Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File:                     TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier:          aW16cnoXNV2nligij13X9fhtB9KjX3Ozlr1HNaNxJUQ=
Subject key identifier:   99:FB:A8:77:FD:1B:FE:97:A9:76:CB:18:58:F0:A2:11:6D:D5:E5:21
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer:       /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial:       01A0DBA9EB5A8B035EFEFB75C44CB33A31AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number:          1A71
Signing time:             Sat 26 Sep 2026 03:02:21 +0000
Manifest this update:     Sat 26 Sep 2026 03:02:21 +0000
Manifest next update:     Sun 27 Sep 2026 03:02:21 +0000
Files and hashes:         1: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: rqJNn+DwMzEkoKwpRVOJxsdsg2TcqFC4v5nKx6BLonE=)
                          2: uhDIc0uEZUElVgS-_EocXKCrnM4.roa (hash: Q1EY9r/YhBigZO4RXwGxgcBbj+7/3SMubwYfDCdrIGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:eb:5a:8b:03:5e:fe:fb:75:c4:4c:b3:3a:31:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
        Validity
            Not Before: Sep 26 03:02:21 2026 GMT
            Not After : Sep 27 03:02:21 2026 GMT
        Subject: CN=99fba877fd1bfe97a976cb1858f0a2116dd5e521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:45:c3:04:0c:7b:6b:c4:dd:7c:90:b3:ee:84:
                    f8:e5:e7:fc:a3:f8:4f:9b:a8:3b:4a:3a:6c:d5:3d:
                    90:11:00:05:72:d4:47:c1:17:fc:10:c3:4f:78:85:
                    6b:7c:5d:e6:ab:84:6b:ea:6f:0b:bf:19:34:6a:57:
                    a5:ca:17:88:50:5a:42:f0:fc:8f:2b:44:6e:f0:ec:
                    cf:fe:df:5a:d7:f5:b0:85:c8:d2:b8:04:d5:97:20:
                    9d:a5:77:9b:1e:af:75:58:ae:fd:e2:69:6e:98:42:
                    e9:9e:36:b3:e8:fd:9e:ea:35:46:27:05:9a:b8:a7:
                    92:87:76:5c:bb:c9:89:14:11:9e:c1:26:3a:51:62:
                    3c:39:7f:21:0c:13:6c:f0:f3:02:59:4d:56:d9:c0:
                    b3:ae:ba:55:da:59:65:bd:6e:38:47:d9:94:ba:22:
                    3b:99:97:0c:bb:ba:b9:1b:c0:77:c6:d3:0e:a1:45:
                    69:da:2c:1e:84:ae:92:ef:ad:0c:a1:2a:21:04:a9:
                    c2:f0:2d:eb:2f:d5:85:f5:82:b7:1f:97:5f:cd:43:
                    fc:50:a9:9d:a6:cd:48:10:bf:e2:56:d2:77:4e:03:
                    07:37:14:82:ff:4a:55:29:87:17:9e:f9:ab:3f:eb:
                    b9:0e:9a:39:bf:48:e1:ba:c7:98:55:ec:35:51:67:
                    88:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FB:A8:77:FD:1B:FE:97:A9:76:CB:18:58:F0:A2:11:6D:D5:E5:21
            X509v3 Authority Key Identifier:
                keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:dd:76:a5:01:dd:b2:e7:dd:51:d1:59:e8:27:0f:e7:09:a2:
         e7:8d:0c:94:84:ba:b6:30:e2:f0:05:3b:7b:38:d8:b3:72:14:
         23:c0:66:40:aa:4c:fd:e0:4d:29:11:5f:77:6e:bf:79:d0:63:
         5f:11:31:60:ae:f1:a5:03:d9:07:ea:c0:1b:17:29:bd:81:83:
         4d:0a:24:b5:2b:df:94:7f:37:cb:37:25:15:1b:a5:31:38:c8:
         32:22:3c:85:a4:b1:aa:d9:85:8f:ca:b2:cc:20:1f:62:a3:fa:
         71:d1:c7:24:a0:f2:29:4c:59:74:49:75:30:ab:56:27:f2:92:
         0c:23:35:d5:b3:28:5d:ae:5d:5a:c7:7a:52:40:dd:4f:c4:eb:
         6f:b4:fb:9a:a5:91:a7:56:84:57:ce:e2:ca:7f:43:b7:73:8e:
         ab:ec:16:3b:d7:2b:14:0b:11:8d:71:59:91:4c:31:20:35:4e:
         07:27:68:68:2b:02:35:34:a6:2e:6e:ec:18:02:0c:a1:26:51:
         f3:c0:a7:ed:0f:8d:a2:d6:a1:da:42:c3:f3:82:31:7b:31:c4:
         d3:ef:e5:9f:10:1e:6d:d2:d2:23:65:9e:64:4f:67:cc:af:6c:
         a7:da:59:bd:2c:56:42:99:4f:4c:c0:c1:1a:b3:5b:2d:a4:2e:
         c7:f9:55:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:29:10 2026 by rpki-client