Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
File:                     TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft (raw, json)
Hash identifier:          hQG5N2jhYM6pyQTWRpj7rfpGfxkyXlgQ1/9KAYEpEFU=
Subject key identifier:   82:56:EA:2B:A6:94:53:7F:1B:E5:F4:13:43:E5:B0:F1:67:94:7B:74
Authority key identifier: 4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
Certificate issuer:       /CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Certificate serial:       01A12EEA91FDE56F5D5111D77BD6C2C78AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
Manifest number:          0563
Signing time:             Mon 12 Oct 2026 07:01:27 +0000
Manifest this update:     Mon 12 Oct 2026 07:01:27 +0000
Manifest next update:     Tue 13 Oct 2026 07:01:27 +0000
Files and hashes:         1: TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl (hash: 0eE7bUsUTTa1JnpSsQgC08UY+1fynYdAOIPeKoQOT6U=)
                          2: YPqShABfeYxe85XZwgPP-D5hAs0.asa (hash: lSybZ49LJX9Yd/+rtoHHH2KWxEldGY3pzCrhf0jSSpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 07:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2e:ea:91:fd:e5:6f:5d:51:11:d7:7b:d6:c2:c7:8a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc0230cd415d86e86fd8893134287ce54a687d7
        Validity
            Not Before: Oct 12 07:01:27 2026 GMT
            Not After : Oct 13 07:01:27 2026 GMT
        Subject: CN=8256ea2ba694537f1be5f41343e5b0f167947b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:18:49:dc:ff:01:b6:7f:25:bf:ca:33:bd:da:
                    a5:54:a8:d6:6a:94:aa:35:a3:53:91:91:38:81:e4:
                    24:26:8e:94:0d:92:23:a2:8e:87:05:e0:e1:87:77:
                    6b:87:f4:49:bd:14:16:92:09:e2:12:f6:bd:3a:e2:
                    cb:47:b8:f0:a5:37:46:f6:21:25:41:0c:da:0f:6a:
                    8e:c4:cf:70:1c:27:1e:0c:40:dc:1b:9b:ae:12:f9:
                    4c:62:a1:37:1a:c8:88:92:81:ff:94:7c:2f:fa:ed:
                    38:65:eb:b1:ee:32:3c:b7:d9:c1:c6:c7:62:a7:5c:
                    fb:a5:51:39:76:cf:42:bd:fd:83:3c:d9:ef:29:62:
                    74:41:5b:48:70:ad:5c:95:96:f8:3c:24:33:75:4c:
                    c4:b7:45:1d:a6:94:bb:69:b1:f6:6d:62:84:59:11:
                    5f:a1:a0:19:34:9a:ab:38:aa:81:8e:3f:09:41:07:
                    83:78:5b:11:8c:fa:78:9f:79:c7:01:ac:c0:fd:e3:
                    a2:b9:f4:57:46:3f:d9:7d:85:60:8d:c0:bc:04:3a:
                    ec:0e:98:0d:3d:8b:eb:95:fc:ea:55:11:d6:d9:02:
                    1e:d3:6d:f9:1b:ec:f6:f5:10:96:de:a9:fa:6c:95:
                    72:79:7d:43:37:18:2a:0b:97:eb:57:24:2e:77:d1:
                    9d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:56:EA:2B:A6:94:53:7F:1B:E5:F4:13:43:E5:B0:F1:67:94:7B:74
            X509v3 Authority Key Identifier:
                keyid:4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f4:bf:79:d6:bf:7f:e8:a6:76:a3:8c:96:85:68:a9:b3:df:
         17:f2:e6:14:1d:bd:7c:33:fb:3f:90:f0:bf:4a:73:cf:52:80:
         73:ac:ef:50:b3:c7:e3:db:d5:87:5e:3e:0b:45:88:37:35:2c:
         50:65:49:d6:65:44:fe:20:34:aa:db:19:80:95:6a:7a:0c:4b:
         53:a7:23:6b:96:d7:76:f4:4f:f8:6a:6f:b8:08:1c:50:d3:f4:
         d4:6f:86:e8:22:c9:1f:c1:53:b3:31:61:25:12:2a:3c:2a:36:
         1d:66:11:c7:4b:e7:d3:f3:c8:6e:6b:e2:3d:05:91:fe:24:32:
         f9:1e:86:ee:2a:cc:47:c5:db:00:49:a6:49:62:2b:46:85:eb:
         cc:20:10:c5:8d:5e:57:42:c5:28:c3:7e:ea:03:02:cb:94:c5:
         83:8c:66:47:3c:44:81:99:dc:cd:19:c3:14:ba:c2:2a:91:05:
         8b:c1:03:63:b9:5b:1f:98:9f:e8:ce:87:a2:87:26:9b:38:0e:
         5d:54:69:f1:f2:4e:12:79:33:ee:72:9a:2c:d0:2d:98:93:71:
         76:71:6b:23:5d:01:3e:84:53:df:f0:25:e4:30:1b:26:8a:63:
         2c:93:c9:5c:83:9f:39:c9:30:d1:8a:ae:88:dc:60:36:65:6c:
         3c:78:d4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:37:39 2026 by rpki-client