Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File:                     TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier:          2oDrLSjVTi6/p0rkKZH9EoHvN4wOlqt1MuxvcxROE1c=
Subject key identifier:   21:06:3F:57:D8:C6:5F:C3:C9:CA:45:4F:F6:3A:E7:49:2E:68:D5:FB
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer:       /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial:       019FAC088DE037054F445CF30E3BFA2653D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number:          0A6C
Signing time:             Wed 29 Jul 2026 04:01:09 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:09 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:09 +0000
Files and hashes:         1: 8Q40PlY6cpiTHKi29S26G9DdZhI.roa (hash: ZDmF+D6x42sRt1+OHh8Qa/2IzhhfYVV5gqAu2bLK1o8=)
                          2: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: k6tUSpG1x5vycHonuKRH+EnfovB4n9rcPGMCl6uGWl8=)
                          3: Wla3v2HAl7YCNyUXL50o6i7nRog.roa (hash: meyhssm1okIyg5CgskQZwTUohcxxkQ3loQU928lQacE=)
                          4: mJxvlVesYFyqMGJZoVjJ6H8bytQ.roa (hash: VwZ3L7NHL8vXYsjYAD8iL+X2hR9DNXoNspGIhoXBzzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:8d:e0:37:05:4f:44:5c:f3:0e:3b:fa:26:53:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
        Validity
            Not Before: Jul 29 04:01:09 2026 GMT
            Not After : Jul 30 04:01:09 2026 GMT
        Subject: CN=21063f57d8c65fc3c9ca454ff63ae7492e68d5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:af:72:f6:fd:3f:df:22:1b:7f:2c:83:28:
                    39:d3:1a:93:f9:7e:fd:93:9a:29:d0:5f:c5:4d:79:
                    0d:ee:a3:86:0f:2d:2e:1c:9a:cd:3d:61:51:ee:12:
                    cd:29:55:10:40:e9:75:aa:aa:d0:95:96:de:d0:24:
                    79:1d:f8:8c:63:11:9e:92:10:ef:53:df:e7:a7:d3:
                    d7:87:21:22:2b:ad:0b:8b:d2:d2:b7:09:39:36:12:
                    cc:d1:7d:1b:19:79:b8:6d:36:54:0b:18:6f:ac:a3:
                    05:5f:7c:aa:9f:15:0e:0d:38:98:f1:28:d1:e4:12:
                    27:6c:63:14:fb:90:28:3a:8b:6d:a8:cd:39:50:db:
                    6a:06:1a:d0:23:a4:ab:74:12:1d:f1:94:70:09:8b:
                    91:60:37:b5:62:a8:e8:bc:f4:66:0b:52:88:fc:a9:
                    42:bb:f2:49:3c:49:1c:50:3d:c2:d0:5c:7b:8a:c9:
                    11:2e:84:14:25:b4:4f:6a:c6:93:90:4f:e9:86:4f:
                    55:36:98:a9:ee:41:19:35:70:00:df:0c:22:ee:6f:
                    0e:5e:fb:c2:37:b1:bd:e4:db:dd:d7:83:8e:0c:6d:
                    fe:11:64:bf:c7:8d:84:ef:47:6f:96:03:b0:21:e8:
                    0b:1c:7f:7f:27:2d:f0:db:03:86:90:81:22:79:dc:
                    83:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:06:3F:57:D8:C6:5F:C3:C9:CA:45:4F:F6:3A:E7:49:2E:68:D5:FB
            X509v3 Authority Key Identifier:
                keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ad:33:01:f9:f0:c9:48:2f:41:85:a0:a5:71:c6:13:00:05:
         78:36:dc:cc:57:c2:d0:7c:5b:df:11:88:9e:04:ad:a2:c3:ad:
         dc:cf:e9:ee:87:88:01:d8:6e:99:65:0c:c5:52:60:4b:0c:51:
         6e:7a:dc:a5:66:65:72:0f:f5:d8:35:c3:83:dc:39:b5:77:a9:
         5b:da:6c:28:fe:5b:ad:b0:72:47:4b:46:be:02:51:d2:ae:02:
         28:12:d9:27:13:ab:5d:51:68:43:80:5a:1c:05:d4:c9:3f:92:
         13:4e:ae:76:d4:cc:52:23:32:5c:fb:2f:86:61:7b:de:f3:90:
         71:6b:2f:cb:ea:49:64:41:80:06:3d:83:73:bc:f4:b3:ba:5b:
         c1:68:ad:1c:7d:d6:f2:54:c6:ec:11:72:d8:dd:37:a8:e2:fb:
         4e:d4:db:74:6f:04:51:a1:77:db:7b:9e:7c:fa:b9:26:cb:99:
         77:d5:1b:bf:1d:3b:e0:24:5a:94:6c:dd:f8:11:e2:34:af:87:
         ff:90:fe:b3:b4:53:bd:64:f9:72:85:60:3e:52:8b:6b:55:cf:
         45:fe:64:cc:7f:3a:94:0e:c0:b1:b1:36:ff:64:b6:5b:20:25:
         2f:e7:7f:b7:fd:47:3d:a5:28:43:6a:3a:53:33:68:b1:f1:49:
         f5:6f:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:28 2026 by rpki-client