Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft
File:                     tjUR6nObBPqgDTGq0uWIekxM-N8.mft (raw, json)
Hash identifier:          p04nZoySIPZr1f4wVELgY3hFolY65b8wpxdTyAfG7uk=
Subject key identifier:   D6:52:3C:29:06:3C:BC:52:43:6F:18:7E:50:49:0A:74:1F:C5:E2:86
Authority key identifier: B6:35:11:EA:73:9B:04:FA:A0:0D:31:AA:D2:E5:88:7A:4C:4C:F8:DF
Certificate issuer:       /CN=b63511ea739b04faa00d31aad2e5887a4c4cf8df
Certificate serial:       01A10DDE379E4943C24D48EAC071042D293E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjUR6nObBPqgDTGq0uWIekxM-N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft
Manifest number:          0105
Signing time:             Mon 05 Oct 2026 21:00:29 +0000
Manifest this update:     Mon 05 Oct 2026 21:00:29 +0000
Manifest next update:     Tue 06 Oct 2026 21:00:29 +0000
Files and hashes:         1: O3Md2fGu_NAQGVwzsUndSXloRpk.roa (hash: II4bSX3yzIxXnF5wQkTynrc5UoTKYvwt/oh8DflXYKc=)
                          2: tjUR6nObBPqgDTGq0uWIekxM-N8.crl (hash: uHOlF8EeB8Fg6S2XnjQU82PCt37uz8wBVnCyoUI+l4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjUR6nObBPqgDTGq0uWIekxM-N8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:de:37:9e:49:43:c2:4d:48:ea:c0:71:04:2d:29:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63511ea739b04faa00d31aad2e5887a4c4cf8df
        Validity
            Not Before: Oct  5 21:00:29 2026 GMT
            Not After : Oct  6 21:00:29 2026 GMT
        Subject: CN=d6523c29063cbc52436f187e50490a741fc5e286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:19:3c:cc:81:4a:bc:9e:d7:53:89:f2:42:
                    0c:71:e5:20:62:f7:da:bf:64:1a:f1:53:b4:79:ee:
                    db:81:4f:2f:fa:a2:d0:fb:a5:02:7f:a2:ca:d0:fa:
                    7a:40:a5:7a:48:d8:6d:81:59:36:9e:f6:eb:8c:8c:
                    40:46:db:a2:c7:4b:4a:ce:bb:1c:b3:e8:c0:2a:85:
                    d2:c6:29:1b:c5:89:4c:93:13:a9:6f:a6:4b:45:f1:
                    d3:36:48:c6:e0:5b:c0:a0:50:da:c3:93:85:80:8c:
                    f7:66:02:ef:48:92:83:83:1c:79:18:1c:74:81:27:
                    a6:fa:67:06:dc:8c:20:20:83:41:83:cf:be:87:cc:
                    6e:d6:4b:f4:aa:bf:ec:30:cf:64:50:79:20:d8:ad:
                    7d:2b:f1:10:ac:5e:45:88:02:4e:57:a8:25:54:da:
                    56:14:86:a3:6b:1f:d1:c7:0e:39:bb:28:20:73:ad:
                    c5:db:24:f3:20:b7:05:d4:6e:d0:cf:b1:c7:fe:74:
                    88:ec:32:d1:66:f7:5e:80:24:12:90:81:37:1e:66:
                    e0:9e:21:a9:ba:c2:8f:03:3a:da:5b:d7:29:48:82:
                    82:84:0d:1d:c5:cc:ea:1b:3d:db:7d:da:de:30:b1:
                    b3:79:57:ee:fc:22:69:0e:8a:8e:28:6a:6b:a5:af:
                    79:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:52:3C:29:06:3C:BC:52:43:6F:18:7E:50:49:0A:74:1F:C5:E2:86
            X509v3 Authority Key Identifier:
                keyid:B6:35:11:EA:73:9B:04:FA:A0:0D:31:AA:D2:E5:88:7A:4C:4C:F8:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjUR6nObBPqgDTGq0uWIekxM-N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:93:d3:eb:c4:fe:2a:02:59:ec:c0:fd:55:5e:9b:bb:d6:27:
         13:a4:25:d1:e8:08:6d:de:1d:52:7f:6a:dd:5b:60:41:c4:be:
         34:ad:6c:63:03:05:73:2f:ea:da:45:89:57:e0:0a:a6:a2:e8:
         71:3f:14:14:0a:a1:2f:fe:e3:09:27:95:13:91:c2:f1:1e:eb:
         47:69:73:66:94:7a:df:af:c8:fd:a4:ca:bb:5f:b1:b6:c6:2f:
         66:63:38:4f:0b:00:69:ea:4f:aa:29:26:92:3d:93:8f:9a:f8:
         43:87:ef:0e:49:f0:2a:1a:6d:d8:a5:f4:9b:a4:cd:fe:f7:61:
         1e:90:7c:a2:81:be:fd:ae:d2:9b:3e:c7:ac:98:4a:9c:2b:5f:
         1c:2f:9b:be:47:f9:4f:c9:4d:b6:86:c7:50:aa:21:27:74:25:
         bc:28:2a:ac:19:5b:66:d2:a7:9d:8f:64:17:94:6a:31:65:b9:
         a0:62:67:36:81:29:b5:80:69:c8:cf:cc:9a:4a:4f:3f:0d:61:
         a3:80:22:de:f5:c9:92:71:08:ef:20:93:06:42:77:97:e1:9b:
         91:ad:76:a5:e5:5b:b8:55:6c:43:e4:c6:3a:85:11:02:50:c3:
         91:f5:29:c2:18:3b:cc:64:88:c3:01:0e:70:f7:0f:15:6c:b8:
         fe:59:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:19:33 2026 by rpki-client