Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File:                     TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier:          kqwACFvuviXXtz0z8cNJJ7gHCU7Z7RJGLLpPo6XeZhM=
Subject key identifier:   5C:E7:33:DE:06:8F:2D:CF:75:51:4B:E2:57:C9:01:EE:B7:F9:06:3E
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer:       /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial:       01A13937389FD0D5F8293074E9CD5FFEC051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number:          1A36
Signing time:             Wed 14 Oct 2026 07:01:22 +0000
Manifest this update:     Wed 14 Oct 2026 07:01:22 +0000
Manifest next update:     Thu 15 Oct 2026 07:01:22 +0000
Files and hashes:         1: 9QPcxbHpWgVOHRfj3NoPhiQ58EM.roa (hash: XHp5Hjfo/9X6W4BtkLuJfmSNkmSR4XZrHJ8I100zW0g=)
                          2: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: uvOSkzw2M3lrAEUQSatdaKd9CSplh+d05AdRW8FUp8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:39:37:38:9f:d0:d5:f8:29:30:74:e9:cd:5f:fe:c0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
        Validity
            Not Before: Oct 14 07:01:22 2026 GMT
            Not After : Oct 15 07:01:22 2026 GMT
        Subject: CN=5ce733de068f2dcf75514be257c901eeb7f9063e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:33:7c:72:5e:fb:82:86:1d:60:c7:79:8f:
                    8e:fc:8b:43:2e:f3:9f:1f:46:6b:1e:70:b6:9f:71:
                    b0:6b:aa:72:d7:4f:44:53:1d:70:92:e0:f7:3c:d9:
                    47:88:f4:7f:ae:8b:fa:35:ff:c0:d0:88:5e:92:1e:
                    26:7e:e4:8a:6d:ac:35:49:05:ff:f4:71:97:44:59:
                    56:48:1e:ef:ae:77:11:ff:c2:1c:8c:99:18:b7:a9:
                    17:90:53:2a:65:49:ea:8f:76:30:4f:65:f3:45:96:
                    97:b7:b1:f5:d9:81:2a:b9:60:41:af:6a:13:d4:73:
                    05:41:9e:74:af:b5:cd:2b:87:5c:4d:08:54:4c:c4:
                    ca:3e:1e:a7:d6:27:1e:52:5b:94:6e:3e:31:6f:4d:
                    21:bc:cb:1a:d7:67:c6:aa:4d:2f:ea:40:96:1b:76:
                    3b:03:30:ca:88:85:bf:e1:24:84:4a:52:24:8c:44:
                    f9:09:3d:06:04:ae:86:ab:c6:55:86:a1:8c:e1:fa:
                    5a:c0:ea:95:a0:5c:54:31:30:cc:96:05:94:24:98:
                    51:08:b1:e3:76:2c:46:12:59:9c:78:e8:36:6b:6e:
                    55:36:f5:06:0f:b3:dc:35:05:0a:94:78:76:ca:60:
                    fc:da:f0:d7:9c:5c:24:04:22:fb:99:99:e1:3f:16:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E7:33:DE:06:8F:2D:CF:75:51:4B:E2:57:C9:01:EE:B7:F9:06:3E
            X509v3 Authority Key Identifier:
                keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:08:ee:9e:67:0e:2f:fc:07:15:ed:ac:39:5e:3b:14:8e:17:
         79:83:f5:c5:1b:2f:d4:ba:d0:70:0a:3c:01:d1:49:1f:5d:47:
         6e:55:06:04:29:76:59:70:de:46:84:fd:c6:1d:cb:92:0c:50:
         60:9e:71:ee:65:2b:b7:38:87:21:4d:42:6a:32:d0:a5:03:2a:
         1b:e5:ee:c2:2b:2f:1e:07:e2:cb:49:21:fb:75:fd:d1:43:6e:
         cb:39:3c:17:41:fc:b8:c7:2f:06:43:4c:2f:6a:67:f2:24:17:
         dd:42:d3:0b:ea:34:d2:eb:79:d4:76:58:e9:87:2d:1d:ab:b7:
         65:93:02:53:25:d4:f6:6b:c4:35:31:e0:18:c9:f4:15:a5:a1:
         96:3d:f9:38:4b:8e:f6:12:19:c8:53:7c:70:bd:7f:3a:0d:b3:
         a0:6c:8a:6b:e5:f8:f7:cb:3f:d8:60:1c:25:be:ee:19:e0:8b:
         61:3b:23:43:c6:32:f1:51:cb:6f:00:1c:f5:d1:b7:9c:ff:1a:
         11:31:3a:6b:3b:51:8a:ad:0e:aa:0c:52:d9:ca:3e:a7:63:64:
         21:f2:0d:5a:43:78:d5:70:9c:b2:bd:95:e1:75:aa:54:73:ac:
         e8:3c:a1:06:a0:6b:0b:77:0f:fd:45:49:d6:3c:10:0a:4b:91:
         80:ff:71:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:04:38 2026 by rpki-client