 2026 10:01:01 +0000
Manifest next update:     Mon 28 Sep 2026 10:01:01 +0000
Files and hashes:         1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: IlS/IJrbWGqo2GoULZI8igSJrn7f7UT7G46ed23QuzY=)
                          2: e-PGryCKPVYVZQ4a0ucbiF-IKko.roa (hash: I6xOBjO/hgVperV3b00ycb8iwKnWcTOA7utz+CTNOoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:4f:93:b6:4e:6a:10:a3:3c:28:8d:ac:07:ba:41:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
        Validity
            Not Before: Sep 27 10:01:01 2026 GMT
            Not After : Sep 28 10:01:01 2026 GMT
        Subject: CN=8886164a9a4e2e99f0b0c048b3bd35003bc5d8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:7a:8f:1d:de:24:41:c6:4f:d6:33:5a:b8:
                    04:c5:4f:8c:72:d3:06:80:75:26:76:7e:92:48:3e:
                    d8:2d:a5:ee:bb:61:b1:90:68:c9:06:c6:df:66:93:
                    62:b2:ee:73:64:c9:00:5f:2d:9e:f1:7e:86:22:79:
                    9f:b8:56:ac:f4:6c:f7:4d:40:71:37:b9:4b:42:dd:
                    e7:92:0c:40:12:06:98:a2:47:ff:cb:10:ad:ab:14:
                    e1:c5:b6:21:f7:2e:18:cf:f5:0b:1c:ea:32:59:05:
                    ff:ab:13:ca:aa:0b:de:2b:d1:00:1c:76:e9:e4:41:
                    cb:54:e6:91:8c:13:94:cb:57:5a:4e:a1:9b:11:90:
                    db:2e:98:91:28:91:a2:8a:6c:57:9a:50:c1:cd:ab:
                    ff:05:2b:ea:d5:e1:c7:6c:63:6b:a4:a9:22:1b:da:
                    49:5c:0f:3b:ea:3e:12:88:f9:e2:df:7a:ab:db:41:
                    d1:74:27:4a:b6:e1:ae:fc:ad:3a:fb:30:5e:2f:91:
                    f3:56:42:05:17:4c:ea:dd:4d:f5:25:af:b9:d6:c6:
                    09:1f:7c:5e:9c:72:d5:31:3d:1a:81:bf:54:15:f8:
                    3a:e2:14:be:a4:97:75:6b:74:8d:de:b1:55:6a:4d:
                    09:09:b2:be:b2:e4:57:7e:3b:99:ef:4a:eb:bc:ca:
                    47:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:86:16:4A:9A:4E:2E:99:F0:B0:C0:48:B3:BD:35:00:3B:C5:D8:CE
            X509v3 Authority Key Identifier:
                keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:45:5a:e0:81:3e:96:a3:17:34:e0:b7:b4:b7:d2:00:77:08:
         50:26:a5:44:8e:83:80:e0:03:a6:fc:8a:c6:a6:5c:cd:a7:c7:
         e4:13:1d:0a:84:06:a8:6a:4b:d3:58:c7:89:44:96:14:0d:32:
         c2:c0:84:ce:25:e8:63:fb:e6:5e:b2:49:c4:4a:e4:90:ff:26:
         f7:56:e0:5a:66:5e:b4:46:60:96:79:05:e8:9c:2a:06:a3:a1:
         2b:15:3f:3b:34:02:fe:67:dc:16:c3:31:5d:14:6d:83:e6:a6:
         73:03:d9:1b:69:d7:a1:2f:f9:a9:9d:62:25:d4:46:f3:91:b2:
         2f:c9:57:a4:9a:12:9d:4e:d6:1a:be:2b:5f:58:a5:dc:c9:de:
         14:2a:08:51:8b:8d:35:e4:ae:de:ea:8f:79:f6:c3:cd:c0:51:
         8c:9b:73:89:6a:af:94:0e:7b:77:db:c0:5f:2c:4f:85:2c:79:
         da:ab:d4:5b:e0:ae:6b:a7:b6:1f:3d:2a:f2:4d:5b:fa:63:12:
         cd:73:ac:d4:84:ee:f4:19:de:ec:fe:bd:80:fb:be:7f:de:4f:
         41:08:cb:fd:b7:c5:27:f3:86:8c:2c:0f:64:a8:68:6c:d8:d2:
         6f:f8:d1:5f:00:02:99:88:46:e1:76:60:f1:06:7d:21:69:b8:
         fd:ff:12:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:22:17 2026 by rpki-client