Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File:                     TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier:          kwtKp7yQXEvkD2OpBrbF/X8yYGWM6dtTc4kHGZM9zmM=
Subject key identifier:   E5:FE:7A:A3:5E:9F:5F:59:49:01:FB:5F:73:B4:7D:1D:05:71:A2:88
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer:       /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial:       019F91A43F8839F944DA7391E10BE63D31A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number:          10AB
Signing time:             Fri 24 Jul 2026 01:01:28 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:28 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:28 +0000
Files and hashes:         1: 0tktadOdx4n8mac4w9y4uxxnQb4.roa (hash: n46RKOzZ9/eSRXSwMZil9zlLwS3ZgBVtTMxO4eNCf08=)
                          2: 42YWr5OhbKc0Pizwtc2S4hATTvI.roa (hash: DjyBYoPw3TsTXrbKpaqqcR6UDSKAlprPGT2cyckJMMA=)
                          3: AzQxJhJ4Z1TEqxs8ToOa3faLKx8.roa (hash: aCSm8m0t4y+fvwbcBrYNhHamTehxOv4Ukp4HETVoDPE=)
                          4: IZQtORr-3U05VM82NLGSac5kUKo.roa (hash: vKvrHvX6TuHXpl6ZvCaEsWmF+MUfHlyXbUCXrMpEZ9U=)
                          5: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: dg2nGk9IWPUHBUEET+NLKuQV86+tm56TSxGsD9AXuww=)
                          6: rd1TYdEXPHhLUYvq912Q58Dh15E.roa (hash: ged8RYg6t00YYbjATYOf0qeEgk1jUhkA3s1XP4KCL6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:3f:88:39:f9:44:da:73:91:e1:0b:e6:3d:31:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
        Validity
            Not Before: Jul 24 01:01:28 2026 GMT
            Not After : Jul 25 01:01:28 2026 GMT
        Subject: CN=e5fe7aa35e9f5f594901fb5f73b47d1d0571a288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:98:5c:0f:8f:24:ae:79:de:eb:4d:5c:5a:
                    9b:14:7b:b2:c0:a6:b9:15:b8:1f:c0:90:dc:d2:5f:
                    2b:0c:b5:85:bd:e7:34:30:1d:dd:f5:e6:e0:48:ad:
                    71:03:54:35:51:30:7b:8e:3e:9d:fa:4b:b6:50:19:
                    9b:fb:38:48:e7:81:ae:11:d9:6e:23:e0:50:13:08:
                    ca:83:9d:36:fb:c3:eb:1c:01:eb:f1:52:42:50:3d:
                    b3:e1:51:f9:a6:ed:5b:10:43:6d:7a:c2:ad:ed:57:
                    18:c3:d7:39:b7:1c:ae:b8:b5:44:81:89:c7:3b:4e:
                    b4:17:95:48:ff:bf:8f:51:e8:eb:04:99:46:be:bf:
                    8d:6e:a3:5d:3a:b9:0b:7d:f3:60:e1:63:07:2f:80:
                    a2:2d:81:4d:4d:e4:ae:5c:ee:0e:69:a4:32:e0:40:
                    1a:12:45:1b:3e:70:06:9a:27:eb:99:90:68:6f:f1:
                    26:35:cd:e7:92:ac:39:5e:3c:fe:f5:8f:15:74:43:
                    59:21:6d:f4:d6:31:11:18:ff:20:41:10:fb:b5:32:
                    98:a6:96:13:b3:a9:7b:4c:96:57:4d:8d:9a:df:68:
                    6b:3c:b6:97:96:bf:e6:fd:9a:68:f0:37:a1:c8:ca:
                    6f:6e:aa:43:17:c6:3b:ec:74:cf:3d:f8:e3:a8:d9:
                    e5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FE:7A:A3:5E:9F:5F:59:49:01:FB:5F:73:B4:7D:1D:05:71:A2:88
            X509v3 Authority Key Identifier:
                keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:1c:20:5f:36:4d:b4:b5:c3:3e:15:02:2f:b1:9a:5e:7c:6d:
         f2:97:19:1a:9f:54:3c:b9:e7:77:c8:c0:cf:e2:c1:6e:c2:b0:
         91:0f:16:94:e9:73:de:87:b4:af:35:d0:86:bd:85:56:99:7d:
         82:8c:b2:70:c9:f2:4a:fe:f6:fc:9e:34:f5:33:dd:b5:69:24:
         1a:82:21:c9:a4:df:46:86:da:76:1a:82:a5:62:90:fb:79:24:
         37:cf:2c:c8:c3:1d:fe:72:40:ce:5c:e3:d3:79:7d:09:38:db:
         30:4b:e0:72:c1:ca:f3:37:f9:11:5e:cf:0b:c5:d3:99:85:91:
         b3:b6:3d:7e:fe:c4:fd:f5:59:7e:21:07:58:ec:0e:83:b2:d7:
         21:7c:00:7e:87:25:5f:49:34:6a:10:4b:d6:03:33:30:90:c8:
         c5:de:a7:7b:6b:7d:02:b5:a9:b1:bf:4b:3a:47:3c:c1:60:b4:
         51:5c:4f:f4:fb:4a:17:1c:5f:bb:6f:ff:37:94:85:3f:b0:e1:
         60:b6:6e:a6:d3:e9:9c:7f:9b:9c:17:5d:15:03:d3:fb:0b:67:
         b6:fe:a0:f6:4c:6a:18:5d:f8:45:78:a7:6f:61:af:ac:10:08:
         e5:07:23:5f:6a:ed:e2:ba:ba:b3:a7:7d:08:3e:6c:bb:eb:70:
         d5:2b:91:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:51 2026 by rpki-client