Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File:                     TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier:          mOoBgacWqCPbOoV/zOcx3C3sg81HY6YoOT9Srmpofa0=
Subject key identifier:   7D:DB:44:23:BE:B5:39:AB:4C:38:D0:E5:6B:A6:AF:2D:5C:67:D1:22
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer:       /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial:       01A1054A1897A234CEF577A38F21C76D1734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number:          048B
Signing time:             Sun 04 Oct 2026 05:01:44 +0000
Manifest this update:     Sun 04 Oct 2026 05:01:44 +0000
Manifest next update:     Mon 05 Oct 2026 05:01:44 +0000
Files and hashes:         1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
                          2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: NJbJBu3NKPrOMosC4D2C+jy+tKXN374XZ07/0liBaCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:4a:18:97:a2:34:ce:f5:77:a3:8f:21:c7:6d:17:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
        Validity
            Not Before: Oct  4 05:01:44 2026 GMT
            Not After : Oct  5 05:01:44 2026 GMT
        Subject: CN=7ddb4423beb539ab4c38d0e56ba6af2d5c67d122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:76:25:57:64:35:d1:2d:35:98:8c:27:6e:
                    23:7f:e4:03:e6:00:88:a8:d6:44:c0:85:4c:6b:44:
                    f4:73:ca:fc:c4:c1:ee:95:d8:c0:70:80:51:91:ce:
                    60:e3:5f:f1:2c:fc:2d:b4:0a:e8:4e:b6:5b:58:1e:
                    c7:fa:bf:8e:a9:63:2b:15:6e:2d:38:15:ec:ab:16:
                    02:b3:8a:aa:a3:a0:bc:23:5b:1b:5d:fd:6e:0b:61:
                    41:f7:d5:4a:12:a2:34:e5:36:5b:91:fe:fe:18:91:
                    d0:5d:25:c1:e7:99:c0:6d:0b:db:bb:64:b8:eb:a6:
                    8d:13:50:18:bd:6f:40:54:77:4b:64:54:cc:7d:09:
                    bb:58:82:7c:ee:ce:d9:dc:f4:23:3c:3a:cd:23:87:
                    55:15:47:85:30:77:c1:48:c2:64:d6:f7:1f:dc:b6:
                    be:a8:25:3d:71:df:d9:5a:c0:3a:af:6d:28:3e:ad:
                    4d:46:47:7c:0d:5e:20:f4:59:33:f5:fd:44:e0:0f:
                    7d:76:35:f6:12:c7:6a:4e:73:ad:be:40:7c:8c:16:
                    81:89:be:12:d9:2b:92:9c:54:96:f9:3a:bf:a7:30:
                    82:a8:ef:c5:d6:c3:66:7d:40:eb:89:2c:ed:17:cb:
                    a6:ff:6c:bc:d1:34:9f:3f:62:69:d0:c7:90:44:71:
                    f4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DB:44:23:BE:B5:39:AB:4C:38:D0:E5:6B:A6:AF:2D:5C:67:D1:22
            X509v3 Authority Key Identifier:
                keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b7:d7:ff:db:48:be:1b:4a:ef:19:83:93:4e:eb:1d:85:e9:
         50:2c:c0:98:e5:83:94:18:e7:f8:ef:68:bd:7b:65:7f:04:90:
         7a:ac:bc:74:3b:0f:00:a4:5d:16:23:8c:22:25:98:48:b8:0d:
         13:fd:df:ba:86:42:a4:31:aa:1f:35:85:f3:1f:e3:c6:76:84:
         5a:29:98:eb:eb:1d:b4:20:a0:87:cb:62:10:ef:69:27:ae:17:
         07:f6:4b:d4:9d:89:70:3b:4a:0d:f7:c6:e8:ea:eb:fc:4b:b8:
         67:26:06:10:e6:11:ec:93:8e:c1:d8:3a:d2:e3:44:b3:24:c3:
         fe:02:37:5f:a2:46:85:fe:8c:c8:d4:c7:ab:f2:26:31:81:50:
         e5:49:a0:65:f6:63:53:ad:51:7b:0b:fe:b9:3c:e8:93:ab:90:
         de:4b:59:70:62:21:a2:ce:4b:21:4b:89:5a:02:38:c9:fd:c7:
         f7:d2:07:f9:ae:6d:48:f1:24:06:03:f0:32:80:f4:e4:91:ea:
         29:88:2f:f3:10:01:d7:e7:0d:d4:ed:19:80:63:04:77:bf:5f:
         17:5a:75:88:e3:00:57:fc:34:f2:6e:6b:57:d3:5a:05:00:71:
         17:6a:fe:86:88:01:e0:b7:8d:be:a8:3a:f0:46:32:48:cc:ed:
         bf:9e:76:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:10:50 2026 by rpki-client