Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
File:                     TBN-znNflLMWcSERPY_aTWvzuIg.mft (raw, json)
Hash identifier:          X0Z+3zD31++/q5j4SSNL9TphcWdKW6WoNjI7I0Q4G8U=
Subject key identifier:   46:F0:04:26:A7:FE:D3:14:09:05:B0:69:BF:5C:4F:8B:BE:5B:34:2C
Authority key identifier: 4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
Certificate issuer:       /CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Certificate serial:       01A0D94D5C339B446D1E2F2A2C07FCB42FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
Manifest number:          0215
Signing time:             Fri 25 Sep 2026 16:02:00 +0000
Manifest this update:     Fri 25 Sep 2026 16:02:00 +0000
Manifest next update:     Sat 26 Sep 2026 16:02:00 +0000
Files and hashes:         1: 2ZBsXbCU5rMtEsQWxt1XYURH2I4.asa (hash: JRezVq/F+weQjLBxYG86li7cHkKnykOs/59enczYXBE=)
                          2: TBN-znNflLMWcSERPY_aTWvzuIg.crl (hash: Gk8kc2A52UqCoRAzkXI8O4XxZdzsZWpViD06YVHUgpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4d:5c:33:9b:44:6d:1e:2f:2a:2c:07:fc:b4:2f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c137ece735f94b3167121113d8fda4d6bf3b888
        Validity
            Not Before: Sep 25 16:02:00 2026 GMT
            Not After : Sep 26 16:02:00 2026 GMT
        Subject: CN=46f00426a7fed3140905b069bf5c4f8bbe5b342c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d5:a3:ec:67:81:bc:3e:94:30:47:ce:0e:d5:
                    58:23:38:c0:ae:b8:47:12:fd:c5:b6:2f:88:ac:59:
                    3e:35:c8:58:9f:ac:84:d4:42:a7:be:2e:d3:7f:5b:
                    36:60:2a:f3:f0:a8:83:8d:8b:4d:6a:ce:7d:e0:e4:
                    53:64:17:ad:36:57:ff:06:e8:e3:62:f8:1c:c1:24:
                    ce:57:93:51:d6:02:76:71:f2:97:ae:84:1f:db:bb:
                    48:1c:a3:34:3e:99:fc:e2:5d:1d:e3:e3:f8:65:92:
                    6a:0e:25:92:e1:58:d2:2e:af:12:aa:e9:1a:e4:b9:
                    20:c7:96:1f:04:eb:e7:32:c8:4a:1f:6f:e4:cd:81:
                    f1:80:57:80:d0:65:c3:26:7b:93:5c:3a:74:39:2b:
                    57:a7:9c:2e:0d:d6:47:2d:93:b5:f5:bf:c1:4b:6a:
                    53:4b:77:b5:f8:d0:73:52:57:1b:22:c9:36:6a:7f:
                    9d:65:6b:e6:91:c3:a6:eb:21:ad:98:43:52:44:a4:
                    da:7a:e8:0e:7a:3a:ed:b4:a2:87:8d:93:e9:0c:bf:
                    5b:ea:9a:3a:12:37:82:3a:a5:46:72:4f:42:06:5a:
                    9c:af:0a:01:09:fd:0f:85:bb:a4:72:f1:65:2f:1d:
                    4b:a1:61:d8:23:70:c7:af:8f:67:fd:a9:c4:60:bf:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F0:04:26:A7:FE:D3:14:09:05:B0:69:BF:5C:4F:8B:BE:5B:34:2C
