Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File:                     TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier:          1Tj/6Ib8JNvrTPpeOtLEr+z05CYhssGO12ahFcCfzfA=
Subject key identifier:   D8:AE:A4:73:FE:82:B8:AF:84:4C:84:35:78:DF:F6:BC:6E:DD:8D:49
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer:       /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial:       01A0CFA45F14C58BBF6250DE8368D9462407
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number:          1A6F
Signing time:             Wed 23 Sep 2026 19:00:50 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:50 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:50 +0000
Files and hashes:         1: IDKw72UDV4fBvKey2_GXU4YBDRA.roa (hash: qTZQ2NPnaEey/BLWGhLNERBs92D0ttnILDap5h0iO4A=)
                          2: LfKEiBUYG-rD2066F2HvQK8WvPg.roa (hash: P6VfgqJ5zT/fBeMm4CrVPEyhOWX2kuGJJ1u66qFZ3ms=)
                          3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: 3bx33amKsPeBu+g3gOYtuUs1y+cdV+K9irklcCtRwew=)
                          4: UrbBvwlHu4uSvs0RYok_mjpcJHQ.roa (hash: zeDYSU9xRwUTl0+MDt61kl2HDTZsB77vtuzNNebemko=)
                          5: ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa (hash: vg+eKlX0YTyZM3VY4Qut9mEJDRF4SsmNGim25sAbw6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:5f:14:c5:8b:bf:62:50:de:83:68:d9:46:24:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
        Validity
            Not Before: Sep 23 19:00:50 2026 GMT
            Not After : Sep 24 19:00:50 2026 GMT
        Subject: CN=d8aea473fe82b8af844c843578dff6bc6edd8d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:e9:d4:80:d6:38:d5:b6:08:81:7d:ec:70:
                    c0:13:72:8b:a1:07:45:eb:e9:bd:38:b6:9d:a7:0a:
                    2d:2a:c1:76:41:bf:0e:d1:93:6c:0e:44:00:71:1e:
                    37:4f:34:ef:42:cf:0c:54:50:f2:5c:21:7c:6d:b5:
                    9f:c6:27:13:ec:77:3e:b4:ed:f5:43:d9:90:f7:f3:
                    d8:57:b8:91:28:ed:9d:ec:8d:72:b9:d8:f9:2d:7c:
                    80:f2:eb:ff:1f:30:c5:2b:35:02:9e:a6:ee:14:f9:
                    a5:fb:63:bb:9c:74:84:05:de:55:8e:da:dc:7c:34:
                    83:03:b9:e2:aa:31:b1:fa:02:eb:85:dd:b4:e1:55:
                    85:8b:91:87:c5:ba:26:88:d9:ba:1a:20:60:11:4c:
                    8a:56:34:de:69:9f:f7:12:17:3f:48:10:fb:f4:d6:
                    42:e8:2a:09:e0:fc:80:3f:1e:56:c5:87:e5:db:c6:
                    11:52:79:ec:45:9e:44:87:69:d3:05:39:39:d6:ba:
                    10:00:1d:b8:0c:1d:93:08:79:73:fe:86:db:72:9f:
                    e7:20:bb:f9:b5:da:78:03:d2:da:84:70:8c:5e:26:
                    1d:89:31:90:c4:1a:ba:41:94:7f:a5:bb:69:7a:9b:
