Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File:                     TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier:          HSA/wQ8VnR12eVxN/sSJEiRCKmPIF//gPTEnC4q65DI=
Subject key identifier:   CE:75:DB:15:4B:C0:F9:4B:CD:63:40:6B:04:53:DF:9A:13:B7:B2:EF
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer:       /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial:       01A0E1756107622694D074589410D6D9A345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number:          1A74
Signing time:             Sun 27 Sep 2026 06:02:41 +0000
Manifest this update:     Sun 27 Sep 2026 06:02:41 +0000
Manifest next update:     Mon 28 Sep 2026 06:02:41 +0000
Files and hashes:         1: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: QoecToCLP3NjQ0JV7IZtKVZMXjsZnXXN9ZHNSiK2C4o=)
                          2: uhDIc0uEZUElVgS-_EocXKCrnM4.roa (hash: Q1EY9r/YhBigZO4RXwGxgcBbj+7/3SMubwYfDCdrIGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:75:61:07:62:26:94:d0:74:58:94:10:d6:d9:a3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
        Validity
            Not Before: Sep 27 06:02:41 2026 GMT
            Not After : Sep 28 06:02:41 2026 GMT
        Subject: CN=ce75db154bc0f94bcd63406b0453df9a13b7b2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:5e:bb:b7:68:62:6f:c4:e7:0c:85:54:1c:
                    54:65:56:fb:12:10:cc:1d:2a:96:28:98:f7:60:f3:
                    e2:b6:d3:28:0f:60:f4:55:67:dc:75:4c:d0:92:5d:
                    97:b2:72:cc:1a:77:41:58:28:10:02:07:ae:c8:c9:
                    1d:0f:1c:22:11:7a:9e:b7:d7:2c:20:17:f0:6b:9a:
                    09:b1:53:f5:20:5a:57:50:db:cc:cc:9b:af:5d:c3:
                    e9:4b:d2:5d:a5:4d:80:c8:b9:31:e0:bd:da:dc:e4:
                    56:19:4c:55:64:0d:58:03:f1:a2:de:f7:d2:c9:ce:
                    e2:01:75:d1:8d:22:47:42:5d:ba:e2:2c:a1:6e:1c:
                    80:39:22:d9:7c:05:ad:a2:53:07:a8:85:0a:e1:f8:
                    9f:54:d4:10:56:cf:60:89:ec:c4:69:95:f7:3e:43:
                    d5:a8:15:90:ec:85:e4:5f:0e:0a:3d:ea:62:65:cd:
                    5d:76:5a:97:3a:ca:04:91:1d:b9:c6:54:d1:2e:a8:
                    39:f1:7e:39:6d:02:8c:0d:22:67:47:93:03:5c:6b:
                    db:00:30:2d:98:2b:33:1f:14:16:48:88:56:d1:b4:
                    bc:47:1a:93:e7:f1:6f:05:b2:bc:5d:62:09:52:c7:
                    bb:b3:0d:f6:c1:6f:a8:d7:e9:25:b4:61:24:f1:4d:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:75:DB:15:4B:C0:F9:4B:CD:63:40:6B:04:53:DF:9A:13:B7:B2:EF
            X509v3 Authority Key Identifier:
                keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6a:31:1f:d7:f0:3a:bb:6f:af:26:e3:0f:37:23:9d:38:77:
         fe:8e:c0:6c:1b:22:62:08:9f:d7:8a:d3:dc:7e:41:ea:10:88:
         72:76:03:e5:47:0e:2c:eb:c7:a8:6f:07:57:cc:93:69:bc:36:
         4f:3a:59:f7:b5:ed:ce:a5:05:ef:6e:7d:e1:98:6a:f3:3e:ac:
         14:80:e1:1c:c5:b4:9f:d8:7d:32:5d:d6:e9:46:f4:5b:71:66:
         aa:40:6a:1a:59:71:03:d7:db:aa:70:ff:d1:0d:c3:9c:d1:35:
         88:0a:b1:1e:03:7e:00:d8:48:b1:fd:5b:0b:ec:ee:c4:4d:9c:
         5b:0a:05:4e:c5:8c:7e:47:3a:74:e5:14:29:0d:23:7b:06:2f:
         d6:55:97:b2:e5:42:4d:fe:c4:97:ff:ff:c0:0d:7a:c7:6b:96:
         d7:6a:cf:3b:f8:dc:0e:2f:74:ea:46:d2:c5:19:20:07:8d:ee:
         61:2e:db:32:cf:64:9b:2e:56:a7:c5:e7:a8:3c:3b:5f:73:d5:
         fa:d5:ee:0f:b9:8e:b4:48:5a:35:d4:bf:51:2f:ec:33:4c:2e:
         db:3a:24:92:3f:cb:10:33:8b:9b:18:bc:f8:8c:61:6b:9b:9b:
         ef:4e:21:ea:b8:5a:de:7b:4b:d4:95:7d:9b:71:62:ca:ae:76:
         48:fd:0f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:45:06 2026 by rpki-client