            X509v3 Authority Key Identifier:
                keyid:4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:40:5c:55:6f:77:d6:75:35:6d:f2:76:bf:f5:d5:d9:cb:d1:
         9c:f2:39:f9:16:70:4a:42:d7:d0:b0:a6:3c:77:f8:0f:cb:08:
         45:49:5a:b9:f7:41:c4:d2:76:66:4b:64:d6:21:5e:cc:0f:03:
         19:ef:34:ce:f0:87:3c:5b:61:2b:f0:c0:71:6e:8b:1f:d7:a7:
         71:67:ba:8f:5f:c0:86:7c:f3:38:39:76:20:e4:e2:a4:f7:a3:
         4c:9a:ed:87:df:9f:f8:bd:17:b7:7e:e6:8b:bb:7c:8b:6a:87:
         7d:3e:82:de:0a:0b:c0:bb:3d:72:35:6a:be:77:a3:2c:46:63:
         7d:45:1a:c9:b6:b0:1d:cd:ae:8c:0a:20:98:cb:1e:d2:09:a1:
         3f:24:70:4d:21:6b:10:16:d2:bb:df:8c:74:89:7e:26:7a:74:
         95:30:ce:81:07:3b:73:e6:98:af:1c:d8:37:b8:4d:ee:53:e2:
         63:ac:79:3d:09:a1:66:c6:46:ea:74:f7:d9:24:c1:66:06:eb:
         17:56:83:58:c7:d6:23:26:f8:34:03:24:a2:6b:6d:68:74:81:
         c1:36:8c:53:c4:0f:9a:30:43:eb:8d:ef:ec:30:ec:9e:28:66:
         4c:80:0c:5f:9d:ca:70:88:3a:02:58:c3:b5:80:db:3c:bf:9f:
         3c:84:6f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTVwzm0RtHi8qLAf8tC+vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMTM3ZWNlNzM1Zjk0YjMxNjcxMjExMTNkOGZkYTRkNmJm
M2I4ODgwHhcNMjYwOTI1MTYwMjAwWhcNMjYwOTI2MTYwMjAwWjAzMTEwLwYDVQQD
Eyg0NmYwMDQyNmE3ZmVkMzE0MDkwNWIwNjliZjVjNGY4YmJlNWIzNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69Wj7GeBvD6UMEfODtVYIzjArrhH
Ev3Fti+IrFk+NchYn6yE1EKnvi7Tf1s2YCrz8KiDjYtNas594ORTZBetNlf/Bujj
YvgcwSTOV5NR1gJ2cfKXroQf27tIHKM0Ppn84l0d4+P4ZZJqDiWS4VjSLq8Squka
5Lkgx5YfBOvnMshKH2/kzYHxgFeA0GXDJnuTXDp0OStXp5wuDdZHLZO19b/BS2pT
S3e1+NBzUlcbIsk2an+dZWvmkcOm6yGtmENSRKTaeugOejrttKKHjZPpDL9b6po6
EjeCOqVGck9CBlqcrwoBCf0PhbukcvFlLx1LoWHYI3DHr49n/anEYL/LHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbwBCan/tMUCQWwab9cT4u+WzQsMB8GA1UdIwQY
MBaAFEwTfs5zX5SzFnEhET2P2k1r87iIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zYjJmYjEtMTE3OC00ODcyLWI4YjAt
MmVmMjI1NjRhNDAwLzEvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zYjJmYjEtMTE3OC00ODcyLWI4YjAtMmVmMjI1NjRhNDAw
LzEvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0BcVW93
1nU1bfJ2v/XV2cvRnPI5+RZwSkLX0LCmPHf4D8sIRUlaufdBxNJ2Zktk1iFezA8D
Ge80zvCHPFthK/DAcW6LH9encWe6j1/AhnzzODl2IOTipPejTJrth9+f+L0Xt37m
i7t8i2qHfT6C3goLwLs9cjVqvnejLEZjfUUaybawHc2ujAogmMse0gmhPyRwTSFr
EBbSu9+MdIl+Jnp0lTDOgQc7c+aYrxzYN7hN7lPiY6x5PQmhZsZG6nT32STBZgbr
F1aDWMfWIyb4NAMkomttaHSBwTaMU8QPmjBD643v7DDsnihmTIAMX53KcIg6AljD
tYDbPL+fPIRvAw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:15:19 2026 by rpki-client