Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File:                     TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier:          YXpQDVfWjNb4i/7LdkLMYjHp33fIaI/HtbYY7FUaJWU=
Subject key identifier:   18:05:5D:DD:41:02:4C:F4:2E:9F:FD:45:82:93:29:FA:CC:48:4E:5D
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer:       /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial:       01A0DA96E0F6FC7FFD66CBF89D42B3D69C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number:          1A73
Signing time:             Fri 25 Sep 2026 22:01:56 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:56 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:56 +0000
Files and hashes:         1: 6h3DLRd0aoO08FWkuvK-DIL1TAI.roa (hash: QbNhinBRvnYOWmudxD6YkQ5YvTv3wj3nF5VH2568D0c=)
                          2: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: kmSdBGn+ef/P5j8WyEdu//Zk3ttavQGXrX5Q9XK/Gis=)
                          3: kzYQmwQKzbuQvS3iB2mDUlnw91Y.roa (hash: bz4ecHp+kkkRf1WW8soaqZgJTcHf8FiOXW+H4gSzf48=)
                          4: lv8af-jyuveaHC9x_OKdx2NgSxI.roa (hash: qC6P7LJylLpMoNR/tNemeZF9+aw6XACba3yU1fASXaI=)
                          5: wMLINqfRL31emUgeWzPrQ7en_WU.roa (hash: 28WktakjRSH95PtqAXbEMoIgPvxQiYsWki+RGQe70G0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 22:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:e0:f6:fc:7f:fd:66:cb:f8:9d:42:b3:d6:9c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
        Validity
            Not Before: Sep 25 22:01:56 2026 GMT
            Not After : Sep 26 22:01:56 2026 GMT
        Subject: CN=18055ddd41024cf42e9ffd45829329facc484e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:40:9c:f3:b6:97:2e:75:83:32:62:16:21:
                    3e:6c:b7:f6:8c:d1:e3:02:81:ae:22:c3:eb:66:9b:
                    d7:19:3c:f7:9b:14:3f:94:93:08:87:94:26:75:26:
                    a1:63:21:9a:d6:97:cd:0d:47:1b:1b:79:f0:dd:45:
                    b0:99:ac:26:7a:76:8c:37:cf:d0:6f:08:37:cb:7f:
                    ac:14:21:cd:ee:ec:7f:3f:21:5d:19:8a:c4:15:1d:
                    a6:65:91:22:52:b7:e5:4f:92:25:4f:e7:f5:31:e9:
                    50:e8:2b:ed:bd:cc:fa:68:45:99:4a:2c:61:a2:d6:
                    b2:9e:a2:2e:18:7f:e5:0f:86:da:fe:0a:3e:e9:ed:
                    e2:9b:1d:33:e8:7c:1d:f6:05:e4:75:e8:17:20:04:
                    7e:a4:c6:ac:e1:1a:e6:2a:d5:6c:56:03:e1:64:d0:
                    8c:0f:c5:5c:03:3a:69:74:23:45:e2:f3:70:74:27:
                    07:50:b5:a6:b6:5f:ef:87:3c:f2:36:1c:ee:d1:3a:
                    45:79:28:59:a9:1b:c2:41:cf:b9:94:de:5a:3a:00:
                    d4:c3:62:9f:ff:2b:92:4e:d6:a1:f6:0c:33:bb:77:
                    66:5d:e2:9e:85:75:45:14:53:ef:30:1d:69:4d:6a:
                    d3:41:d5:58:92:74:f9:03:ec:7f:57:37:0c:f7:06:
                    b8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:05:5D:DD:41:02:4C:F4:2E:9F:FD:45:82:93:29:FA:CC:48:4E:5D
            X509v3 Authority Key Identifier:
                keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:50:22:0c:db:cc:d3:15:30:ba:6f:07:04:45:c9:bb:00:d9:
         92:d0:55:8e:e8:42:e7:dd:34:a7:aa:ea:09:02:52:ea:38:1e:
         14:1f:4c:4a:f1:8c:53:b8:6b:f5:4b:96:22:28:19:06:62:d4:
         df:49:71:1d:a7:a1:7c:eb:3f:6d:42:ce:33:1a:9a:5b:08:ed:
         d5:4f:50:cb:d5:5d:55:b0:13:22:1d:e5:f3:3f:56:76:af:b3:
         ba:fe:9f:ea:d9:f0:8c:71:f6:fe:12:43:47:7d:65:97:07:cb:
         b4:3a:63:10:0c:72:a7:81:68:32:ed:2b:49:d5:f2:e0:48:19:
         11:39:79:c5:78:3d:2f:4e:49:5e:49:42:0e:6b:bb:50:17:6d:
         d2:28:0b:27:2f:51:f3:0b:3a:1c:08:ab:8f:87:35:b9:2a:2e:
         34:49:7a:b0:b1:b3:41:33:05:b0:93:b0:bd:f4:80:23:1d:c8:
         f5:83:5b:f8:05:df:1e:6e:8e:87:63:33:a0:b3:2d:35:98:b8:
         28:2a:57:e2:83:1f:43:8b:e9:05:3d:75:4b:d5:34:a3:d5:ae:
         56:48:15:0f:9b:8d:6f:57:da:0a:86:3f:99:a5:43:6f:21:18:
         4c:1a:11:db:c9:84:28:71:24:24:1c:f0:24:20:0d:c5:b9:1c:
         03:45:71:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaluD2/H/9Zsv4nUKz1pwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy
YTgxZWEwHhcNMjYwOTI1MjIwMTU2WhcNMjYwOTI2MjIwMTU2WjAzMTEwLwYDVQQD
EygxODA1NWRkZDQxMDI0Y2Y0MmU5ZmZkNDU4MjkzMjlmYWNjNDg0ZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBRAnPO2ly51gzJiFiE+bLf2jNHj
AoGuIsPrZpvXGTz3mxQ/lJMIh5QmdSahYyGa1pfNDUcbG3nw3UWwmawmenaMN8/Q
bwg3y3+sFCHN7ux/PyFdGYrEFR2mZZEiUrflT5IlT+f1MelQ6Cvtvcz6aEWZSixh
otaynqIuGH/lD4ba/go+6e3imx0z6Hwd9gXkdegXIAR+pMas4RrmKtVsVgPhZNCM
D8VcAzppdCNF4vNwdCcHULWmtl/vhzzyNhzu0TpFeShZqRvCQc+5lN5aOgDUw2Kf
/yuSTtah9gwzu3dmXeKehXVFFFPvMB1pTWrTQdVYknT5A+x/VzcM9wa4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgFXd1BAkz0Lp/9RYKTKfrMSE5dMB8GA1UdIwQY
MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt
N2RjNWJkZGY5MWI1LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1
LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFAiDNvM
0xUwum8HBEXJuwDZktBVjuhC5900p6rqCQJS6jgeFB9MSvGMU7hr9UuWIigZBmLU
30lxHaehfOs/bULOMxqaWwjt1U9Qy9VdVbATIh3l8z9Wdq+zuv6f6tnwjHH2/hJD
R31llwfLtDpjEAxyp4FoMu0rSdXy4EgZETl5xXg9L05JXklCDmu7UBdt0igLJy9R
8ws6HAirj4c1uSouNEl6sLGzQTMFsJOwvfSAIx3I9YNb+AXfHm6Oh2MzoLMtNZi4
KCpX4oMfQ4vpBT11S9U0o9WuVkgVD5uNb1faCoY/maVDbyEYTBoR28mEKHEkJBzw
JCANxbkcA0Vx/w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:40:46 2026 by rpki-client