Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File:                     Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier:          Rc1ussl15mE6AwqNRc60pkEQjp30ZO4GB6UGD+ridPc=
Subject key identifier:   C1:68:D1:96:CE:AD:79:7C:80:94:36:DF:97:D4:93:81:86:DC:C4:67
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer:       /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial:       01A0CB9094EFE78F507B5AF29A12476D9740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number:          164A
Signing time:             Wed 23 Sep 2026 00:00:44 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:44 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:44 +0000
Files and hashes:         1: LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa (hash: 4U3Q5m4w5gDb99Fndaz4s602DhJvC8d4654L2Zwbqhc=)
                          2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: ZjzHcjnmC8NI+LOIuv8mQJzx+RvECzsyGT4/hkBZPaw=)
                          3: mazgd2rK4HfvX3Omu_5x4KeE4q0.roa (hash: VMQzYJR5enDZAjPyu/iICQfNBSPELGmMcOQZHSHcGJw=)
                          4: vMIHGFPf0heT2WpdAxKEA8H1uqY.roa (hash: Y7aS0+OiMr6KF+wJQp4D98bim2LplH1VyBIQ6kJaS6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:94:ef:e7:8f:50:7b:5a:f2:9a:12:47:6d:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
        Validity
            Not Before: Sep 23 00:00:44 2026 GMT
            Not After : Sep 24 00:00:44 2026 GMT
        Subject: CN=c168d196cead797c809436df97d4938186dcc467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e6:e3:79:56:52:f6:be:01:fb:6e:78:6c:dc:
                    48:37:bb:24:3e:e8:f1:b2:dc:1a:4d:8a:12:2d:cf:
                    e5:01:2c:a5:47:0f:4c:91:64:4b:c4:45:b1:19:05:
                    2a:b9:fe:d2:7d:de:6e:55:7c:78:5d:9c:2d:07:16:
                    53:2d:28:6a:15:b1:98:62:f1:ea:bf:89:24:ed:ca:
                    8c:c9:6c:42:ae:3c:5b:69:47:59:51:af:75:75:61:
                    77:d9:eb:6c:32:22:12:3a:4b:95:63:60:d3:49:e4:
                    7c:28:68:bd:e2:8d:8f:42:30:e6:6e:eb:19:26:93:
                    36:39:22:39:a1:d6:9f:1b:04:a9:69:15:2c:2a:ba:
                    d1:13:a5:ad:a9:6c:0f:39:c4:5e:c8:05:f1:9b:76:
                    18:5a:23:95:59:11:5b:22:36:15:f6:4f:6e:b0:13:
                    0c:9c:b5:de:a0:b3:a5:a5:ee:fb:61:ec:3e:dc:6b:
                    fa:a0:f3:1f:9f:c3:76:e3:71:5e:74:02:46:3a:02:
                    02:41:86:01:4e:b4:af:82:f4:fd:16:fd:07:da:df:
                    ec:0b:fe:4d:01:9d:4b:49:bf:76:b1:7e:f8:94:02:
                    07:3d:e0:51:d0:82:2f:4d:62:4c:9a:63:82:aa:1a:
                    66:6e:40:fa:07:19:26:a2:fc:8e:01:99:a7:af:26:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:68:D1:96:CE:AD:79:7C:80:94:36:DF:97:D4:93:81:86:DC:C4:67
            X509v3 Authority Key Identifier:
                keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:79:58:2b:72:b1:01:68:5f:c9:12:6f:df:13:4a:3c:21:
         f2:e7:82:7b:12:0a:2f:df:d8:dc:39:b9:b1:0e:a3:a5:d0:d9:
         6c:7b:e3:93:35:59:33:7f:14:62:c6:e3:b2:5d:7a:fb:74:85:
         b3:5e:1a:e7:c5:bc:bb:30:91:84:ec:cd:86:9b:7d:9b:c7:77:
         ab:5b:39:d4:5a:8d:3d:a5:bb:5a:8e:ff:9c:44:a6:76:06:44:
         47:47:f4:91:39:2f:22:17:5f:35:63:e1:05:44:7f:99:33:08:
         40:7a:f3:d5:f6:99:de:21:a4:b3:03:38:da:a3:2c:dd:72:5b:
         d7:24:c9:32:7d:3d:66:9c:01:9f:3b:c7:92:15:93:45:91:f7:
         f4:59:0d:8b:d1:b7:71:db:36:d4:48:0a:e1:e9:70:61:5c:c9:
         b1:cf:d1:7f:08:7d:9f:77:2b:24:a5:60:0d:b0:e3:0d:67:f7:
         0d:3c:df:ef:be:a6:f9:1c:d3:f8:10:65:c3:21:06:cb:2a:08:
         17:1b:2f:0d:a8:1e:03:70:cf:5d:20:47:d3:a5:39:6e:0c:39:
         87:72:c9:aa:3e:96:19:94:4d:ee:a4:2c:fc:3c:37:31:78:99:
         42:dd:b4:c2:f0:22:ca:b3:b1:e3:5b:05:c3:bc:13:18:81:61:
         b7:03:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:21:30 2026 by rpki-client