Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
File:                     ti1M7HgzBZI-NJftiE8cRFtOePs.mft (raw, json)
Hash identifier:          MfTm1MIoFOXh19csArkF1np4/r+G8wrMxel0tWHcN0E=
Subject key identifier:   E2:22:74:92:7D:C2:B2:90:4D:54:A6:CB:56:50:A5:05:AB:59:6D:44
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Certificate issuer:       /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial:       01A0C8C6E52727DF7129191F192D82913921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
Manifest number:          0B10
Signing time:             Tue 22 Sep 2026 11:01:13 +0000
Manifest this update:     Tue 22 Sep 2026 11:01:13 +0000
Manifest next update:     Wed 23 Sep 2026 11:01:13 +0000
Files and hashes:         1: 4kaoM_1JFXqtONDnoZQo4DeqG_U.roa (hash: AjSsALIS1hOFS0VbRb3Uq7yagcpDtHwgGVU2KzA5nbU=)
                          2: 8ASVZrwrDUtOOOflEnewivWIEDY.roa (hash: ANvzu0CryswnXEP3hFmg70ywnF0JMFzP3BfXRWuMDMY=)
                          3: ZsX0X8j83nFRfqZL9IrfnwTMxLg.roa (hash: X4nHEceCDxp75N1VWD8XfrlsC2PNim++24YcWl4Dids=)
                          4: kHTjnucgQ1bKG3PRbGy6oqJPhyY.roa (hash: hMBd2WJaqAJZaluVhsmluo1ww0NN5eq8hfy8FEdnoAY=)
                          5: mdkFOAwMWkblGp-2mwbEq419z_I.roa (hash: CE2MgK18UC9X5aZF3fSj7NZCbOTDD1izqKPMKawtpc4=)
                          6: oBn8NIdRfMZZpm_iynqTQu6nc38.roa (hash: D3Bz4QySZ6wj7xhT4hW/fF4crmIqCiPNU7hJ9/zZtR4=)
                          7: ti1M7HgzBZI-NJftiE8cRFtOePs.crl (hash: Gv3hCLTS33ts/d0sJ6V2QHi8kOUXstjeCaCa9fe1WTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:c6:e5:27:27:df:71:29:19:1f:19:2d:82:91:39:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
        Validity
            Not Before: Sep 22 11:01:13 2026 GMT
            Not After : Sep 23 11:01:13 2026 GMT
        Subject: CN=e22274927dc2b2904d54a6cb5650a505ab596d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:32:44:dc:f0:f7:85:28:79:99:7a:be:e1:
                    67:45:b0:71:37:1e:48:29:ce:a9:b2:d3:6b:ad:d3:
                    97:da:60:f4:45:4d:92:6a:f1:6c:35:56:9a:1f:2f:
                    c9:9c:55:f3:6a:e0:1e:5f:54:00:76:77:9d:12:bd:
                    fd:07:6f:cc:bb:ed:0f:08:a2:4f:ed:93:a0:72:0f:
                    ba:b7:bb:7e:90:71:0e:53:b2:fb:72:6f:5d:66:e2:
                    b6:79:65:cb:1d:71:9d:19:18:64:7d:93:29:e2:1e:
                    30:1d:f0:26:3f:87:d8:26:4f:8f:ae:f2:cc:5f:35:
                    46:fc:c0:a4:74:05:65:eb:97:46:8e:90:4b:96:bb:
                    5a:c0:fb:ef:cf:f5:f3:54:c7:db:f2:9f:c4:1c:3c:
                    99:0f:fd:24:84:6d:67:f8:ea:02:27:f5:0b:8e:02:
                    be:e1:d3:aa:d4:19:9e:0b:53:e2:9d:8d:11:77:b3:
                    c7:f1:03:ea:82:12:60:26:7c:7d:80:69:72:22:c7:
                    e5:79:de:47:e7:b2:17:4e:9f:c1:c8:93:17:ab:e6:
                    31:ba:d4:e6:9a:17:75:2d:38:7b:3c:14:b8:d4:a3:
                    bf:7f:a7:ed:7b:92:2a:56:e3:6a:dc:81:22:14:5b:
                    94:3e:d0:e3:bf:62:15:05:17:8a:7d:cd:8b:90:fa:
                    38:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:22:74:92:7D:C2:B2:90:4D:54:A6:CB:56:50:A5:05:AB:59:6D:44
            X509v3 Authority Key Identifier:
                keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7a:02:9e:c3:42:38:2a:86:aa:43:0e:d8:f5:b8:c1:ad:a7:
         64:b9:11:ad:03:01:1c:fb:be:4b:08:2e:98:3d:d9:53:4a:62:
         73:94:f1:0b:02:83:0b:ef:5f:41:3c:a1:06:67:aa:ea:fb:c4:
         02:a5:6a:0f:6d:94:d2:e1:e5:01:e8:c6:55:74:05:77:f1:80:
         a1:ad:64:f9:ef:9c:4d:61:c6:e7:a5:00:83:ce:3c:77:90:49:
         31:c2:93:26:5e:33:a3:7a:38:de:b4:91:fc:82:3b:c4:0f:a7:
         f6:b5:f8:6a:95:da:1d:98:96:8c:86:37:fc:c1:ee:f2:c9:e9:
         23:5c:b2:17:35:ba:02:b3:d1:e3:01:b6:6c:a5:7a:6e:06:28:
         28:26:79:ce:fc:81:1f:6e:1d:b1:64:55:fd:70:cc:1b:3c:0e:
         66:58:0a:bb:06:c9:eb:e4:f6:73:97:55:f4:1d:37:0a:5e:6f:
         19:31:0a:a7:18:df:44:67:62:ca:a8:f9:30:3e:0a:e9:9c:c7:
         4f:f1:33:52:c8:8c:22:88:50:97:26:53:3e:67:48:94:39:20:
         1c:a5:bc:7f:26:8f:b1:c1:3d:01:53:89:ce:44:4d:39:65:a5:
         fb:6b:fc:1c:28:6b:5f:c1:0d:2c:a3:d2:d0:63:3f:0f:f3:16:
         a3:a9:f9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:13:52 2026 by rpki-client