Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File:                     taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier:          JpmxjFu5S3cL+EKLcTkdX8960G94STQMdtuI8IWaEI8=
Subject key identifier:   51:A6:77:44:75:0C:2D:2D:59:CC:B0:7A:C0:63:9D:39:43:CA:D2:8C
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer:       /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial:       01A0D38380CCAA865494D83684AA3A3CA1D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number:          19FE
Signing time:             Thu 24 Sep 2026 13:03:25 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:25 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:25 +0000
Files and hashes:         1: mGuGgApHSUc3pkLejONy6uxFa8I.roa (hash: 72owtSfE8WtU3O8vsf/pSLMkM235o/0ogXWxdafrLec=)
                          2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: I4rVnQsXn1R/NYQz8GARO3wDxGc0DYYuPLIgCsyomTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:80:cc:aa:86:54:94:d8:36:84:aa:3a:3c:a1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
        Validity
            Not Before: Sep 24 13:03:25 2026 GMT
            Not After : Sep 25 13:03:25 2026 GMT
        Subject: CN=51a67744750c2d2d59ccb07ac0639d3943cad28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:9f:32:1f:65:dd:a5:04:b0:ed:ef:5a:f3:
                    f5:f4:d6:d9:af:52:ff:6e:b3:f9:3d:8b:a2:c1:6d:
                    e9:28:e6:9d:ff:8b:f4:97:93:7d:94:ab:af:a2:3d:
                    15:39:c6:82:93:15:ec:a3:57:72:36:0d:b7:40:d0:
                    41:68:63:59:ed:db:0e:2e:f2:24:c1:6b:1f:e8:bc:
                    db:cf:a9:3b:4b:51:39:8e:68:bc:f2:30:57:7d:15:
                    04:da:b5:92:93:fe:dd:0d:0a:18:f8:17:4b:a8:73:
                    b3:0e:b4:0e:29:bd:87:27:f4:c5:cc:97:82:ab:b8:
                    c9:70:40:ec:f3:0d:9f:01:41:87:9b:64:84:26:79:
                    b5:a2:e4:b2:89:3b:bf:b0:f3:2f:a2:dd:3f:30:72:
                    85:23:9a:db:f1:1e:0f:66:1f:11:d9:58:a3:22:c9:
                    92:20:c3:a5:10:ff:85:43:43:59:d7:7b:f7:15:eb:
                    32:cc:dc:c8:94:7c:d0:71:55:73:3f:3f:fb:04:e3:
                    27:25:df:7b:27:1b:09:02:e4:2c:2f:4c:d8:88:7a:
                    bc:d9:42:81:c6:17:76:02:c4:4c:37:71:80:bf:44:
                    08:79:51:6c:5f:1c:ae:28:c9:df:f7:cd:2e:65:7c:
                    b1:94:60:24:b0:c0:6e:13:29:f6:d8:f2:62:74:c9:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A6:77:44:75:0C:2D:2D:59:CC:B0:7A:C0:63:9D:39:43:CA:D2:8C
            X509v3 Authority Key Identifier:
                keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f2:43:64:1c:c7:36:81:82:9c:93:bb:37:8a:f0:91:87:c6:
         43:98:a9:ba:d4:8b:e8:79:39:a9:9d:24:47:3b:a7:e1:b1:15:
         50:ab:b0:2c:bf:9b:0d:ed:ff:25:cf:d4:32:b1:c9:42:1a:11:
         63:bc:90:56:fc:e0:a1:6b:14:0d:6d:28:08:a5:6c:b6:57:9d:
         45:c9:aa:a8:2c:f9:2b:9e:94:a2:da:8a:17:60:e6:b9:05:82:
         d1:87:ec:51:54:42:5c:49:2c:dc:1c:31:63:ee:a3:e3:0b:5b:
         95:e3:30:d3:b5:d6:29:b9:42:ee:60:e1:8f:fe:00:3c:12:43:
         6c:1c:1d:3d:e5:6c:ae:dc:cb:85:82:b8:49:cc:64:3c:60:fd:
         2b:d5:f4:ea:63:10:4b:03:5d:b7:58:6b:28:48:af:69:a4:6e:
         c1:61:5d:f9:f4:6b:eb:c4:41:1b:5a:23:d6:88:90:19:fe:a3:
         76:ee:10:45:d3:79:78:ca:f3:c1:52:c1:af:58:84:51:dd:db:
         0b:50:da:f6:bd:bd:f0:fd:81:d7:8b:62:0b:90:01:7c:c1:51:
         cd:36:54:57:53:11:65:2a:57:ba:c0:d8:93:a8:24:fa:67:3b:
         ec:98:ab:60:5e:22:0e:be:19:b8:8e:3b:bd:b4:84:46:e6:95:
         b6:98:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:59:03 2026 by rpki-client