Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File:                     Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier:          WX5zl5hHoq7Gr50LaVp1ga9olrEbL6NKnb2LiYff3cc=
Subject key identifier:   04:A7:E3:3F:65:E6:DF:DB:AA:1B:42:FE:F0:72:45:49:F8:37:35:C4
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer:       /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial:       01A0C143F9E7CE2D095CEFF4E0AA225DBC67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number:          19F7
Signing time:             Mon 21 Sep 2026 00:00:52 +0000
Manifest this update:     Mon 21 Sep 2026 00:00:52 +0000
Manifest next update:     Tue 22 Sep 2026 00:00:52 +0000
Files and hashes:         1: HPyXpgvZq0DmF5lYqywyaXxXuLs.roa (hash: xJJdHEjB0zhK0uHLhPfuryAT20NVmJFJDeJjva/xFEM=)
                          2: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: lJ9KfUnUO0zZlTFu/oz96lVvP+rAmQI7qsilw0vSmk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:43:f9:e7:ce:2d:09:5c:ef:f4:e0:aa:22:5d:bc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
        Validity
            Not Before: Sep 21 00:00:52 2026 GMT
            Not After : Sep 22 00:00:52 2026 GMT
        Subject: CN=04a7e33f65e6dfdbaa1b42fef0724549f83735c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:37:2a:47:22:3b:3a:55:e8:8c:b9:1e:bb:
                    bb:74:e0:a3:0b:60:2b:0b:a6:d2:3f:a7:b5:36:e7:
                    f7:00:6c:96:87:c3:17:c5:c1:29:ab:c2:d4:24:b2:
                    80:e4:df:d4:76:5a:ce:e4:4b:60:6b:e5:c5:b5:64:
                    e4:c4:97:6b:bd:80:01:7e:c4:86:c7:76:2a:a5:37:
                    db:0c:f3:73:5f:49:9c:90:e3:4c:23:c8:4d:70:3d:
                    9d:38:7a:7c:ae:ad:df:38:76:a5:b1:6f:c9:f1:b6:
                    cb:18:4c:c5:3d:96:b1:cb:da:32:d1:e3:c6:ff:04:
                    22:88:73:3d:54:2f:4d:e5:5a:39:fc:d3:d8:d5:eb:
                    45:d8:3a:8a:db:ec:33:77:f6:54:e1:ce:c3:47:c6:
                    46:cd:57:55:b5:fd:c5:94:ad:fa:37:6d:67:81:ba:
                    66:ba:ef:c0:f1:29:5a:60:4d:97:5c:13:83:de:fe:
                    2a:ff:8d:fd:03:47:0a:15:1d:92:ba:c2:cc:1a:21:
                    62:8f:8e:74:f5:e0:2e:e0:55:b4:31:4e:55:2f:d4:
                    6c:06:cb:eb:18:6c:a8:5b:8d:af:a1:a2:7e:af:f0:
                    0e:fe:9a:79:d9:cc:68:43:30:67:d5:b4:f9:ba:6f:
                    0e:57:30:9c:41:bb:df:57:c1:b5:a5:32:e4:77:3c:
                    a7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A7:E3:3F:65:E6:DF:DB:AA:1B:42:FE:F0:72:45:49:F8:37:35:C4
            X509v3 Authority Key Identifier:
                keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:46:8c:f3:c1:b0:d4:62:a2:56:2a:ce:4d:04:0e:de:02:0d:
         a7:01:de:82:29:22:f2:f0:23:a1:04:61:7b:27:6c:0f:3a:d3:
         80:55:3a:48:ce:71:44:60:98:d3:d5:42:01:d5:a0:c8:29:3c:
         a0:8d:c6:f7:04:e7:aa:82:a5:c7:bc:28:24:9c:a0:b5:ab:8a:
         b7:00:1e:d2:9e:f1:11:50:cc:f4:50:b9:e8:15:d4:dc:13:da:
         ab:b3:f7:8d:60:2d:bd:67:ad:28:69:ef:07:86:79:4d:f6:78:
         06:c4:80:04:b3:c5:f5:fa:5a:e7:2e:ba:5c:5b:ee:f8:fd:f4:
         b7:e9:77:b6:a8:5e:9f:7f:07:59:c2:c9:c0:46:44:43:4d:fb:
         1e:23:f6:11:cf:2c:76:b3:bc:b9:ec:ec:7c:34:a9:48:bd:96:
         3f:97:4c:b1:1e:00:41:af:07:fb:35:24:16:7d:80:c3:58:27:
         13:00:85:3d:b4:d1:f4:8d:64:73:e7:64:14:fa:5d:cd:e6:a7:
         32:18:3e:8b:f0:9d:ad:0d:a7:c8:c7:90:c5:1d:b3:f5:3f:c4:
         b5:a8:44:81:a6:0c:10:9a:3b:e6:e8:c6:1b:80:25:7e:a4:5a:
         d3:13:92:d8:5f:07:d3:b5:b5:67:c7:8c:0f:5a:64:08:57:cb:
         66:73:9b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:37:26 2026 by rpki-client