Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File:                     TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier:          rKt/9vx4CudN0y+XvqrE9b4E7wpql5KsaEHjXknrkho=
Subject key identifier:   BF:48:28:A5:F9:FC:7F:19:8C:64:D3:C2:36:EF:DD:20:2C:C0:01:2A
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer:       /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial:       01A0D5A68A78D2D5D515320DCB8671C85248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number:          19F7
Signing time:             Thu 24 Sep 2026 23:00:56 +0000
Manifest this update:     Thu 24 Sep 2026 23:00:56 +0000
Manifest next update:     Fri 25 Sep 2026 23:00:56 +0000
Files and hashes:         1: PNfIBENqPn1C2ky1c3Y7NiG7Ymw.roa (hash: DgC7dqgRapp52CiQQUrzN9ZAbunqBU0/xi2SXO7kKV0=)
                          2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: p+Zcf4XbviO5hGU22XeZbZlxfkULLiiFQCLZSK4GuQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a6:8a:78:d2:d5:d5:15:32:0d:cb:86:71:c8:52:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
        Validity
            Not Before: Sep 24 23:00:56 2026 GMT
            Not After : Sep 25 23:00:56 2026 GMT
        Subject: CN=bf4828a5f9fc7f198c64d3c236efdd202cc0012a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:d9:45:b7:da:e1:a0:ed:35:bd:c1:10:89:
                    1b:7f:4c:dc:74:f7:ba:21:fc:c0:6f:42:1c:e4:6d:
                    14:53:7e:94:77:88:85:32:48:5e:05:96:ca:f0:2c:
                    42:bc:19:a9:d9:34:15:1b:af:2b:6a:9a:b3:59:3c:
                    5c:af:6b:8a:3f:9f:d9:1f:05:61:90:c3:11:fe:4d:
                    ee:1c:f7:5b:be:f0:5f:e7:ae:97:17:2b:84:90:c2:
                    bf:5a:a7:47:2a:01:be:a7:cc:0f:fc:64:fa:0f:54:
                    fd:d6:44:95:a9:a3:49:0c:8e:7b:7b:0e:0a:77:57:
                    ac:62:ca:d9:f7:42:7f:e3:09:e9:22:14:47:4e:3c:
                    15:09:c1:59:27:f6:96:3c:fb:45:ac:4b:fd:46:2b:
                    5d:92:d4:51:ad:9d:da:ef:4d:92:4f:91:41:a5:e3:
                    96:6e:8f:d6:48:1a:46:ae:7b:e3:07:87:a1:5b:ee:
                    9c:94:be:fe:cd:71:b0:a4:ce:fc:33:13:21:e1:3c:
                    66:2b:6d:53:3b:43:c8:dc:19:2f:d4:62:4c:26:5c:
                    82:9c:30:1c:74:93:87:ff:1f:75:57:58:2d:ff:78:
                    cc:d0:8b:4c:79:84:69:54:8d:70:b8:c3:76:a2:53:
                    aa:db:5c:22:a5:17:51:ae:fe:6e:7b:ad:5b:7d:56:
                    b3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:48:28:A5:F9:FC:7F:19:8C:64:D3:C2:36:EF:DD:20:2C:C0:01:2A
            X509v3 Authority Key Identifier:
                keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:79:31:a2:f4:5c:96:59:4c:8a:2a:bd:d0:fd:59:a1:85:53:
         5a:ed:fb:b9:1d:9e:af:05:9b:dc:8e:e9:cb:a4:30:ab:f7:e1:
         a2:57:4a:76:9d:c3:95:8e:9a:3f:61:69:b3:68:4a:c9:ab:cd:
         c4:54:21:be:88:9b:d1:f2:11:74:00:93:ef:e8:30:0e:db:43:
         20:18:c1:03:25:33:6b:14:5e:64:9b:6d:18:3f:d1:0e:8e:fd:
         b5:89:c5:e2:d3:a6:19:29:6c:75:c3:48:39:3d:4d:11:39:23:
         b7:b5:25:cd:a9:b1:f5:dd:ec:c0:9a:d3:1e:54:45:c5:a1:55:
         65:33:ae:7c:35:c4:2d:35:46:17:34:74:0a:1a:b3:04:2d:de:
         4e:b0:d2:aa:0c:ce:85:a0:e4:a0:73:b9:36:ab:cd:c8:89:af:
         19:47:a8:77:6e:47:fd:fb:dc:5b:01:c7:1a:6d:63:38:64:a2:
         93:63:89:20:68:d4:8d:7f:8f:c9:d2:10:5f:ef:4b:08:40:cf:
         fc:d4:1f:5b:5d:52:76:14:e4:db:96:3c:9f:af:19:d7:43:8c:
         c3:95:32:9a:d4:ff:5d:08:ae:07:42:65:e6:1b:86:2b:26:b3:
         93:cb:82:12:98:db:e1:41:1d:41:ce:55:33:46:ff:1e:88:9d:
         17:10:33:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:50:40 2026 by rpki-client