Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File:                     tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier:          opgQvUFyjfMPzwXbV21149MrNEiXk5Mi10aEw73lpLY=
Subject key identifier:   E2:B0:22:B0:78:9E:53:A6:09:7B:CA:61:9C:9A:F9:7E:01:FA:1E:F6
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer:       /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial:       01A1261E74DB1D8620C7207ABA08C4446846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number:          1AA0
Signing time:             Sat 10 Oct 2026 14:01:32 +0000
Manifest this update:     Sat 10 Oct 2026 14:01:32 +0000
Manifest next update:     Sun 11 Oct 2026 14:01:32 +0000
Files and hashes:         1: fK9aO2I8AtgF0c0rdh_GX4O4_G4.roa (hash: u0RKyLKqUhdTzKSmpaGBlbuO8M5rtJXGLGs1u6N9C1g=)
                          2: nUmXXOPkWjccJgN8O22tzPhWVlA.roa (hash: UqKB7riKgf3jbIKMj8rldXeyuF7eaO+XqFxWCXQioCw=)
                          3: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: SixR8lw7/DCmz9AXYrx4bmvPDtCmoFVCwSqEwR6u/u8=)
                          4: xYSs50B2xtsvWdJxMD0UuyzwnRE.roa (hash: wUK1v8a3MmWnPSffQ5f8oxAVVqstmvh7KosqvxbaO78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:1e:74:db:1d:86:20:c7:20:7a:ba:08:c4:44:68:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
        Validity
            Not Before: Oct 10 14:01:32 2026 GMT
            Not After : Oct 11 14:01:32 2026 GMT
        Subject: CN=e2b022b0789e53a6097bca619c9af97e01fa1ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:5a:16:16:c5:d2:34:31:43:29:f2:39:ea:
                    b9:9c:d7:6d:fc:13:e8:82:82:95:e4:23:5e:bf:63:
                    15:40:ba:23:c6:be:5d:ec:1d:b7:42:ea:32:61:f0:
                    43:a8:59:ae:0d:7c:3a:95:dc:ec:07:ad:78:c6:3d:
                    a0:bf:16:25:1e:b3:48:8b:48:92:c1:d8:c4:92:5e:
                    e5:3d:c1:1c:51:da:6f:53:e6:be:2d:3c:e3:0a:6f:
                    66:f3:5c:cf:6b:85:1f:e6:4d:be:09:6e:10:4f:1f:
                    a2:f5:a0:8a:01:b5:a2:59:d2:ee:fc:39:ad:00:a0:
                    59:b0:78:24:6c:59:dc:e3:84:12:a2:9c:73:84:c0:
                    e8:6b:c2:fc:c5:d5:3b:a2:60:3f:75:90:08:63:43:
                    dd:91:2b:6b:35:03:2a:7d:2f:1a:ae:fd:f3:32:09:
                    5d:99:19:6e:bc:76:31:62:35:1b:f1:f6:5a:f6:e1:
                    40:55:65:bb:fb:ec:88:f1:ca:77:60:0e:9d:31:42:
                    fe:a7:08:4c:a2:74:db:86:08:4a:f7:78:27:a4:ff:
                    22:99:03:a4:95:dd:98:aa:86:c0:47:1b:5b:9b:d3:
                    a9:e9:ee:b2:6a:58:4c:e1:a8:7b:6f:4e:92:44:b8:
                    df:d6:07:c9:50:7d:04:55:ae:d6:17:44:4d:19:2b:
                    e6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B0:22:B0:78:9E:53:A6:09:7B:CA:61:9C:9A:F9:7E:01:FA:1E:F6
            X509v3 Authority Key Identifier:
                keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7c:b4:cc:48:9e:b2:f8:87:89:28:75:96:f8:32:41:6d:41:
         31:42:52:11:6d:44:45:19:30:4e:8d:f9:1c:10:a5:46:45:72:
         29:97:c1:11:9b:6e:ce:9c:7d:ac:a9:87:99:c7:1c:84:bc:0b:
         6b:ba:d2:5d:0e:40:1d:6d:f8:cb:02:d6:77:c6:7c:01:ad:c5:
         1d:db:9a:64:51:e9:c1:ed:fd:f1:e9:35:25:e3:94:d1:21:cb:
         4f:9f:69:d7:26:93:55:16:50:a0:2f:b3:fe:de:0b:bb:6a:16:
         4c:98:ac:d3:6b:67:fd:df:aa:cd:8a:7e:d3:64:56:22:1b:0d:
         34:4b:3e:cf:30:d3:fb:f6:0f:ab:9f:6d:03:13:cc:8d:be:00:
         0a:7e:c5:44:22:4b:d8:6f:d3:08:da:e5:18:c5:6e:d3:3f:af:
         fa:6b:70:51:b1:17:ba:f7:d1:d0:4c:f2:b7:87:0d:44:91:09:
         9c:b3:ff:6e:cd:6b:ee:0f:0c:ed:71:97:23:14:46:32:f7:91:
         4a:82:0c:4d:49:ad:4b:33:93:6f:ba:cf:a3:e8:5f:65:a5:0d:
         7d:4d:6e:08:38:30:67:21:08:28:ee:09:bd:87:4b:33:bb:df:
         1b:53:d7:71:cc:41:8a:66:a7:4c:7d:f0:ac:ed:63:69:7f:60:
         ed:a2:8a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:43:15 2026 by rpki-client