Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
File:                     TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft (raw, json)
Hash identifier:          8q6EnOQhP1h8XScCMK899fAqk91aYJPoYab/gc8fAQQ=
Subject key identifier:   12:73:5E:B9:7B:A9:EE:C8:A0:1D:19:5C:7F:E6:7C:26:23:14:B3:59
Authority key identifier: 4D:58:1F:31:6A:45:10:CD:71:8F:05:CD:FD:A4:7F:60:B5:24:0D:FB
Certificate issuer:       /CN=4d581f316a4510cd718f05cdfda47f60b5240dfb
Certificate serial:       01A13AEE33CB632BB4A68D360C6981AB7B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVgfMWpFEM1xjwXN_aR_YLUkDfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
Manifest number:          027C
Signing time:             Wed 14 Oct 2026 15:00:51 +0000
Manifest this update:     Wed 14 Oct 2026 15:00:51 +0000
Manifest next update:     Thu 15 Oct 2026 15:00:51 +0000
Files and hashes:         1: TVgfMWpFEM1xjwXN_aR_YLUkDfs.crl (hash: PkCjMSxZ5ZebaZSBrm9V7DdE3gYjea+4ysWonwQNMpU=)
                          2: mQhTuTKEwu8zhwzyt5PaOFOOFgo.roa (hash: f0RTXa3+LdAMLeM1vR+W1zWxntSZGi5bAcnStMVW9ME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVgfMWpFEM1xjwXN_aR_YLUkDfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:ee:33:cb:63:2b:b4:a6:8d:36:0c:69:81:ab:7b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d581f316a4510cd718f05cdfda47f60b5240dfb
        Validity
            Not Before: Oct 14 15:00:51 2026 GMT
            Not After : Oct 15 15:00:51 2026 GMT
        Subject: CN=12735eb97ba9eec8a01d195c7fe67c262314b359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:58:38:29:c3:84:9f:95:16:ac:f9:81:95:
                    b1:0b:6e:4a:e9:b1:f8:3b:fb:ad:b7:98:13:fe:fc:
                    33:90:35:cb:ca:ea:9a:84:64:ce:25:80:23:9a:3a:
                    6f:1a:cf:d5:c3:f1:6f:32:65:fa:05:0b:13:4d:e0:
                    09:43:93:bf:db:fd:22:13:4d:ce:d5:ee:02:17:c3:
                    94:54:60:2e:b8:a5:83:a2:19:57:ca:32:72:6a:4c:
                    dc:8f:b9:c1:5c:0c:07:e8:e7:b4:43:92:a9:5d:c6:
                    b3:29:d9:9e:f6:9a:46:a2:5e:ea:6a:83:f0:00:ec:
                    f1:0f:bd:9b:83:82:68:fb:84:d8:92:3d:41:eb:b2:
                    4f:5b:24:7b:0a:33:9b:f0:2c:a6:e5:eb:eb:a1:ad:
                    03:7f:f1:b6:7f:b8:10:f0:eb:fc:86:18:99:cb:4f:
                    e1:d2:5c:d1:47:70:95:64:23:d9:99:5a:5a:55:38:
                    a2:97:f0:54:aa:ee:0e:8d:90:ab:f5:0a:9d:f0:75:
                    a1:71:81:42:55:1b:40:f2:f1:6e:8d:b9:db:31:a4:
                    1e:36:64:ea:7b:45:eb:1d:08:7b:d7:e0:ea:66:08:
                    1c:24:94:32:64:39:9a:73:6e:e2:0f:81:ee:85:d5:
                    5b:92:75:8c:f2:10:aa:46:71:0b:7a:de:f2:63:59:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:73:5E:B9:7B:A9:EE:C8:A0:1D:19:5C:7F:E6:7C:26:23:14:B3:59
            X509v3 Authority Key Identifier:
                keyid:4D:58:1F:31:6A:45:10:CD:71:8F:05:CD:FD:A4:7F:60:B5:24:0D:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVgfMWpFEM1xjwXN_aR_YLUkDfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:19:21:bb:1f:77:29:ba:a6:0c:63:b1:59:6b:2d:ad:7f:e2:
         e9:5a:f0:e0:36:4a:63:f8:82:a6:42:f4:59:65:f6:4a:52:41:
         36:aa:46:97:29:c5:b9:67:76:7d:0a:2c:5d:d4:d7:a6:f3:ff:
         6a:89:55:70:10:84:97:53:ac:cc:fe:27:f5:72:20:35:be:26:
         13:a0:90:c7:af:18:76:cf:a2:af:06:94:30:20:f1:f7:ba:b4:
         3f:76:34:3b:02:12:ba:be:14:7d:dd:db:2e:90:44:76:98:b9:
         80:22:75:75:e4:fd:e7:f9:66:97:25:ae:35:ad:10:0f:34:b5:
         bb:7f:ed:75:f1:c8:07:60:71:73:59:4e:97:69:6b:e2:69:39:
         04:23:a1:68:7c:99:75:85:9e:1a:4d:c5:c1:fa:93:8a:8d:16:
         6c:50:92:47:02:c7:7c:c4:b8:9a:16:0c:f2:7e:0f:77:56:a0:
         66:ed:55:d6:de:df:6b:d4:ec:b5:4f:62:a0:ac:7d:58:48:bd:
         20:86:f8:82:0e:7f:d6:84:71:02:d1:0b:c2:10:86:92:3a:eb:
         8c:03:52:7a:59:d2:e0:40:b4:8c:23:74:d9:27:4d:0f:bd:df:
         bb:e1:c5:3c:85:59:16:f4:46:5d:22:5c:b5:94:82:38:a3:60:
         8e:0c:ea:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:24:47 2026 by rpki-client