Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File:                     tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier:          gj2NxO+1B2WW5+v8N124JAzEr4G77wbz29EiajI/XcA=
Subject key identifier:   39:EA:15:93:6F:3A:9B:93:F0:0D:B3:20:D6:3B:4A:EA:23:12:69:BC
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer:       /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial:       01A0CEC8784067149DCCBFC61334EBA77FE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 15:00:39 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:39 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:39 +0000
Files and hashes:         1: 2whxzmDVbfAO3ymvYfT1Br7cjzo.roa (hash: jBvzWSDKzRLptdoSp5Wyo4EetGXs4eXZMTjT2PaKhik=)
                          2: QW73u8rMuH1v1Kv7BEJQbwmdG30.roa (hash: 86pULR+fbjp+HIMXs4j+2SEmIr4Htvw47MfRZHiRzRU=)
                          3: ehZg7NVKRiPcTGHWVyISklSxV_0.roa (hash: Dyhn6Vhbep1Q3HKDE2Bpn72ONwXFiRAQ/djQCOZfQXE=)
                          4: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: 2jD9GdCGogXNWJ5lNbJtO5o/OQZtpO50WRwfRQC7l2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:78:40:67:14:9d:cc:bf:c6:13:34:eb:a7:7f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
        Validity
            Not Before: Sep 23 15:00:39 2026 GMT
            Not After : Sep 24 15:00:39 2026 GMT
        Subject: CN=39ea15936f3a9b93f00db320d63b4aea231269bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:23:a8:4b:71:1b:48:fb:a0:f0:66:6b:7c:40:
                    db:af:5b:6e:e9:c6:3b:85:58:68:97:f6:d6:10:53:
                    3b:b9:b6:88:22:34:c8:6e:96:0e:65:75:52:c4:68:
                    e6:4b:17:b8:6d:7b:67:ff:e0:be:28:54:00:62:64:
                    f5:10:0f:21:0a:7f:62:a8:ea:f5:c0:9d:da:6b:df:
                    a1:74:2b:c1:48:b6:c7:be:e1:60:2a:b1:9f:db:3d:
                    26:34:57:a9:a8:a1:ef:f6:74:c1:e9:b3:c7:d0:89:
                    d3:d8:3c:a2:c3:43:92:cd:ae:a7:60:30:d8:a8:45:
                    a2:19:a1:35:1a:21:d5:18:2f:75:ef:86:dd:b0:e2:
                    a2:08:45:a6:9b:c6:ab:b6:48:80:96:c5:2d:e6:6b:
                    ed:3b:cf:a8:47:45:b0:d3:3d:50:65:9a:c2:4e:ff:
                    be:b8:7c:de:9b:67:5e:01:e9:d3:49:f5:7d:60:cb:
                    6c:45:7c:36:2a:70:99:60:93:4e:a0:d4:27:d1:0e:
                    ae:c2:a8:fe:41:9c:cd:17:03:40:2b:33:e1:92:d7:
                    61:f8:24:ab:62:21:d1:4d:e2:bc:e4:5b:72:d0:e3:
                    73:74:4d:7a:bf:77:6d:70:23:2e:0d:80:fd:01:b9:
                    d0:eb:63:e9:1e:e3:9e:cd:70:fa:f5:1f:71:bd:ea:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EA:15:93:6F:3A:9B:93:F0:0D:B3:20:D6:3B:4A:EA:23:12:69:BC
            X509v3 Authority Key Identifier:
                keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:60:d7:8c:8f:5a:29:6c:35:9e:8a:10:1c:41:c2:74:af:19:
         77:1a:e3:71:39:0c:20:5b:c8:0f:3f:6d:0f:0a:ad:63:14:53:
         31:5c:73:ca:10:3b:47:c8:04:a5:85:a9:03:9a:e6:66:48:54:
         59:e4:5e:ba:17:7f:6c:23:18:48:68:c9:ea:61:b2:12:50:5a:
         08:81:12:f0:bc:1b:3b:6c:d2:7b:26:31:20:53:20:a1:ff:6e:
         ed:4c:26:48:d7:64:e0:8f:51:a9:ad:8a:96:d8:a1:d9:06:8b:
         dc:f4:74:85:be:fc:6a:9b:a9:68:06:42:1c:01:30:4c:eb:d9:
         b6:50:ee:10:54:cf:12:47:68:80:58:19:4f:2f:f6:0b:f5:e9:
         b8:4e:9c:fe:22:a2:55:0c:69:4b:81:4e:fe:af:7d:8e:62:d7:
         19:e9:ce:5d:a2:24:12:ca:70:57:b9:8b:f8:8d:c0:32:97:0e:
         d5:6e:a4:44:53:62:ff:f6:9c:45:f9:49:9d:55:50:d9:5e:32:
         88:b9:eb:71:00:cd:16:e6:2d:bb:65:0a:14:4d:11:57:56:82:
         a0:e4:fd:6e:39:fd:91:03:08:f1:55:5a:6b:48:0b:35:cf:c1:
         0c:eb:0d:36:32:70:c6:f4:24:26:ce:03:d8:63:44:50:bd:e1:
         ca:3f:a8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:14:05 2026 by rpki-client