Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File:                     tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier:          WXjfPAtB7J31WyXb8giFC2Fkceu1ANMpG44c9F8JDmM=
Subject key identifier:   84:33:C8:CB:D5:8E:FE:67:F7:E9:4B:B4:30:C7:2A:16:C6:24:15:88
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer:       /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial:       019FAC3EE394883941360EA61A750BB727DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number:          10A0
Signing time:             Wed 29 Jul 2026 05:00:30 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:30 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:30 +0000
Files and hashes:         1: 5-8A-Jtguk4c0zw03gWcTS2JHrk.roa (hash: EMcolqjYtxL2odJigbooGYOxo0xOZo49xkFasVkABn0=)
                          2: 6_uqscAUqLl-U-FOdnB8b80ymVs.roa (hash: 6iIxj8hFU1rpgiG9WHmnrQdt6HoHVlv0NufbYcZmLKU=)
                          3: Asdq0CBEIsgp9XnIZOINz9u9Cp8.roa (hash: nOKPYxisoFhulj9H3B7lMkY5LfDFsGYXQ3OYtNKl888=)
                          4: I2T7UeDGLA8H6P-KL1eFGnyz1sw.roa (hash: v4p0Y6w9BB4bsfMbtUIZ8Y6YLTCCJcFeqfZJdPcFyGU=)
                          5: Rb8NbhTAxdW8Qozx0F0hMesjBeQ.roa (hash: vFhA2KjCPdOcJsVjA7uGx7jrzbvsOL97jtv5aYxWqgs=)
                          6: kXPy2txtviypD5vwBDji7qgiSxU.roa (hash: fv/wHDl1gYo3IGDSXMLvUCYdHmU4dilfu63Wi3/dV9k=)
                          7: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: VXQS0Rj4MUKntA5oOszkFe+s8cju9htrgOwH1p4a/GM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:e3:94:88:39:41:36:0e:a6:1a:75:0b:b7:27:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
        Validity
            Not Before: Jul 29 05:00:30 2026 GMT
            Not After : Jul 30 05:00:30 2026 GMT
        Subject: CN=8433c8cbd58efe67f7e94bb430c72a16c6241588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:aa:93:16:a1:e6:ec:26:16:d5:f4:43:fe:
                    0e:49:f2:8e:23:0c:96:b4:8f:97:03:ba:33:89:1f:
                    b3:a8:f0:71:28:18:a9:3e:3e:26:36:1e:bb:c4:66:
                    ca:e2:2e:fe:67:80:7d:4d:45:71:3d:71:1e:43:49:
                    2e:bf:08:31:60:c8:d2:4d:e9:4c:3c:15:28:6e:f4:
                    89:55:da:67:cd:9f:54:87:ea:f1:da:e3:d6:ad:d0:
                    68:0d:38:66:ad:ca:ba:45:b0:4a:73:9e:12:1b:30:
                    60:8d:bf:d6:20:05:07:6a:40:fa:97:fa:0c:e9:00:
                    c6:30:fe:30:95:20:b8:3c:f1:4e:cc:f2:f6:4d:43:
                    de:2e:66:e7:3f:fe:89:50:95:6f:02:30:2a:25:d9:
                    37:40:f7:40:f1:7d:24:e7:d5:5e:3a:62:7c:29:b6:
                    cb:6e:45:da:d9:e6:13:39:65:b6:54:86:39:1a:cb:
                    eb:bd:bc:ae:cc:2d:bb:4d:55:53:a1:99:e9:34:53:
                    75:19:e0:5e:97:45:d9:d2:9a:ad:26:ec:cc:cd:ed:
                    39:e4:90:06:6c:33:5b:0b:c1:ee:9c:da:f5:6f:c9:
                    a5:49:b7:a0:e8:0d:56:cc:27:31:50:9b:6a:fa:5f:
                    27:89:25:f4:7d:65:03:e1:2c:ef:c1:28:0f:86:22:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:33:C8:CB:D5:8E:FE:67:F7:E9:4B:B4:30:C7:2A:16:C6:24:15:88
            X509v3 Authority Key Identifier:
                keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:3e:82:8e:cd:9d:b4:2e:eb:89:c0:bc:84:cc:53:77:96:
         05:58:41:a2:fa:17:3a:0b:99:2d:70:d4:c5:86:b2:65:bf:ca:
         a1:44:8e:1d:e0:fc:1a:38:20:86:b7:37:99:38:98:cf:8c:f1:
         03:c9:e6:1e:af:75:b1:50:ed:b3:6f:28:c6:c9:ff:f2:ef:12:
         3f:b4:40:a8:ed:89:f8:8f:1d:03:90:30:c8:b1:1d:56:1d:75:
         e3:65:e1:eb:8f:df:3b:6b:86:41:aa:42:57:6e:33:cc:43:f8:
         09:e7:06:b1:73:52:27:54:7f:3b:09:88:ed:70:86:b5:b1:2b:
         d2:7f:fa:7f:f8:58:4b:fe:66:50:ab:e7:99:cf:46:1d:2c:20:
         64:53:5d:b0:df:02:d8:4f:87:d7:8b:a7:15:f0:01:5c:f7:7c:
         81:88:e0:81:9c:37:ce:3d:2a:9e:64:ba:e9:e7:ad:8c:8a:fa:
         78:a2:b3:7a:f8:c5:19:87:6a:21:95:9f:d9:44:57:db:b7:06:
         74:ca:91:e1:53:6d:8e:eb:51:ac:5d:82:09:36:6d:17:17:50:
         7b:af:4a:61:52:45:12:56:42:df:5c:59:2a:21:39:cb:fe:a4:
         b0:af:b2:b8:0e:99:34:11:42:09:3c:ef:4c:35:aa:97:6c:6f:
         42:e1:0b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:11:14 2026 by rpki-client