Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
File:                     1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json)
Hash identifier:          LRvyT8fLXjabWgWQQQLwYIzRGqclF1FHkTvagpUtZmA=
Subject key identifier:   EF:D9:7A:74:91:70:BA:0C:46:0E:11:F3:3C:F7:8A:07:C4:8E:F9:9A
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Certificate issuer:       /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial:       01A0C256299260226FD709C4D6B343039871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
Manifest number:          1A79
Signing time:             Mon 21 Sep 2026 05:00:21 +0000
Manifest this update:     Mon 21 Sep 2026 05:00:21 +0000
Manifest next update:     Tue 22 Sep 2026 05:00:21 +0000
Files and hashes:         1: 1--f8TOFOHJxy913_bnxbbB_I8Ps.roa (hash: wDKAE8eJy4a/Xju9oL+J32sQIgyfZxer9kQNnDKALh8=)
                          2: 1-jH0g_JDLp_7206NgV5uijHSTJE.roa (hash: LRjP11l8Yg7jbG4bbfhfNEvQDZIpDubQ+TvWhkwjrcQ=)
                          3: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: XdfUXBk3SzCulRwicuJpKBOJjz1mLXeO0w3QATPn+jA=)
                          4: 1-zOd1kumaIlRrXPMfMdhndo9duk.asa (hash: J313kMfLz/jeTLF4rt+b3BkZqWQAyhsRwo4qFMMY3+c=)
                          5: 3GG8eWEP0AsTR5hlJBndfjSVqXE.roa (hash: OqQ6t5k1StJuUPb2wymY353zmLAJ5m9iQ1cfSGHhatc=)
                          6: Ew6t29Ei1xqX6fCJJvzPjV0QQx8.roa (hash: JiMbHLWrOkAjKxV/HgN8hcqfDizA3AaG0pNVT8kgBVI=)
                          7: OS72UUjy1jIbO6SLm4_mGk1QjoA.roa (hash: JCjobLuVUg3x2yIR7Yj0jA3s02kdH2wYADkCYAZAm6M=)
                          8: hlYcdx1ybU4O_N_wWLe8kEQOPAA.roa (hash: g8sRkVv7AmG02gcDiKwncGvtRS2uuD1b8FmdkJIrmVQ=)
                          9: iY5E0iZ2YmwSRo1oZbuozkzcREs.roa (hash: XAB0LIhnvafntszSPTz4cfq/KAQxwohiu0F5a96UkOU=)
                          10: icspBYCC63q1vNy_EsXnZosS_IU.roa (hash: 3NUI/DqhsJ55TwYWG35Se4xjLYr3z+ZTAvaw34Ss74M=)
                          11: qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa (hash: MHfvuh3eLEasmU8bZ+QtTWQpVIX8pvTM+Puzp/lNHV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:56:29:92:60:22:6f:d7:09:c4:d6:b3:43:03:98:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
        Validity
            Not Before: Sep 21 05:00:21 2026 GMT
            Not After : Sep 22 05:00:21 2026 GMT
        Subject: CN=efd97a749170ba0c460e11f33cf78a07c48ef99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:8e:7c:c3:70:e5:5c:80:76:9f:d0:58:88:
                    95:1f:db:d9:57:3c:57:29:f7:72:1d:c0:65:41:93:
                    ed:11:36:17:8f:7a:b1:d3:9b:d9:ee:73:73:96:29:
                    6c:ae:63:a2:ee:bc:b0:f4:60:75:45:26:63:f1:a4:
                    81:43:47:b8:bf:af:74:0a:2a:ba:25:a6:03:c9:cc:
                    a6:50:b5:2a:71:fa:12:8f:0e:e3:86:24:f3:de:c2:
                    9f:92:ac:65:ed:98:bf:0f:75:b7:52:83:a6:b7:49:
                    bd:ac:25:ba:9a:1e:87:c6:b9:79:01:e4:a0:05:15:
                    6f:69:aa:21:eb:46:f9:1f:29:2e:da:d4:b7:6a:b5:
                    de:ca:26:9f:48:19:f8:9e:54:a5:52:6d:ba:8b:e0:
                    c7:ec:a7:3c:97:df:e1:24:61:ea:d7:7f:07:e7:37:
                    c2:d0:33:e3:10:a9:cb:9b:a2:37:9d:87:33:c0:48:
                    9d:a2:04:88:2c:21:55:c1:0c:0a:de:a4:d3:43:7f:
                    23:7c:2f:69:4a:28:7a:fb:42:5a:10:eb:ad:5b:84:
                    e0:5f:45:02:ba:d8:3c:e4:e2:fb:00:bb:6d:dc:4e:
                    d6:b8:9f:52:85:78:1b:69:da:6b:78:9d:f3:fc:36:
                    cc:19:20:b8:6c:c8:16:da:c5:83:17:3c:bb:0d:48:
                    c0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D9:7A:74:91:70:BA:0C:46:0E:11:F3:3C:F7:8A:07:C4:8E:F9:9A
            X509v3 Authority Key Identifier:
                keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:21:d2:0c:a0:a0:ac:61:1e:17:cf:ab:aa:be:0b:8c:cd:49:
         54:72:ee:7a:cc:98:7f:52:82:90:03:18:cc:fa:78:80:9b:51:
         85:c9:09:ee:3e:6d:eb:46:9c:b7:97:ff:66:cc:5d:1a:75:62:
         33:b8:66:d3:4b:a6:55:22:6f:ba:8c:d9:a5:cf:5e:49:0a:18:
         d4:5b:cd:77:f6:b7:2a:36:16:93:11:45:21:81:3f:b9:2a:a1:
         dc:41:54:0d:e6:b0:aa:39:4f:dd:d7:54:0f:dc:06:e2:82:f1:
         84:30:36:0b:ab:ab:0f:cf:1a:2a:99:ff:8b:2e:03:a6:38:f9:
         85:3c:2c:81:7c:dd:d4:71:7b:29:f5:b8:c4:82:a3:29:71:a6:
         9f:5c:d6:e1:65:21:7a:47:e4:30:94:f9:75:a0:93:30:cc:6c:
         f2:f9:a3:38:6d:2e:0f:a3:db:6c:b7:1a:ac:9a:c6:c5:5a:0c:
         6e:61:8c:88:79:8c:91:ff:a3:f1:6e:48:3c:9f:cd:75:ee:48:
         63:fe:7f:bd:ed:e0:3b:28:6d:68:e9:b8:73:53:8c:64:df:a1:
         37:91:5f:fe:af:f7:e5:be:fb:29:61:41:c1:74:94:1d:44:1f:
         e9:3d:4b:76:22:de:86:0d:2f:63:3c:06:34:9f:9a:ff:55:fa:
         88:cf:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:24:32 2026 by rpki-client