Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File:                     TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier:          F7fUDN5NpaWcHBhhfmNoC+T4CkXuSfEfvYeCY01YCu4=
Subject key identifier:   36:22:26:4C:4E:16:2D:04:E4:11:4F:D0:A1:4A:3A:7E:B6:AE:FD:35
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       01A127D5C715CA147383214271111F0E4611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number:          0B59
Signing time:             Sat 10 Oct 2026 22:01:23 +0000
Manifest this update:     Sat 10 Oct 2026 22:01:23 +0000
Manifest next update:     Sun 11 Oct 2026 22:01:23 +0000
Files and hashes:         1: 5cyx45wBsDWUW4HLBveZ_qT2fcI.roa (hash: 8zrBvmy9ZVUIH/JDFlTLI0bEMjkf56i51k/bt1Lb1pQ=)
                          2: BGnZrxh766n-RwiVyZM8GwNTqh0.roa (hash: /zWDyCDhQQVXOZUHRipaDLFDgbYWX/UYPO8XJtBp0uE=)
                          3: JI6F6sKwmFDB-S9XODKhAA660AM.roa (hash: /b/qNAizl4V5sFYHPlaPbBReehGSPPstai3HlyE9iGo=)
                          4: OB0voxOvgqvD6w4CwDmCo19dJlY.roa (hash: 9mhFY39YjN1Cc/funyTGbxD0WJvEdMakoR8u2Fsujz0=)
                          5: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: C+QFrXUNW/w+tUpoZ1U2jrfSbl9etPCJ/njEM4vAEgI=)
                          6: X14l7kvlYYBF3EHNWSg-svsFuOQ.roa (hash: Y9BNprLjsgal1cKXYYlZbO0fiea/j/rMdHY3dC/wqFY=)
                          7: sGobVjVtmpTG3eIQoRngSBlxcMU.roa (hash: UMoTBGpuj0hrOh47PvNUlOhwfEbv/t4MSoG5XZ2RuSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:d5:c7:15:ca:14:73:83:21:42:71:11:1f:0e:46:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: Oct 10 22:01:23 2026 GMT
            Not After : Oct 11 22:01:23 2026 GMT
        Subject: CN=3622264c4e162d04e4114fd0a14a3a7eb6aefd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:04:c1:f6:79:2e:7f:ab:b0:22:3d:26:dd:c3:
                    ae:3d:51:48:4d:6b:9e:5c:c7:ce:e7:15:82:95:d8:
                    78:17:e9:30:b7:52:4b:c8:23:52:ca:b3:78:32:b3:
                    1d:3b:8d:38:2f:3d:4c:bc:f0:0b:c9:8b:97:98:d8:
                    fa:a0:6d:52:4d:c0:f7:66:5b:eb:31:6f:b2:72:f3:
                    ef:80:51:18:ac:a6:34:5d:71:23:44:72:b6:d4:25:
                    02:f2:fc:4f:f0:2b:30:6f:73:50:33:d3:4f:49:7f:
                    04:6d:17:03:e4:35:ec:c2:f0:65:9b:e8:6c:80:d3:
                    95:37:50:44:56:57:ff:23:41:fc:5f:3f:4e:7d:72:
                    c1:56:6a:63:ee:07:32:e2:74:dc:95:45:61:1b:8d:
                    6b:06:e3:a9:2a:e8:11:ed:3f:e1:39:a5:a7:9a:7b:
                    f8:8a:f8:26:0b:94:c2:df:94:6f:eb:c9:bd:bb:3c:
                    27:4c:9c:0c:53:66:9f:05:93:08:e3:86:f6:f2:61:
                    be:a8:d3:73:d4:7c:d7:3e:6f:04:d3:dc:30:3e:d0:
                    5a:24:e3:29:a2:10:88:7e:b9:95:29:15:ab:61:cc:
                    10:27:48:87:f7:53:35:10:1b:c4:96:3a:eb:07:c6:
                    f9:83:d5:61:56:ed:f0:e8:d7:72:2f:eb:d2:a3:d4:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:22:26:4C:4E:16:2D:04:E4:11:4F:D0:A1:4A:3A:7E:B6:AE:FD:35
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2b:fc:41:4b:46:c4:5c:ae:98:d8:73:0d:d9:ff:15:b3:24:
         cc:bb:cd:23:88:cf:66:35:a1:9e:ca:18:7c:6d:41:52:6d:86:
         4a:56:c2:53:02:e8:2f:f9:d8:00:0c:a6:7a:f7:04:51:bf:60:
         63:50:ee:db:13:95:64:2a:c9:5b:4e:d8:41:ba:d0:e4:e5:e7:
         53:61:9c:60:ea:3f:8d:80:96:84:5b:f9:38:00:46:d9:29:10:
         b4:86:40:32:d0:87:e1:ec:59:69:a6:88:bf:a7:34:ed:7a:7f:
         39:b8:0f:78:43:1d:56:3a:e3:be:d7:9a:7b:59:3c:54:58:29:
         66:6f:1c:6b:17:81:9a:b7:e6:22:e3:06:5e:d2:e8:0e:41:b4:
         0e:89:ca:ce:54:29:15:3e:e4:bf:6c:dc:62:53:34:94:5e:73:
         44:fc:7d:be:41:1f:58:b5:93:de:1e:3f:26:30:06:87:8f:2c:
         51:dd:f3:cf:0b:ee:ce:98:2b:0d:92:8c:e2:16:82:f4:bc:c8:
         6d:9d:94:6a:96:02:8c:fa:9f:a2:f5:ff:e2:9d:cf:b9:ae:6d:
         49:59:a8:32:c9:75:83:bd:44:56:4d:74:c3:49:4a:c9:80:fd:
         2e:81:3c:9b:4c:9d:7b:c6:9b:ac:51:04:ea:77:e5:98:6a:03:
         23:68:b2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:01:03 2026 by rpki-client