Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File:                     TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier:          YfsA4RHwF4PAhXkZHtrhiGvbNdnD24P3PGbFs4nrPEo=
Subject key identifier:   8A:17:1D:06:BD:A6:8E:67:AC:6E:51:5D:3A:3D:E0:F9:52:27:32:55
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer:       /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial:       01A1DFF19885D678F7085C6CAA4C2C24E70D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number:          1AE7
Signing time:             Sun 15 Nov 2026 16:01:54 +0000
Manifest this update:     Sun 15 Nov 2026 16:01:54 +0000
Manifest next update:     Mon 16 Nov 2026 16:01:54 +0000
Files and hashes:         1: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
                          2: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
                          3: QzoE7YI2JkwI9mVxwsF8DHIXYGE.roa (hash: 7XDAG6QnwyxT0wvAWUAuUI4m88iqJ1Pi9UntCRyGfgQ=)
                          4: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: +yKKdFp598Ytg9C0ju4ZdFCpmjYbBFPWdev8qVx2uVU=)
                          5: UeGdNC4U51ORsmr7bEC0_4tro5Q.roa (hash: AJVieY8jxr5EX1PgLZI54D+fgbYw+CCmG+HZJa/NVL8=)
                          6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
                          7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
                          8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f1:98:85:d6:78:f7:08:5c:6c:aa:4c:2c:24:e7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
        Validity
            Not Before: Nov 15 16:01:54 2026 GMT
            Not After : Nov 16 16:01:54 2026 GMT
        Subject: CN=8a171d06bda68e67ac6e515d3a3de0f952273255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c3:92:8e:5a:b1:d7:ea:3a:0b:9a:85:6d:1e:
                    12:06:dd:43:45:e1:e5:c5:a2:3e:0f:ac:04:0c:51:
                    b9:22:82:36:b0:b2:6c:5a:ec:4c:f2:aa:74:01:b1:
                    56:42:f1:9d:74:3a:bb:00:0d:79:ad:65:5c:f9:bc:
                    e1:1c:d9:dc:b4:f7:b3:a3:ad:53:14:a1:79:c5:57:
                    17:f2:96:8d:39:a9:97:17:c7:3e:67:50:20:d5:12:
                    ed:c0:04:0f:95:d3:11:da:d8:91:c8:f2:d8:de:9f:
                    27:07:72:a4:87:07:e0:ea:d5:93:36:99:c8:dc:87:
                    de:42:2d:cd:50:7a:58:c7:b2:77:00:3f:4c:49:b7:
                    dd:84:2d:e1:f4:43:fa:79:06:e4:3f:0b:15:47:68:
                    e6:61:66:8f:c2:c3:6a:aa:ff:29:ed:fa:58:af:dd:
                    0f:a8:7a:40:7c:18:bd:14:f1:a6:78:60:e5:3b:2a:
                    1f:66:c2:0f:d0:79:74:3e:44:cb:55:f6:2b:79:3a:
                    c9:db:16:e3:c1:b4:72:8b:ac:d2:b2:f8:e3:b8:f9:
                    5f:a8:7e:a7:02:e3:bd:32:cd:a9:9d:42:ff:48:cf:
                    d9:e6:16:44:fe:61:d0:ca:cf:a6:7f:8a:86:42:57:
                    89:0b:69:b6:76:81:be:ac:b6:e3:41:9f:d6:1e:a1:
                    09:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:17:1D:06:BD:A6:8E:67:AC:6E:51:5D:3A:3D:E0:F9:52:27:32:55
            X509v3 Authority Key Identifier:
                keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b1:be:5a:80:36:55:13:b5:78:5a:7b:59:74:42:85:35:25:
         bd:66:0e:d4:fb:be:bf:25:dd:e2:ef:67:80:42:54:35:ec:70:
         5d:ac:59:9a:fd:60:01:1e:6c:96:87:ba:46:02:85:65:97:ac:
         25:df:b4:28:a7:2f:b2:d5:55:35:30:93:dc:ae:c8:84:55:34:
         18:18:43:8c:1d:11:02:e2:7a:2c:6b:1d:37:e3:b3:31:4d:d4:
         3e:1c:eb:0a:50:fb:3a:48:55:63:4b:b6:88:d1:76:2c:fa:8c:
         fd:04:49:8d:69:4c:15:52:9e:26:b4:c4:b2:a7:a6:0b:2f:ac:
         9f:3f:79:f5:53:b2:8f:7f:0d:27:35:d2:fe:b7:94:06:0b:9f:
         15:e2:29:0e:ef:29:82:3b:90:af:72:c7:9c:91:82:10:c8:d4:
         e7:85:e4:49:4b:ff:2c:35:37:d4:ef:bd:fe:e9:cc:4d:98:b4:
         82:7c:86:9e:59:3e:68:95:a4:bd:c2:df:a9:39:89:51:92:3d:
         30:29:4c:95:c0:4c:00:3d:58:1b:be:ad:a6:08:1b:d1:55:9e:
         c1:43:93:95:91:c3:bb:60:d4:9f:1a:13:03:6a:f1:39:5e:cf:
         b2:00:a8:13:53:d6:be:22:91:0c:88:7e:d4:6b:8e:94:37:8c:
         6f:0d:46:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:45:56 2026 by rpki-client