Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          POWTB+SKIBk03IKp+w92ih046lMkM7LwAUHhhyLqGwU=
Subject key identifier:   35:9F:F3:0A:76:23:2D:C8:10:72:73:35:98:B5:25:A2:38:19:09:4D
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       01A0C520599A012EE32CE8452A1F378D68A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          1A6C
Signing time:             Mon 21 Sep 2026 18:00:26 +0000
Manifest this update:     Mon 21 Sep 2026 18:00:26 +0000
Manifest next update:     Tue 22 Sep 2026 18:00:26 +0000
Files and hashes:         1: ExGpRunqaEGx1C87iYbOQskR5uw.roa (hash: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ=)
                          2: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (hash: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg=)
                          3: eUXXUdsIFWgmK4QDPBj079S1krA.roa (hash: tLqc3PNhBtm/slptj0WlzHoHZqeLEYUFaZxJp22uQOY=)
                          4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: LpX4rubNUkC2eMYC0LYfMTmeDbB76ikPW+MeidvBKgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:20:59:9a:01:2e:e3:2c:e8:45:2a:1f:37:8d:68:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: Sep 21 18:00:26 2026 GMT
            Not After : Sep 22 18:00:26 2026 GMT
        Subject: CN=359ff30a76232dc81072733598b525a23819094d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:2a:44:fa:16:ed:8f:7b:f7:39:e0:26:59:
                    f9:f6:7f:70:15:38:d4:3d:2e:cc:3e:c3:b2:16:f2:
                    6f:ac:99:3f:43:03:78:3f:de:07:d0:ff:f5:73:18:
                    bf:1f:ae:38:99:53:22:b5:d8:47:a9:f1:17:7b:10:
                    a2:92:72:de:e1:90:55:c0:85:be:06:40:13:d1:67:
                    7d:d9:0c:d7:e4:da:c5:7f:79:51:5d:03:19:7b:ec:
                    f6:bf:84:8e:e8:b4:75:41:5f:45:08:26:ac:08:c5:
                    6d:58:8b:34:41:4c:e4:03:7c:63:f3:ac:30:68:bf:
                    93:0e:14:46:4f:76:58:ff:94:eb:53:55:46:72:95:
                    6e:1a:eb:c4:ba:f7:59:3f:51:55:ad:06:c1:06:60:
                    bb:35:d1:01:eb:e8:37:24:bd:86:c8:5d:5a:3e:6b:
                    41:b5:62:4b:27:09:82:74:6a:41:a0:99:98:bb:d1:
                    0e:ec:4f:41:f3:82:7f:5c:49:97:b8:dc:7b:6a:db:
                    b8:0b:9a:b9:3b:a2:e8:60:4c:e1:04:ba:2f:2a:52:
                    fc:8d:f8:6f:a8:c4:ef:91:96:a6:de:82:f7:77:f7:
                    48:6a:31:c7:4b:79:8b:99:d1:04:02:25:3c:03:d4:
                    89:e5:54:67:30:f5:87:72:1b:0c:bc:aa:84:fc:06:
                    ec:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9F:F3:0A:76:23:2D:C8:10:72:73:35:98:B5:25:A2:38:19:09:4D
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6d:66:43:52:25:a0:6d:b3:5d:f3:ec:f7:31:c6:f2:e9:35:
         86:3d:d6:f5:8e:20:69:c6:1c:2a:24:93:41:19:b8:0d:ee:2c:
         4c:32:e0:f8:82:98:65:74:9b:8a:c9:b2:a7:2d:f7:fc:b4:08:
         f2:7b:eb:be:37:d2:ef:7a:2b:72:b5:60:11:1d:3d:0e:db:39:
         0c:3a:28:ad:e4:20:c6:c1:da:ec:d7:c2:b5:86:d9:6a:c3:7c:
         78:42:3e:31:7a:aa:12:62:07:97:46:92:2d:4a:dc:cf:b3:c8:
         b6:cf:ec:28:a5:66:59:fb:7f:0e:9f:8f:a3:e3:ed:ee:34:d9:
         6b:8a:96:80:7d:e8:1b:e0:60:48:2f:7b:7c:59:d4:06:e9:ec:
         8e:6e:f2:f4:3d:0f:1c:f7:5d:cf:08:0b:26:55:55:15:39:4b:
         4d:e6:1e:d8:e2:15:b5:f8:e9:cb:70:df:80:dc:eb:75:eb:4f:
         81:35:5c:22:04:7d:9a:65:91:25:27:b3:4e:58:7d:50:60:43:
         8f:86:5e:fe:3a:25:9e:d4:55:c6:77:bd:c4:5c:d3:25:67:34:
         ee:c7:59:f7:da:5a:7a:88:76:12:2d:9e:e2:30:b2:16:53:08:
         5f:40:f5:ea:6f:ba:47:22:83:ec:5f:d5:f7:30:30:46:81:9b:
         aa:3e:3b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:21:35 2026 by rpki-client