                    4a:62:45:8a:a6:34:88:42:13:4c:00:58:68:5a:ef:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AE:A4:73:FE:82:B8:AF:84:4C:84:35:78:DF:F6:BC:6E:DD:8D:49
            X509v3 Authority Key Identifier:
                keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:17:4c:16:d6:2d:a5:29:b9:3e:a9:d8:56:2f:7a:c1:dd:a6:
         6e:d3:70:09:24:a0:93:e5:94:93:2b:2b:46:87:65:7b:61:84:
         db:ef:71:e6:14:13:fb:69:a9:6a:79:30:f4:4c:da:5c:71:df:
         4b:87:49:fb:35:ff:82:e4:e2:32:1f:b0:e6:8b:30:2e:e4:43:
         df:1a:e0:2f:c6:5b:0b:ad:dd:82:bf:5f:13:ac:e4:f4:54:43:
         60:4e:cc:8b:11:47:6f:3a:0b:c2:ef:bc:09:8a:c8:5c:0e:2a:
         a1:b9:68:d1:cf:9d:18:5a:86:b4:02:b3:33:ce:e1:40:d9:4e:
         2b:92:e4:eb:73:bb:f9:81:8e:ad:15:14:55:bb:76:6b:bb:6a:
         e8:5f:b5:7e:d5:39:43:e3:bf:d0:fc:a3:5e:60:fc:1b:97:56:
         09:9e:12:24:a7:5f:de:ec:4c:0e:ab:4e:ad:cb:85:05:27:5f:
         12:d5:21:db:6f:8e:09:2b:8d:b6:3f:65:07:a5:1d:82:c3:c3:
         ba:ce:07:9e:75:2a:b4:b1:00:5a:e8:bf:ab:13:3f:35:c0:ca:
         4d:f7:e1:48:f3:92:82:08:2c:16:d9:27:38:03:7c:31:03:8a:
         d0:20:2b:b1:08:14:bf:ae:ed:bb:7d:61:09:af:e6:4e:55:d0:
         b0:df:26:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpF8UxYu/YlDeg2jZRiQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzJiOWVmZjlmMDJjN2NhYmUxOTk1YTJkYjUwOWQ4MjU4
ZDM1ZmMwHhcNMjYwOTIzMTkwMDUwWhcNMjYwOTI0MTkwMDUwWjAzMTEwLwYDVQQD
EyhkOGFlYTQ3M2ZlODJiOGFmODQ0Yzg0MzU3OGRmZjZiYzZlZGQ4ZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph3p1IDWONW2CIF97HDAE3KLoQdF
6+m9OLadpwotKsF2Qb8O0ZNsDkQAcR43TzTvQs8MVFDyXCF8bbWfxicT7Hc+tO31
Q9mQ9/PYV7iRKO2d7I1yudj5LXyA8uv/HzDFKzUCnqbuFPml+2O7nHSEBd5Vjtrc
fDSDA7niqjGx+gLrhd204VWFi5GHxbomiNm6GiBgEUyKVjTeaZ/3Ehc/SBD79NZC
6CoJ4PyAPx5WxYfl28YRUnnsRZ5Eh2nTBTk51roQAB24DB2TCHlz/obbcp/nILv5
tdp4A9LahHCMXiYdiTGQxBq6QZR/pbtpeptKYkWKpjSIQhNMAFhoWu/1KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiupHP+grivhEyENXjf9rxu3Y1JMB8GA1UdIwQY
MBaAFE8yue/58Cx8q+GZWi21CdgljTX8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTkt
YzQwNzNjMTNmZjdjLzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTktYzQwNzNjMTNmZjdj
LzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhdMFtYt
pSm5PqnYVi96wd2mbtNwCSSgk+WUkysrRodle2GE2+9x5hQT+2mpankw9EzaXHHf
S4dJ+zX/guTiMh+w5oswLuRD3xrgL8ZbC63dgr9fE6zk9FRDYE7MixFHbzoLwu+8
CYrIXA4qoblo0c+dGFqGtAKzM87hQNlOK5Lk63O7+YGOrRUUVbt2a7tq6F+1ftU5
Q+O/0PyjXmD8G5dWCZ4SJKdf3uxMDqtOrcuFBSdfEtUh22+OCSuNtj9lB6UdgsPD
us4HnnUqtLEAWui/qxM/NcDKTffhSPOSgggsFtknOAN8MQOK0CArsQgUv67tu31h
Ca/mTlXQsN8mxw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:42:38 2026 by rpki-client