Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File:                     TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier:          L6BK8BlIl5ciSC2NrYFsdjaSK2feiTYOictB7lyZ9X4=
Subject key identifier:   C0:17:FB:63:40:0E:AD:A1:AF:69:8A:4E:3F:54:0D:C6:13:8B:43:12
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer:       /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial:       01A0D8DEAF099756A1C32C9E4A30AB0E2461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number:          1A77
Signing time:             Fri 25 Sep 2026 14:01:07 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:07 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:07 +0000
Files and hashes:         1: AHrBc9IiI5rzT7NjkubAdT8SUZY.roa (hash: sAnmMyrh/QNIQf8VgWnCRno2TJ9xZybX3KXlbr+CHB4=)
                          2: DrETaOYFwhHteuK_cjZBqrhBn3E.roa (hash: oyhA6G3HiupfNb3jMCFjOduY9kIjz5cSnNY6U8ENZ7Q=)
                          3: FSkU1zt4wvML2Ttfy8k6I7os8Zs.roa (hash: dq1d/UwLiz9XXEmCgqOT7UCJTR2SgOpkulgHHbWFy0Y=)
                          4: RGZDs7FDHPZQveBdXaR6_RleIaI.roa (hash: f9EpD71aD4s84pzobb8iZVB6jiX1m2KzVjJwHRvpYCg=)
                          5: SIaMK_IuBxRiq7kTvu-I3ZuWh4c.roa (hash: R6bwiZJPSxjQW8oQUMZiQejN/ZuXwmuCXceRWrrSn8c=)
                          6: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: 3Xj+y3v0Jn9/EF69tc/CG0IBY/j1OiXnNk21hU1K17A=)
                          7: TpE0DuP8Mw6CTXYw4ySwlEKf3f8.roa (hash: IATIDCMEa6O9YiZhEYOaf75cWoMv6GvzQS0vn1Zk4es=)
                          8: jXuAqsPHXvSfZGYgxhNksOYSF5U.roa (hash: yaNveVmpBlc0ed50geLDpHfxvb9X4WQOsQ1rbbUocCI=)
                          9: nYp3_cwZdOz_BuJRO8waybMbYvE.roa (hash: WJbnF4/GV3sKMU67v+tU/MzKdfAphkSSw1EOxJcBQnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:de:af:09:97:56:a1:c3:2c:9e:4a:30:ab:0e:24:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
        Validity
            Not Before: Sep 25 14:01:07 2026 GMT
            Not After : Sep 26 14:01:07 2026 GMT
        Subject: CN=c017fb63400eada1af698a4e3f540dc6138b4312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:20:53:d2:59:67:8a:0c:c7:d4:d4:2d:b8:
                    6c:62:8e:7b:df:56:b8:f1:2e:85:e7:77:57:08:97:
                    ce:05:f3:a4:ee:f2:6b:2d:c0:8d:7a:38:32:6b:3b:
                    ef:ac:a6:16:bf:9f:2e:08:7d:eb:74:92:5c:a8:4d:
                    66:33:b6:72:31:f8:04:c5:7e:3a:40:c9:4e:29:42:
                    b1:b1:d9:b2:89:f1:73:74:3b:23:f3:f6:4e:ea:a4:
                    99:16:0c:cc:49:ce:96:25:05:3f:5f:43:c8:66:3f:
                    65:e1:fc:1c:95:eb:6f:c9:d4:bc:02:c9:a8:3c:ab:
                    86:8f:f7:fb:8e:ef:da:ec:1b:a4:7a:6e:64:20:ab:
                    e9:4b:50:9b:bd:1a:79:7e:f6:40:37:37:3c:21:45:
                    13:23:de:a4:58:90:d0:19:d9:61:a6:aa:5a:eb:17:
                    fd:fa:08:20:bb:2d:ff:ec:f5:48:cf:c8:c7:1a:43:
                    8c:8c:cc:95:32:23:77:2c:1b:3d:45:ff:aa:8d:d9:
                    46:3f:b7:86:b2:92:36:4b:88:c7:5f:f7:42:6b:89:
                    7d:78:1a:67:9f:8c:d1:3f:70:e6:61:cd:fd:65:9f:
                    ea:46:bd:7b:79:63:0f:73:15:4a:d8:1d:20:2b:be:
                    ca:26:d3:27:d0:3d:1b:a4:12:dd:89:63:c8:e5:65:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:17:FB:63:40:0E:AD:A1:AF:69:8A:4E:3F:54:0D:C6:13:8B:43:12
            X509v3 Authority Key Identifier:
                keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:dd:9b:79:79:d5:99:b7:61:60:95:a2:cd:19:7c:9a:9f:26:
         4f:31:86:26:99:0f:10:a9:92:49:33:40:90:5a:c9:0a:0c:eb:
         f1:70:a1:ce:f6:b7:06:dd:6f:32:fd:1b:87:d1:5d:d1:e0:ab:
         a5:0f:bc:91:de:d4:a2:90:df:0f:70:17:aa:0e:3a:0b:28:c7:
         49:51:fa:6c:5b:37:db:3a:e8:fd:cc:ae:59:38:6b:ce:2a:0d:
         67:0f:24:a6:5f:c5:07:5a:1c:19:7d:b5:e1:6a:54:65:5b:74:
         43:8f:66:47:dd:87:e9:71:a4:39:aa:4a:78:26:d7:bc:b5:f7:
         23:a8:99:30:6b:f0:7d:6d:9e:3f:75:4b:d8:a2:3e:36:5b:26:
         d5:14:17:8b:3c:c1:fc:c1:77:93:b9:f8:6f:fd:76:21:55:74:
         69:91:05:1b:96:01:3d:ff:17:51:e3:08:16:d4:fa:69:d1:7a:
         10:c3:02:fb:3f:db:dd:dd:89:e1:74:bc:5e:c6:3d:11:0e:b3:
         e0:ed:49:99:3d:fe:7b:bb:c3:49:d5:85:c4:ea:a7:92:23:ec:
         9a:ba:ab:88:bc:e8:71:a2:35:c2:e9:06:ff:4c:48:28:26:d3:
         2e:db:9c:e0:98:a0:d5:79:1b:f0:e3:5b:91:8d:e8:53:be:61:
         f1:77:de:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:01:06 2026 by rpki-client