Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File:                     TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier:          XFnrsVKtbDPq1UyeHFkV8nF5IrU5Q61ce8fbt1Gj9qk=
Subject key identifier:   D5:EB:5F:49:97:ED:B6:2D:C2:E4:0A:16:91:76:1D:92:BB:09:FB:4D
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer:       /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial:       01A0CB59D6DF70FCF3CEA7BD48962CE17C99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number:          0B5E
Signing time:             Tue 22 Sep 2026 23:00:57 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:57 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:57 +0000
Files and hashes:         1: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: c9BLnboZ5pOHdHD38sKZLki7KoHDaEyLzDb47A7zQ9s=)
                          2: oPCuq54P2bsSATikpn82yn6-AEM.roa (hash: lHLmqu6Ruee6ZqCasWZKuPLRXPXPUX8ZgrdyBMM4hU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:d6:df:70:fc:f3:ce:a7:bd:48:96:2c:e1:7c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
        Validity
            Not Before: Sep 22 23:00:57 2026 GMT
            Not After : Sep 23 23:00:57 2026 GMT
        Subject: CN=d5eb5f4997edb62dc2e40a1691761d92bb09fb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9f:1a:73:72:d9:76:b4:5d:e9:50:df:37:25:
                    f3:cd:bb:72:13:c2:90:18:4b:89:ed:05:29:04:51:
                    55:50:80:1c:1e:db:8f:32:a6:9c:2b:94:a5:7a:54:
                    1a:2e:ad:c1:5c:be:7b:37:de:58:25:5a:ef:61:17:
                    ae:67:8e:90:41:06:ec:b9:79:32:9b:43:1a:56:0b:
                    f9:37:1b:5a:87:d1:c4:35:a5:2f:c2:71:3f:89:21:
                    2a:24:97:93:a0:80:9b:00:f5:9b:87:7c:cd:45:14:
                    96:21:a2:1b:10:73:84:68:84:ff:05:81:6c:b9:5e:
                    2c:57:92:6b:ca:9d:44:1d:69:9d:49:16:4f:03:26:
                    1a:9c:51:0e:7a:1a:74:d6:bc:28:84:2d:4c:ac:1b:
                    51:a9:b5:80:53:cb:e2:19:57:b3:1f:d6:0e:e8:72:
                    28:32:92:27:8e:fb:32:62:a2:3c:5b:94:e1:9e:fa:
                    2b:66:f4:37:06:b7:f0:62:39:83:99:db:db:4c:61:
                    b5:78:b7:2b:f2:d3:50:75:b5:8c:ba:75:ee:ab:97:
                    5f:fa:c6:ae:77:b3:2a:ae:88:25:6e:a2:22:a5:03:
                    a0:98:08:e7:6d:e5:52:dd:6a:d3:08:fc:fd:5a:a2:
                    f2:45:37:79:f2:dd:42:76:59:cc:ef:98:72:3b:79:
                    48:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EB:5F:49:97:ED:B6:2D:C2:E4:0A:16:91:76:1D:92:BB:09:FB:4D
            X509v3 Authority Key Identifier:
                keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f5:cb:5d:4e:3a:61:de:6b:7a:a2:1f:50:1d:98:15:50:cb:
         4d:5a:62:b9:e3:57:a0:26:f1:d4:79:02:0d:03:e2:cb:44:96:
         bf:f2:70:c4:7f:97:16:fa:4e:d5:4b:1e:59:ad:fd:23:bd:cf:
         5f:9b:d7:f6:8a:4c:3d:34:04:4c:c4:4a:e7:3a:da:d1:14:f3:
         2c:76:39:1c:cd:c6:ee:ae:64:27:9d:2d:75:5d:89:c0:3c:d7:
         ca:7e:19:7c:06:50:d3:d7:61:36:d9:15:8c:b2:5e:0b:8d:cb:
         c9:e0:75:24:13:dd:ae:d5:0b:69:48:f7:b6:e5:a8:b0:b2:fd:
         fe:08:a4:6c:1a:6a:f0:27:37:a2:5d:de:22:14:70:cb:64:56:
         fd:0b:a5:ad:d8:cf:89:86:91:c0:2b:19:f3:53:d5:bd:82:4c:
         fb:34:45:4e:fc:e3:d1:87:dd:86:69:4b:0d:b7:54:37:99:c2:
         63:41:bc:46:3a:2f:ab:ab:e3:50:51:98:18:02:21:e2:e4:29:
         ac:e6:33:b9:b1:48:1e:1c:3a:d8:d0:dd:40:f6:5d:00:9f:1c:
         c8:33:31:cc:54:e7:6b:68:53:18:1f:52:45:43:e5:1e:65:db:
         32:6e:d5:d5:39:fb:be:e1:b0:0c:ea:5b:56:15:db:2a:99:79:
         20:96:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:37:29 2026 by rpki-client