Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File:                     Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier:          SCnzfyT3Lzpifo+t5DrRbAv3N9C9nrHKZ/SFmy96O7Q=
Subject key identifier:   07:FF:7D:51:BC:AF:F4:E3:74:C6:5D:39:38:A8:14:C2:6B:20:53:65
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer:       /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial:       01A0F23095477463E7B492E6ADBC0BF67493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number:          0AAA
Signing time:             Wed 30 Sep 2026 12:01:05 +0000
Manifest this update:     Wed 30 Sep 2026 12:01:05 +0000
Manifest next update:     Thu 01 Oct 2026 12:01:05 +0000
Files and hashes:         1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: peEkNdlwWixf3CAdNjPC74cpsgiqEvBApztnKrTdrd0=)
                          2: RCbtWtfNbNugIvs-Dmql2deK4Ko.roa (hash: Rgh4Ci+jMhlRgR9C2JdR2931yRKR2EjS9oS9ki8UOrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:30:95:47:74:63:e7:b4:92:e6:ad:bc:0b:f6:74:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
        Validity
            Not Before: Sep 30 12:01:05 2026 GMT
            Not After : Oct  1 12:01:05 2026 GMT
        Subject: CN=07ff7d51bcaff4e374c65d3938a814c26b205365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:72:1a:07:26:6b:e5:43:3d:02:5b:2e:94:
                    c4:f0:01:e7:35:b5:4a:86:f1:b2:cd:58:65:9e:0e:
                    d9:9f:73:61:63:30:32:94:2a:b4:84:ba:b7:04:00:
                    c5:f0:58:b0:58:f9:7f:36:dc:27:7a:4d:39:e7:42:
                    3c:ad:75:66:1f:e7:c4:67:78:c1:d7:8d:b6:1f:17:
                    6a:94:dc:e3:b6:8c:0d:cd:3e:e9:82:82:08:67:4c:
                    5e:97:8f:f5:e0:86:c1:6c:ff:b7:dd:70:b2:ca:55:
                    9a:f3:98:ca:ab:42:12:e7:21:cd:92:85:80:fa:bf:
                    08:a6:6d:33:bd:ef:c9:ff:92:e5:61:90:28:26:0d:
                    71:87:22:ef:02:45:42:53:5e:3b:f3:13:43:2f:f6:
                    bc:89:6e:68:71:be:7a:d9:b0:d9:da:e3:0d:32:51:
                    c1:73:74:ca:c9:04:8a:1f:c1:de:88:4e:11:e4:0b:
                    7e:f5:59:06:6a:5b:19:c2:08:5c:19:ab:54:5d:a4:
                    76:d3:00:e1:87:e5:cd:ec:6b:4f:cd:29:f1:03:37:
                    c1:d9:3d:2a:83:40:f5:93:35:26:9c:7d:06:65:69:
                    be:2a:00:e2:9d:9a:90:b8:b1:3e:08:6a:68:f2:07:
                    ee:cc:9f:98:16:76:f3:d8:54:6d:92:f2:01:a5:d7:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FF:7D:51:BC:AF:F4:E3:74:C6:5D:39:38:A8:14:C2:6B:20:53:65
            X509v3 Authority Key Identifier:
                keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5b:c5:73:74:9c:d5:8a:56:74:bb:f5:88:66:66:d2:cd:9d:
         3a:c5:0d:85:05:84:14:04:4d:54:73:e3:fd:31:8f:dc:44:90:
         8d:d9:d5:75:ed:b3:b1:ef:35:0d:42:9e:11:8b:7a:67:39:92:
         9a:27:c9:8e:c2:25:c2:85:b1:1b:f3:e1:2f:8e:cf:47:de:d2:
         37:9a:5b:69:11:e7:3f:92:f4:01:fb:f2:27:99:18:1c:50:c3:
         5a:63:15:f5:cf:49:2e:6d:8e:cf:6c:2f:36:4d:89:f8:51:bf:
         00:9e:e1:5e:41:74:15:4d:a6:5a:08:d1:c7:0c:9d:4b:5c:17:
         40:99:3d:f2:70:7f:9b:31:97:21:a1:c3:c7:08:33:6c:57:b2:
         ac:f8:20:72:e2:05:ea:01:bb:8d:39:cc:e7:ba:4d:56:a3:73:
         d3:3f:32:db:52:c5:60:3e:26:da:91:e1:7b:3b:b9:16:0a:95:
         a0:cb:59:c9:51:ab:9e:be:32:bf:ec:db:ed:00:55:65:c2:1c:
         eb:17:d4:af:8d:e0:ad:ec:e0:17:ad:5d:fe:95:f6:8f:c1:67:
         d6:5e:b5:a6:c0:e6:fb:73:7b:9e:b0:03:6e:e6:2d:33:fe:64:
         14:fa:a7:87:e8:13:b0:55:83:82:02:8b:df:19:c0:39:2d:8e:
         24:fe:d6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:36:54 2026 by rpki-client