Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File:                     tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier:          iiJ1I4P3lqrnJmbrWo1+Arz9El0B9rbg03Z2f6tgKEA=
Subject key identifier:   7C:C7:9E:6D:0E:6F:20:BC:CB:92:45:2E:FE:DA:83:54:9C:77:6A:2F
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer:       /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial:       01A107DCE2077474DF6DAC934D79C425344D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number:          0C55
Signing time:             Sun 04 Oct 2026 17:01:18 +0000
Manifest this update:     Sun 04 Oct 2026 17:01:18 +0000
Manifest next update:     Mon 05 Oct 2026 17:01:18 +0000
Files and hashes:         1: HhEHXcVrA4jYly_4JLZyYZncnvg.roa (hash: 6iTpuhytQNXUI4g8368tGo5DhJ/PIFrnzj+J0UysgLI=)
                          2: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: f0yIMJOflJYypGZlJrYwI+e8h99CSbLQ9YA4X3ast3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:dc:e2:07:74:74:df:6d:ac:93:4d:79:c4:25:34:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
        Validity
            Not Before: Oct  4 17:01:18 2026 GMT
            Not After : Oct  5 17:01:18 2026 GMT
        Subject: CN=7cc79e6d0e6f20bccb92452efeda83549c776a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:af:3a:a5:0f:9b:8f:ac:9d:94:de:26:4b:14:
                    77:35:35:75:80:7e:80:2b:1e:fc:56:9c:74:bf:0e:
                    b4:47:18:29:2c:45:76:2a:b8:ee:78:32:74:9f:4d:
                    5e:f3:50:34:33:d2:d9:5c:b1:00:36:12:6e:80:a9:
                    97:7a:ff:cb:bc:10:78:61:27:a6:9b:de:41:a6:3e:
                    01:a6:1c:91:fa:12:eb:75:29:87:5e:0e:76:6c:df:
                    66:c4:27:7f:e5:57:91:8f:9c:8c:c7:c0:b2:4a:e9:
                    d4:97:dd:a1:5a:bc:cd:d2:58:e5:24:bc:53:8d:95:
                    d4:fc:77:b9:da:87:59:ee:83:2b:d9:d0:9d:c0:bf:
                    20:c7:07:25:f1:73:57:73:a4:ce:be:fe:52:83:b5:
                    8c:c6:88:b0:e9:44:fd:1c:4f:d4:9e:02:32:4c:b3:
                    c7:53:29:33:c0:5e:a2:9a:7d:6c:5d:f0:76:ce:0c:
                    e5:06:3c:27:08:42:a2:72:d6:63:0d:94:ee:66:9b:
                    db:5a:97:d1:27:70:8a:db:10:84:ed:54:93:7d:96:
                    4b:5f:ef:bd:46:84:39:52:10:95:74:4d:3e:2d:12:
                    64:f6:72:8f:cc:00:49:44:86:ce:b4:2b:a6:b6:fd:
                    99:0e:f5:5c:aa:5e:e4:f6:ff:36:08:51:fa:bf:3b:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C7:9E:6D:0E:6F:20:BC:CB:92:45:2E:FE:DA:83:54:9C:77:6A:2F
            X509v3 Authority Key Identifier:
                keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:50:a3:e3:4a:fe:06:40:a9:3e:4d:b6:0c:8f:50:f9:f9:7e:
         dd:e2:d9:c3:ee:48:55:e8:fd:2c:29:1d:56:bd:1d:0c:51:75:
         fe:31:b1:3f:67:ba:a9:e8:1f:71:15:7d:fb:63:86:01:3f:db:
         e0:6a:ed:08:a0:c2:92:02:cd:eb:4f:b2:ed:7a:27:5d:ac:3b:
         a2:7b:74:cb:71:ad:e9:b1:bb:fe:e4:c8:ef:ad:bb:19:50:e6:
         fd:14:ad:50:15:8e:0d:de:7c:3e:f5:d5:e5:3e:4f:77:9a:fd:
         d6:52:ee:36:5e:3d:76:c0:47:b2:9e:eb:05:49:8e:96:5d:66:
         80:24:be:53:e1:e0:80:ac:6d:c8:4b:6a:1a:59:3e:06:60:a0:
         8f:ee:eb:7b:19:f6:b2:eb:60:7d:ea:e5:d5:24:c0:87:3f:4c:
         82:a9:6b:8e:b7:ba:46:7e:3a:4a:e0:cc:f3:52:5d:5b:86:c6:
         44:93:65:07:a3:e9:54:ad:f6:b6:bc:f5:31:23:d0:be:f7:30:
         48:c3:47:e7:4b:f1:f0:40:c9:c2:dd:94:ba:cc:2e:ec:e4:60:
         16:69:16:60:79:e0:dd:e3:45:15:89:92:e2:10:f6:7b:d3:63:
         24:6c:d8:e6:ad:8d:57:e3:1e:3b:68:be:96:05:64:76:bc:e5:
         85:a6:43:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:23 2026 by rpki-client