Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File:                     TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier:          iLb2EnfpJtiUDzmxeUkG92aqgh+t/ppIrUBnmENL33E=
Subject key identifier:   97:DE:7E:40:ED:3D:89:61:62:70:25:82:55:6F:E5:D4:64:AF:2F:F8
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer:       /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial:       01A0D0491B7B297F1627ADE23871E234675D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 22:00:47 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:47 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:47 +0000
Files and hashes:         1: FjQD5obfjitF4TyVNiOnrUuu6ko.roa (hash: 4qN5nXtzPSFJUF4nfX9RAWVMRw9xA5tlQvP0vuood6U=)
                          2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: sewrxvA8KDxjRwIfhm9eZn0PN0YGtoqu8dAkC/SdUjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:49:1b:7b:29:7f:16:27:ad:e2:38:71:e2:34:67:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
        Validity
            Not Before: Sep 23 22:00:47 2026 GMT
            Not After : Sep 24 22:00:47 2026 GMT
        Subject: CN=97de7e40ed3d896162702582556fe5d464af2ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:04:79:cc:48:0c:ec:77:52:f1:3c:26:20:59:
                    41:99:13:df:38:e3:12:18:24:32:4b:79:f1:40:81:
                    e7:75:90:42:0c:ac:17:a5:b3:5e:e2:df:e4:8e:66:
                    1f:1e:25:59:53:a6:d2:72:33:02:05:9c:14:87:40:
                    db:11:5c:3d:27:e9:9c:ef:88:ee:78:72:26:95:87:
                    65:fb:f0:57:2f:20:0f:1f:40:77:fc:6c:c4:5f:7c:
                    76:1e:0f:a4:27:34:7b:f8:9a:04:36:ee:3d:87:2e:
                    c5:55:e3:81:49:91:ed:20:79:1b:35:f4:cb:b7:c7:
                    dd:fb:5b:ef:0e:5d:53:d4:cd:ed:dd:25:2f:1f:b7:
                    c4:2e:45:f9:74:6c:2c:7b:d0:2f:64:5d:34:9b:8b:
                    9d:1c:0f:fc:62:c5:ca:d6:59:a1:2d:66:a3:a0:14:
                    af:c4:21:a3:a8:28:0c:c0:95:f1:36:42:d3:0b:a5:
                    7a:a5:7e:2c:bb:4d:d1:48:e3:33:4c:32:6e:15:3c:
                    21:af:92:75:d9:1b:49:8d:30:fd:d1:1b:f5:39:07:
                    b4:27:20:91:19:b7:c2:ef:73:37:d5:0d:f8:49:13:
                    7d:da:f6:ed:6d:60:f9:0d:6f:51:14:1f:8f:81:13:
                    bb:5c:6a:ae:e3:97:72:98:15:0b:24:ed:7b:1b:c4:
                    14:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DE:7E:40:ED:3D:89:61:62:70:25:82:55:6F:E5:D4:64:AF:2F:F8
            X509v3 Authority Key Identifier:
                keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:dc:bf:61:b1:a4:ba:8a:09:ce:43:40:31:12:31:1a:f6:fd:
         c5:f1:d6:d2:ce:e4:09:f8:22:1f:eb:07:d2:89:5e:42:72:58:
         82:09:3b:8f:a4:ae:3d:2d:4a:47:2f:88:a4:63:40:bb:a4:a3:
         ae:b3:67:f9:a8:fb:e7:25:e1:0c:af:0e:de:cd:40:4d:84:5f:
         58:56:8c:85:4a:31:28:09:a5:fa:40:74:73:6d:e9:5d:70:2d:
         af:33:cd:23:d7:62:69:d6:87:25:a4:43:c1:99:c5:9c:95:f4:
         64:d2:05:20:89:05:68:fc:25:3f:f2:11:af:ce:2f:59:f1:0e:
         8a:78:6e:55:08:09:8e:b7:3e:5b:ba:21:c2:6b:4f:69:4b:4c:
         79:a7:78:db:9d:d2:df:10:b0:cb:2f:97:90:ad:d6:7c:6b:e6:
         a2:0e:70:a3:ff:49:bf:32:43:0a:d9:4d:5c:47:df:65:6b:6d:
         39:90:e8:14:fa:5a:d6:75:84:3b:79:74:9b:e0:86:33:e0:88:
         ef:39:9d:cc:2d:37:9c:7b:c1:81:59:f9:00:83:01:84:fc:16:
         e5:8b:86:ba:75:66:00:97:7c:59:4e:62:d8:50:a8:e0:1c:2c:
         0e:7c:32:81:ae:a6:52:9e:4f:4d:c2:aa:b8:0c:10:1a:f5:ce:
         05:1d:f1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:54:08 2026 by rpki-client