Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File:                     tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier:          gZkGNL1z8i9sNeMy2sOTierWba3GRKae2aFVP2RwbwI=
Subject key identifier:   B5:55:1E:7E:E2:9A:C5:FE:9E:4E:86:8E:76:6B:06:05:DB:A0:FF:DD
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer:       /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial:       01A12EEA80D07337C05B4E898594683964A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number:          05C2
Signing time:             Mon 12 Oct 2026 07:01:22 +0000
Manifest this update:     Mon 12 Oct 2026 07:01:22 +0000
Manifest next update:     Tue 13 Oct 2026 07:01:22 +0000
Files and hashes:         1: eB4gEEpPyWFq6clsUK7vv51vvfQ.roa (hash: vOzaKzOf/nV2cWIeYZMZ7vTHjq9ov1FtZCm3hsoyh/8=)
                          2: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: D8iv4vEL8WkAuv/ZxZGs+935EDUFd3AiCHCngKav7Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2e:ea:80:d0:73:37:c0:5b:4e:89:85:94:68:39:64:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
        Validity
            Not Before: Oct 12 07:01:22 2026 GMT
            Not After : Oct 13 07:01:22 2026 GMT
        Subject: CN=b5551e7ee29ac5fe9e4e868e766b0605dba0ffdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:aa:e6:5f:ca:e3:f3:e7:36:b6:9e:be:46:
                    03:c8:ee:ca:8d:51:a0:e0:44:7c:3b:da:65:ca:3c:
                    ef:81:0b:d8:3d:86:1b:4f:c3:c5:ad:38:30:49:a5:
                    d3:b3:00:8d:46:76:1b:fb:cc:c0:78:e1:79:44:6c:
                    5f:5c:51:e4:27:a5:1a:6a:e5:0a:da:19:96:15:04:
                    16:fa:74:fe:87:3d:52:a8:f7:a9:c6:86:0d:bd:24:
                    8d:d9:37:f4:75:7f:c4:4d:71:2c:35:e9:86:dc:05:
                    bd:0c:4d:97:e5:77:fd:b9:0b:b3:1e:c0:97:77:0e:
                    4e:40:78:2f:d8:a9:ec:4d:00:eb:ed:59:e0:c0:c6:
                    ca:87:63:dc:93:69:a4:67:46:77:99:23:2b:c1:f6:
                    4b:96:b3:54:81:59:fd:9b:14:ed:83:38:c2:5a:2e:
                    37:91:e2:41:b6:2f:3f:27:1e:ff:5c:7c:fd:e9:ea:
                    bd:35:d0:99:ed:be:7b:50:e3:a2:31:2f:65:84:15:
                    d1:5c:de:1d:34:74:c7:34:a4:e0:74:3f:01:2c:85:
                    10:10:5d:f5:c2:a0:01:af:8d:8f:de:dc:e5:91:b2:
                    b0:57:4a:e1:e2:04:85:4a:c2:86:b9:59:89:89:d0:
                    fa:9d:48:92:b5:84:ae:33:8e:69:50:ad:91:4a:58:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:55:1E:7E:E2:9A:C5:FE:9E:4E:86:8E:76:6B:06:05:DB:A0:FF:DD
            X509v3 Authority Key Identifier:
                keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3f:92:7f:98:5e:42:dc:bd:a0:b1:40:9e:4f:05:81:bd:20:
         c4:8c:fc:32:da:93:9b:2d:36:44:e7:08:f1:03:c5:af:28:f2:
         64:42:e9:79:be:71:b8:0e:83:50:e7:2d:57:01:ea:a5:0d:4b:
         c1:9e:0b:c3:3a:10:e5:7a:81:c6:ae:9c:94:3a:ef:9c:b8:66:
         c0:78:d1:4d:72:92:cb:f7:67:57:e1:31:24:f9:69:fa:b4:03:
         80:6f:0e:ab:aa:fb:10:f4:c3:aa:76:a9:52:24:c1:96:b0:83:
         de:dc:23:73:3d:16:56:e9:e4:79:49:31:07:f4:83:8c:b7:26:
         69:c5:fa:6e:25:e6:90:b4:c2:03:50:5b:60:f7:4f:cd:e2:6b:
         c5:9f:cf:15:db:46:af:52:93:e5:50:e1:9e:89:c1:ba:c0:f8:
         12:c9:b8:e0:bf:00:93:43:07:3b:12:42:09:f9:94:e8:6d:46:
         47:51:46:ed:82:49:e9:a5:06:99:fe:e8:59:76:94:ee:40:fe:
         90:d8:08:a6:ef:39:4d:f1:5d:4d:d7:b6:e5:32:cc:9d:a5:38:
         89:dc:01:2f:b4:c8:7f:67:26:9f:67:fd:19:6b:42:ba:93:c5:
         af:57:1e:34:1d:fa:35:a2:35:d3:14:0c:37:ba:4b:6a:45:74:
         11:89:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 14:07:51 2026 by rpki-client