Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
File:                     tjrC5OTds-VAdW8XqpcNSoowqFw.mft (raw, json)
Hash identifier:          9uFRwNaS3HBcxBpTCxHkiPEvgUM7TlvDPqqgiuwhAuQ=
Subject key identifier:   99:14:2A:80:81:BA:8F:46:6B:B9:D4:45:A1:C8:6F:75:36:93:8D:B5
Authority key identifier: B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
Certificate issuer:       /CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Certificate serial:       01A0C25642B1DD83AFDA656B25B6D527254A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
Manifest number:          0171
Signing time:             Mon 21 Sep 2026 05:00:27 +0000
Manifest this update:     Mon 21 Sep 2026 05:00:27 +0000
Manifest next update:     Tue 22 Sep 2026 05:00:27 +0000
Files and hashes:         1: 3PEhY1Ws9IOo3cWNjYy5yOIjYaE.roa (hash: T/g5YfW0+zaGcZZDm52y51nspj0qwZi0sWsHMlKk/KI=)
                          2: GpwRgxH1rh6kYkbCLIqnbXHV5yc.roa (hash: /8lkVZUXTI5q0RD+ogbND16CeygsTyvjGJNPFWulD2U=)
                          3: tjrC5OTds-VAdW8XqpcNSoowqFw.crl (hash: jP2JWaMsRP7WBhIxTRcBIRc++LJGgdekDi0HheQ2dRk=)
                          4: yZTKv672wHWKq63aWh-emOtWdus.roa (hash: 6Vhx+7brYUgL5kFF6TZGOji3UDVZOaK3kwdHUUol5S8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:56:42:b1:dd:83:af:da:65:6b:25:b6:d5:27:25:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
        Validity
            Not Before: Sep 21 05:00:27 2026 GMT
            Not After : Sep 22 05:00:27 2026 GMT
        Subject: CN=99142a8081ba8f466bb9d445a1c86f7536938db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:5a:85:a6:c8:a4:a4:8b:15:f5:a1:de:ed:
                    71:6a:63:32:63:e1:b8:35:92:f9:94:ae:6b:31:99:
                    cc:d3:18:94:a0:67:f1:e7:03:41:bf:a5:e7:8c:47:
                    4d:99:73:c1:2d:75:f1:63:7b:9f:03:14:a9:9c:d9:
                    7c:1f:92:64:f7:69:ef:70:85:84:92:63:a7:69:be:
                    1e:9b:f0:79:65:a5:7e:fb:d0:77:d5:f7:ec:e6:ed:
                    e0:15:90:ec:75:e9:d2:31:17:df:9a:b4:7e:11:e6:
                    8a:7f:58:46:9a:79:f9:6d:6b:e7:9e:1d:d3:b5:03:
                    be:8e:41:ae:1d:43:3c:c9:ee:de:15:51:e2:3f:26:
                    51:d3:4a:78:10:a2:68:f0:d6:87:8d:d3:3c:dd:07:
                    60:76:00:09:6d:9c:9f:6f:2e:44:78:bb:8c:07:17:
                    e0:a8:8a:2a:ca:3c:b0:c1:77:b3:82:37:7a:9a:04:
                    18:67:c1:80:5d:85:43:22:4d:42:7a:ff:08:65:19:
                    0b:13:e0:fb:b8:30:ee:b3:b4:69:1a:97:d2:3c:7b:
                    6c:d1:71:a1:9f:6d:0a:b2:8b:70:30:93:13:d3:4a:
                    ae:be:0b:9f:3d:1a:6f:9c:10:ed:b7:e3:0b:e0:66:
                    e4:f7:2d:5f:25:02:8d:69:19:08:31:0e:5f:05:9c:
                    15:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:14:2A:80:81:BA:8F:46:6B:B9:D4:45:A1:C8:6F:75:36:93:8D:B5
            X509v3 Authority Key Identifier:
                keyid:B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5f:c7:d5:31:56:3b:de:50:ab:5d:e6:4a:9c:56:60:e3:99:
         9a:02:be:45:b3:2d:33:de:86:7a:0f:b8:32:bf:4f:a0:23:fd:
         2e:1d:e6:89:39:5a:ac:50:a9:d1:17:d2:2e:e7:94:8b:ae:81:
         b9:6e:a9:4d:aa:25:35:6b:5a:ac:d7:85:8d:a3:83:2e:33:4b:
         35:af:b8:72:84:aa:b5:c8:ec:a1:a6:c3:9b:a4:af:74:6f:c4:
         31:c6:66:e6:ca:63:7e:0d:f6:b5:2b:25:f1:b3:41:3b:9d:9f:
         43:6c:06:e8:c3:0c:1b:68:0c:a9:68:3b:56:7f:f1:4e:0f:35:
         10:95:1e:61:a6:53:48:8b:cf:fc:69:fc:93:09:ad:8c:c7:99:
         d6:7c:71:2c:08:93:db:dc:d6:5f:b6:03:b0:e0:06:ae:8d:b7:
         f4:cc:11:fa:a2:9a:bb:4c:b4:88:91:16:d6:1a:5c:4f:b3:ef:
         2d:a2:63:bd:73:23:4c:3c:29:25:2d:6e:a3:8d:0c:a3:b0:23:
         7f:bf:3e:32:a3:72:80:81:27:12:01:9a:00:76:c2:8d:49:11:
         fc:c9:d2:2f:35:4f:00:03:79:e3:78:77:49:de:00:9c:54:2c:
         30:6a:ed:80:5f:af:c8:bc:7f:72:41:c4:56:4e:18:b8:40:bf:
         9b:7e:ba:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:41:23 2026 by rpki-client