Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File:                     TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier:          4jJI7wWDEH2KkRS3r1mKNflQevG6J2VqS82FvZxz7mQ=
Subject key identifier:   75:46:D9:36:53:8D:CF:A8:BD:2C:09:15:7C:2C:54:BA:3A:A2:EC:8E
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer:       /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial:       01A10211A59B38FAA19032F67FD3EE6303B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number:          1A82
Signing time:             Sat 03 Oct 2026 14:01:13 +0000
Manifest this update:     Sat 03 Oct 2026 14:01:13 +0000
Manifest next update:     Sun 04 Oct 2026 14:01:13 +0000
Files and hashes:         1: IvfRGdnfN7_UPGAiz9QzeIqr6I8.roa (hash: ht/PdnItSCVuCn0LFXjdxW5Jjp/nTLMvvbH6aoSlok0=)
                          2: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: Z4tvCmwFSChxlb5C75vDvpDoLGnap5QjIaUucj1dXLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:11:a5:9b:38:fa:a1:90:32:f6:7f:d3:ee:63:03:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
        Validity
            Not Before: Oct  3 14:01:13 2026 GMT
            Not After : Oct  4 14:01:13 2026 GMT
        Subject: CN=7546d936538dcfa8bd2c09157c2c54ba3aa2ec8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:0d:17:3f:a6:d6:96:f2:6e:f1:ba:bc:38:
                    6a:e9:15:ad:cd:67:d3:e2:17:47:d8:61:33:98:39:
                    01:52:20:a1:95:f3:1e:7a:3b:67:38:1c:8a:f9:41:
                    14:0d:21:92:c6:fa:6b:4e:0f:97:e7:d7:70:28:fc:
                    af:4f:00:76:ab:fe:48:68:5d:83:ea:d5:04:68:36:
                    00:8e:1b:5b:ff:45:db:09:7a:a0:0b:4a:2f:dc:1d:
                    ef:9c:21:29:89:86:01:41:e1:c9:2e:b0:69:5b:f9:
                    a3:36:bb:04:0b:b2:8f:fa:9d:98:5c:cf:d1:8c:b0:
                    f8:89:a1:5f:22:ee:72:9d:50:f3:2f:b9:89:ad:f5:
                    7e:aa:ee:73:ba:78:61:20:f5:ec:e4:98:60:43:fe:
                    31:0e:1a:ee:e8:91:c4:a8:ff:b9:33:b8:c9:ec:f3:
                    54:10:a8:0b:b7:5d:98:a0:75:d1:dd:32:d9:3e:3b:
                    6e:64:04:12:35:22:23:32:7b:e7:85:da:ff:91:8d:
                    3d:0f:86:fb:b9:c7:67:81:fc:45:c9:23:d6:47:08:
                    c4:f0:ed:55:7f:72:b6:9c:22:f1:7c:2c:75:bf:40:
                    b8:16:a3:13:46:50:ca:38:ca:01:b2:34:4b:88:d0:
                    70:ba:91:12:94:ba:71:75:7f:63:20:22:02:b0:11:
                    01:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:46:D9:36:53:8D:CF:A8:BD:2C:09:15:7C:2C:54:BA:3A:A2:EC:8E
            X509v3 Authority Key Identifier:
                keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7f:88:eb:a7:75:de:6a:39:24:c1:c7:42:03:21:3b:48:aa:
         02:e5:ae:17:17:a4:67:6b:51:d7:b0:68:c6:8c:71:ae:74:98:
         94:b9:aa:b3:03:e3:c6:3a:3f:03:4e:af:f8:20:18:09:c0:af:
         c4:92:69:88:ce:b7:c4:ed:22:b8:10:80:35:b6:c7:4f:be:9d:
         e9:57:1c:49:41:88:11:78:71:21:39:a1:d8:de:31:38:47:4d:
         c2:a1:48:41:c1:42:66:40:e4:6f:15:38:6a:81:e5:db:94:7c:
         2c:78:7d:18:ae:b1:67:69:46:57:13:65:77:af:03:3e:71:a2:
         0c:b8:ff:ec:e7:cb:83:22:6d:55:5c:59:67:33:0d:69:38:22:
         96:59:f0:1e:64:e7:9b:1a:c8:de:87:72:7b:3f:f5:69:d5:da:
         8f:36:7c:f0:68:90:d5:d4:e9:51:ee:9a:18:10:80:10:52:32:
         bc:96:07:bc:47:2c:86:62:e3:c8:98:7f:62:3a:cb:c9:a6:ad:
         b4:e4:d0:5b:46:cf:7c:27:e5:1b:3b:a6:bb:9e:fb:bb:80:28:
         f3:3f:2f:8a:9d:70:81:98:75:b6:80:09:70:a0:2a:c3:41:51:
         87:16:0e:6d:58:7e:d3:a8:be:31:51:81:b0:61:3c:a6:dc:b0:
         b6:50:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:51:44 2026 by rpki-client