Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
File:                     tYaoZDYz6YdBEai881GKCQXyhgk.mft (raw, json)
Hash identifier:          sJAe8xJAN+eY9f5fH9wmg6B3VNmlSpGc1VLWbxJ7fp4=
Subject key identifier:   AA:E1:C1:DB:29:59:05:50:87:0C:9B:ED:AD:AE:54:C0:FB:05:A1:23
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Certificate issuer:       /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial:       01A136A3DFFD26E9FD7E037B2F90AB7BAC3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
Manifest number:          164A
Signing time:             Tue 13 Oct 2026 19:01:11 +0000
Manifest this update:     Tue 13 Oct 2026 19:01:11 +0000
Manifest next update:     Wed 14 Oct 2026 19:01:11 +0000
Files and hashes:         1: R_zL9EhetPG627p64jnL_1AQk_k.roa (hash: /ASm15I9YtFuL/r1IrLrMNiCv/23kZabo3hMsyygvPM=)
                          2: Zx2Ej29t4Sy3ugAdSAEr8wgh-eI.roa (hash: 6qePl3E6/9bWQI3GzNjE+NBTWrA6JE82fp1zkkf+j8o=)
                          3: gPytstS2H2DCx0G35K4nAVksneE.roa (hash: I34ZNFgqBn6ft829pIhUL9qJ7ZwAtJssKpKV0YYtJmI=)
                          4: hL4U-26oJ-d8CY7a6r3Udux4pFM.roa (hash: 8nT0Nid1k0WCSq4dufjGbFyrf1TbKzMQQr3veAEfmRs=)
                          5: jJ74mpm8B1pyvT1MNhCtSe0cxRk.roa (hash: OKs2X6l4NJ7txPZTz3RUzDrNyB2I3km6f/sNQFkFGUQ=)
                          6: tYaoZDYz6YdBEai881GKCQXyhgk.crl (hash: frDqIb7InES/FDz91KZIDrKdms5mDLNk/uwIi7G1Se0=)
                          7: v_CzW-gEtbdZtpCnpKHVty7BP7s.roa (hash: FK1HiNTHGuvdh1/S7hYfIVoOC1e1CT6RxRS6KDmNYRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 19:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:36:a3:df:fd:26:e9:fd:7e:03:7b:2f:90:ab:7b:ac:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
        Validity
            Not Before: Oct 13 19:01:11 2026 GMT
            Not After : Oct 14 19:01:11 2026 GMT
        Subject: CN=aae1c1db29590550870c9bedadae54c0fb05a123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:66:56:76:a8:10:02:70:d1:fb:aa:e9:76:
                    77:4a:be:37:b2:09:0a:3a:2a:30:6a:8f:66:9b:99:
                    8f:40:e4:b8:ca:e8:8e:19:39:68:f4:05:b9:b3:91:
                    dc:c1:ae:e7:2d:dc:11:e0:6a:2f:99:d1:cd:48:43:
                    67:b8:6b:51:34:21:4d:ec:e5:c4:7a:57:45:f9:1f:
                    a1:f9:02:ec:c4:39:20:2f:28:37:62:98:ac:91:ad:
                    03:46:a9:c5:df:75:61:04:22:a6:bf:aa:2f:58:18:
                    1f:01:8e:8d:b4:71:43:dd:71:32:f1:7d:a6:e8:b0:
                    57:e1:df:41:b1:b2:26:bf:e0:00:72:71:92:c2:83:
                    81:05:7f:92:65:e3:25:e5:84:31:15:5a:92:6b:cc:
                    25:76:48:4b:b4:be:52:4f:52:80:bc:1f:40:6c:2c:
                    5c:ae:42:0f:9c:20:8b:45:b5:b8:ab:aa:a9:4f:4e:
                    e1:a0:b7:1e:8f:ba:80:f5:a8:c9:eb:86:a4:82:f2:
                    65:84:ce:cc:d5:e3:50:c5:1b:27:9b:fc:7b:7c:93:
                    b2:af:86:ad:e5:73:73:c1:1a:a4:81:3a:f1:fe:7b:
                    87:a0:68:bc:5b:9f:75:48:35:35:f4:a4:1f:52:08:
                    e2:5f:49:b5:2f:76:59:e7:ac:7d:2f:01:31:54:93:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E1:C1:DB:29:59:05:50:87:0C:9B:ED:AD:AE:54:C0:FB:05:A1:23
            X509v3 Authority Key Identifier:
                keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:4f:29:5d:3d:e3:c1:d7:bf:8a:48:ca:13:16:eb:24:18:b3:
         65:0b:e0:6d:f9:30:0c:50:a8:75:68:69:4f:be:f9:64:c2:17:
         ca:0c:07:66:1a:25:50:f9:03:35:d0:44:29:47:d2:bd:40:cf:
         3a:d5:ba:c3:42:67:64:b9:0b:0b:2b:bd:c3:10:04:3c:52:a7:
         00:41:14:f2:cc:ea:61:e2:ef:a4:93:b2:be:f6:59:07:09:2d:
         ed:69:ec:28:5d:35:ec:a3:b2:b6:b1:df:55:43:da:4e:ca:50:
         af:b1:53:23:60:2a:e7:44:1f:c6:16:67:23:84:6f:d2:27:ec:
         32:23:b3:23:46:e5:be:c6:71:95:3e:e5:3e:3b:00:57:1a:d5:
         b6:50:5b:93:0b:eb:00:52:56:b8:71:ee:04:0d:6f:06:da:1f:
         31:13:69:9a:09:6b:17:60:3e:66:53:77:2f:37:c1:65:b5:1c:
         2f:a5:98:43:f6:ca:c5:20:5a:2e:d1:04:1a:0e:27:15:62:43:
         0e:91:27:9e:9c:e0:e3:ff:ee:6f:dd:18:8d:06:57:bf:e5:93:
         db:30:6d:71:a4:68:b0:00:ca:52:1a:b1:2c:b4:21:9c:c9:d8:
         c9:f9:e4:bb:94:e9:21:a2:b6:a2:e4:80:8e:79:82:64:43:c2:
         1b:d4:96:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:03:30 2026 by rpki-client