Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File:                     TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier:          mmLo/QTINu3or9kbckqFu4U2hM4CIpnovCuGLaPoZHE=
Subject key identifier:   B2:26:A1:D0:CC:A6:F6:D4:83:19:E8:A5:5F:69:C3:78:FA:BC:6F:7B
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer:       /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial:       01A0BE42E702836460F5AC36A94AA3780EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number:          1A66
Signing time:             Sun 20 Sep 2026 10:00:50 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:50 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:50 +0000
Files and hashes:         1: IDKw72UDV4fBvKey2_GXU4YBDRA.roa (hash: qTZQ2NPnaEey/BLWGhLNERBs92D0ttnILDap5h0iO4A=)
                          2: LfKEiBUYG-rD2066F2HvQK8WvPg.roa (hash: P6VfgqJ5zT/fBeMm4CrVPEyhOWX2kuGJJ1u66qFZ3ms=)
                          3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: CltgUMlNczS0GOms194y4TaZ59jrd1qsMQiDkMljRfQ=)
                          4: UrbBvwlHu4uSvs0RYok_mjpcJHQ.roa (hash: zeDYSU9xRwUTl0+MDt61kl2HDTZsB77vtuzNNebemko=)
                          5: ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa (hash: vg+eKlX0YTyZM3VY4Qut9mEJDRF4SsmNGim25sAbw6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:e7:02:83:64:60:f5:ac:36:a9:4a:a3:78:0e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
        Validity
            Not Before: Sep 20 10:00:50 2026 GMT
            Not After : Sep 21 10:00:50 2026 GMT
        Subject: CN=b226a1d0cca6f6d48319e8a55f69c378fabc6f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:d8:40:5b:1d:f2:ef:a0:c1:19:72:e5:3b:
                    e3:2d:b7:e9:d6:4a:bf:53:20:98:df:68:f4:d2:6d:
                    ac:c4:53:d7:b4:b5:18:3d:d4:35:06:b6:f1:c7:c9:
                    ae:7e:16:5c:ec:b5:73:d7:1b:27:68:e6:14:ec:23:
                    ab:6a:db:29:cc:4e:87:8b:eb:1c:52:5c:08:60:1d:
                    b1:57:f7:44:ba:8a:49:77:8a:06:30:fd:d9:34:66:
                    f1:ca:41:90:b2:22:81:7e:8f:e3:66:6b:d9:74:0d:
                    09:fb:94:02:e4:5e:eb:88:84:08:7f:08:2d:09:73:
                    f5:e1:6e:72:b9:bd:bb:7e:c6:73:a7:09:16:15:73:
                    95:49:f8:b8:13:4b:6e:98:14:f6:e2:ba:45:dc:9d:
                    e7:0c:2a:25:be:43:40:98:4b:42:74:da:65:69:1f:
                    a7:5b:dc:44:3d:de:86:d5:3b:51:3b:45:fe:88:66:
                    43:62:c1:87:30:4b:34:ee:2e:4e:42:67:60:c2:94:
                    82:72:41:33:11:5a:3c:78:1e:d6:d1:9c:c5:f4:ae:
                    4b:3c:86:c1:12:e2:53:e0:2b:7c:6a:a5:71:5e:be:
                    00:9d:32:42:46:f2:45:b7:da:b3:b3:3b:71:28:9c:
                    84:48:4e:62:06:87:1f:f6:77:c7:21:37:39:d8:bb:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:26:A1:D0:CC:A6:F6:D4:83:19:E8:A5:5F:69:C3:78:FA:BC:6F:7B
            X509v3 Authority Key Identifier:
                keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ec:ca:c3:a4:d3:50:e1:06:9f:81:4e:d7:83:0f:f0:b8:36:
         b1:7c:82:6f:67:52:4c:ae:3e:74:d8:7d:77:4c:91:7f:58:59:
         66:e1:6c:ac:10:d9:bc:ab:f6:0c:ef:fe:28:46:43:89:83:5e:
         24:7e:ac:fb:68:d1:18:89:34:34:aa:6d:a3:66:e7:a2:48:66:
         1d:45:a0:13:41:87:ce:b6:a9:c8:4c:81:d5:83:81:a3:c0:b5:
         97:3e:78:69:1b:68:26:5a:ff:46:82:55:fd:ab:cd:07:9d:eb:
         d2:8b:d2:c6:3f:21:bd:2d:60:d2:33:f1:d5:23:66:36:40:bb:
         2b:55:60:ee:f3:a9:6c:24:61:98:34:95:a8:8b:18:9c:e8:a9:
         b3:e1:ab:2c:65:03:f9:21:dd:8b:73:4a:ac:25:fe:57:0f:c2:
         4e:2a:1e:10:5c:78:2f:5b:41:d4:66:c4:69:b3:35:87:f5:5b:
         6a:64:e9:ed:af:76:94:69:a9:e4:2c:e8:3c:c3:05:5a:b4:03:
         8d:3f:72:96:e2:b4:84:a1:17:8f:81:e8:37:39:3c:9e:f5:ac:
         a4:e7:c1:5b:89:61:ca:44:b9:19:92:24:67:8e:f7:38:f8:d9:
         49:0b:6d:8c:f6:25:ef:a8:f8:71:36:a6:90:78:a3:0d:bd:ad:
         2b:49:08:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:09:06 2026 by rpki-client