Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File:                     txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier:          CFwfzQHdU96gjXYar3AJ3GXYtXR6shzmAIkYiKMZu64=
Subject key identifier:   77:41:12:1F:91:A5:15:85:AB:25:C3:EE:26:37:B9:3B:CB:02:E5:60
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer:       /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial:       01A0E99B9BD35EB8C435E90B8C0E7537AB24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number:          1A77
Signing time:             Mon 28 Sep 2026 20:01:24 +0000
Manifest this update:     Mon 28 Sep 2026 20:01:24 +0000
Manifest next update:     Tue 29 Sep 2026 20:01:24 +0000
Files and hashes:         1: Hh4oawFMPhlZWHiv9oVznjVHldw.roa (hash: ZkANeMjzmI2+4mD6XiyteCRytMwKnaF4f4SfTl1h+1g=)
                          2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: A3BKZ1gyQFixmvpk60/F3+JQIRB8eGnySnUveXa6alY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:9b:9b:d3:5e:b8:c4:35:e9:0b:8c:0e:75:37:ab:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
        Validity
            Not Before: Sep 28 20:01:24 2026 GMT
            Not After : Sep 29 20:01:24 2026 GMT
        Subject: CN=7741121f91a51585ab25c3ee2637b93bcb02e560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6b:85:0e:83:03:e3:21:c0:48:19:7b:58:2f:
                    f4:c3:95:35:13:87:42:b7:8c:a5:ae:b8:e6:ac:9c:
                    b6:cf:22:75:9d:73:7e:09:30:3b:1f:2c:5a:7d:ec:
                    d5:08:cd:d0:1d:68:2a:aa:1c:a6:5c:f8:22:b6:97:
                    9a:32:e3:10:13:76:2d:c0:44:fa:b6:e3:4d:eb:69:
                    d9:b7:ae:6a:cd:85:9e:ef:c9:c7:b3:74:1a:12:35:
                    32:98:f8:17:43:b0:fe:a0:2f:d5:8a:6e:82:a4:fe:
                    bc:df:f3:a5:e5:9b:18:56:2d:25:90:3d:f3:ae:95:
                    b7:a7:95:ed:de:e9:9a:e4:1a:09:5e:a3:64:d4:7f:
                    2e:64:15:58:c7:0d:6a:bb:d8:28:e5:48:61:81:c7:
                    a0:2f:d0:d9:d9:68:d1:52:43:ac:bd:c8:6c:77:38:
                    ec:38:7f:cb:9c:11:4c:9e:f7:5b:a2:a2:e2:f6:88:
                    5d:c6:09:c1:8a:45:05:c4:37:6c:06:74:1b:9a:1c:
                    ed:0a:d6:15:8a:8a:66:0a:3a:d3:36:79:aa:37:9d:
                    05:a9:1f:c2:48:98:c0:62:b7:46:fb:33:2c:64:9c:
                    18:37:25:4b:f3:3e:3e:7f:9d:a8:9b:14:e4:55:8b:
                    89:fe:8e:b9:01:66:be:f1:e4:d5:04:77:51:e2:33:
                    46:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:41:12:1F:91:A5:15:85:AB:25:C3:EE:26:37:B9:3B:CB:02:E5:60
            X509v3 Authority Key Identifier:
                keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:54:9c:3c:c3:07:81:27:f6:ed:42:1e:51:44:1f:6d:46:0d:
         5b:bd:13:5a:81:7c:72:ad:10:00:60:ed:57:91:c8:8d:44:66:
         0e:26:d3:36:ca:b2:76:ca:b3:0a:8f:4d:0e:f4:0a:23:47:2a:
         03:2d:a1:6d:f1:63:ec:38:7c:d0:4f:b9:08:c1:57:20:7a:75:
         11:8c:3f:6c:47:32:a6:4e:92:18:42:98:ea:eb:ed:a2:35:93:
         0d:74:6f:2f:c2:a3:96:c3:21:e3:a8:9c:6e:0b:54:21:bb:30:
         95:f7:64:be:9a:82:53:85:a4:17:f6:74:9f:41:53:28:a7:76:
         19:e8:ab:64:05:48:10:df:a5:21:f9:0b:ea:e9:1d:45:a4:0e:
         db:42:1b:2d:e9:b7:e1:72:95:1b:45:d5:4a:51:43:22:9c:54:
         67:d4:de:31:1f:5a:56:ab:93:f9:3a:98:ba:8b:e9:10:74:9a:
         75:6b:70:81:b1:74:04:a5:43:72:1d:79:b0:1a:b7:43:5c:9e:
         df:9f:5c:ae:2b:86:fe:41:df:94:fa:83:97:5a:82:70:60:4f:
         db:85:e0:1b:a6:6f:f9:5d:bb:ac:59:d5:9a:c1:eb:a1:2d:0e:
         2d:f2:3c:a2:b8:ad:1d:a5:61:7f:e5:c7:10:4c:01:c8:86:84:
         dd:04:ca:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:08:51 2026 by rpki-client