Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
File:                     TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json)
Hash identifier:          Gt8pXsHf5ROji/R+v/Fdn/W2PbS2SVTDnOG9xoYwl6E=
Subject key identifier:   73:61:16:6D:3D:3F:0D:2D:5B:29:DE:B6:DB:8C:E5:4E:DD:CE:7F:6E
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Certificate issuer:       /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial:       01A0BDD4763358285A45EA59D2F1AD39E3BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
Manifest number:          1A64
Signing time:             Sun 20 Sep 2026 08:00:12 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:12 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:12 +0000
Files and hashes:         1: 665tLmaCcMewxouqGyV9AcCyzHQ.roa (hash: q0YXAbJvDBEEtJJ3Km15Pnm2Ou6SZOvu9jgXiMCzq2o=)
                          2: C7Heg8nbJh5gPNx3smEmsF9i1rg.roa (hash: tvX4saAC2lDOGizl6LS7T8WHcp1UVuikBaA2xfEmzko=)
                          3: HvD-KyEebZg0h4HW06zJm6RwnGU.roa (hash: VtrmuoyXYF78h8UEa9MliL+Xy0F2Gl7FRj7/hpHAjYA=)
                          4: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: 0eNGfXxz99sjAy3cr1iDsfJpF6+aS6RipA7RfBw29Kg=)
                          5: Vka3aB9XlaAZaXatPcABq9MMMZ8.asa (hash: 2gWes96a72UxE1XgEF2/Y4kVdM/LCqKAtV5HrBf3vqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d4:76:33:58:28:5a:45:ea:59:d2:f1:ad:39:e3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
        Validity
            Not Before: Sep 20 08:00:12 2026 GMT
            Not After : Sep 21 08:00:12 2026 GMT
        Subject: CN=7361166d3d3f0d2d5b29deb6db8ce54eddce7f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:51:73:11:88:d6:79:c2:79:84:85:85:db:
                    92:e8:fa:f6:45:40:6f:a9:13:74:1b:aa:d1:54:31:
                    a3:55:1b:1e:49:35:b8:76:75:28:b1:a1:d1:78:53:
                    a1:3a:cf:3b:c9:38:88:52:70:97:f5:2a:ef:67:5f:
                    b8:ad:c1:9e:61:8d:8e:97:15:ef:dc:ae:ae:74:43:
                    6c:3b:fe:96:00:0c:2e:f4:1b:49:ad:ac:bd:f8:0c:
                    90:33:2d:33:e8:6e:dc:7e:10:23:49:af:5c:5b:f4:
                    34:f7:0a:f6:36:3b:a1:21:1a:94:18:eb:8a:60:da:
                    a5:47:dc:cf:25:34:7a:ed:38:91:f7:53:cc:e0:46:
                    3f:a8:df:26:92:d6:b6:7d:55:3a:00:1f:3d:ba:00:
                    30:25:dc:91:28:0e:9c:7b:76:35:14:eb:25:9f:7a:
                    53:5e:1d:c6:17:6c:f3:92:d8:80:b5:06:44:81:06:
                    23:63:2a:61:01:6b:92:71:e1:a2:86:fa:3c:19:29:
                    d3:af:2d:7b:b7:ed:ee:22:b6:09:14:ea:63:dd:fb:
                    6c:a9:58:10:f9:bd:c8:d3:fc:f5:a7:96:30:ac:b6:
                    0c:fb:1e:f8:5b:17:e8:ec:01:a6:d1:31:33:a2:d6:
                    d3:76:35:4e:69:ed:72:29:3f:7e:e6:d0:f8:b5:3f:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:61:16:6D:3D:3F:0D:2D:5B:29:DE:B6:DB:8C:E5:4E:DD:CE:7F:6E
            X509v3 Authority Key Identifier:
                keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0f:e9:96:57:e9:16:b6:45:09:4c:f2:f2:41:71:a0:c9:af:
         b7:68:1e:60:c0:d0:42:cf:ea:b6:3d:d3:5a:54:37:45:6a:b4:
         07:99:84:28:4c:45:fa:9b:9a:d1:71:93:10:87:ce:1c:23:2d:
         ad:ed:0f:f7:e2:4d:79:67:fc:09:69:95:64:08:13:72:15:95:
         aa:ec:bc:c8:33:b3:fb:a0:b3:ba:53:40:b0:b1:c9:51:bb:31:
         17:67:65:18:67:ae:7e:80:53:7e:7f:9f:d8:f0:91:d8:ba:45:
         45:bf:23:76:93:53:41:37:b6:30:1d:ca:fd:b4:87:a7:bd:b4:
         20:d0:5b:8e:b6:18:9d:68:7d:61:8e:d0:4b:9a:5a:1b:18:d6:
         9a:17:00:1e:b3:f0:11:ba:c1:36:a8:b3:3f:3a:21:83:c0:4d:
         4c:df:ee:f6:98:1a:d5:70:06:e2:17:fb:2c:30:c6:92:5e:14:
         46:3b:4a:6c:df:61:0a:5e:7a:23:78:27:2a:f7:62:06:64:3d:
         43:2e:65:d4:f2:9d:3a:3c:76:14:6b:e9:92:49:74:68:77:26:
         55:7f:7e:16:61:2f:ae:a2:44:69:e1:11:b7:6f:53:ac:f2:44:
         a5:92:df:c4:7c:92:2b:b4:ff:50:31:91:74:5d:e5:b8:3d:2e:
         9b:cf:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:52:47 2026 by rpki-client