Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File:                     tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier:          +I9DrDLVk7+C8luCaYzqgt172Ax7e8te7btJgJFeN3I=
Subject key identifier:   6F:DF:42:D7:0E:29:36:8D:64:BD:AE:37:96:C3:A9:AC:23:81:2B:7A
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer:       /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial:       01A0C14363D90100EC60B1A15622682772FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number:          1A65
Signing time:             Mon 21 Sep 2026 00:00:14 +0000
Manifest this update:     Mon 21 Sep 2026 00:00:14 +0000
Manifest next update:     Tue 22 Sep 2026 00:00:14 +0000
Files and hashes:         1: 2whxzmDVbfAO3ymvYfT1Br7cjzo.roa (hash: jBvzWSDKzRLptdoSp5Wyo4EetGXs4eXZMTjT2PaKhik=)
                          2: QW73u8rMuH1v1Kv7BEJQbwmdG30.roa (hash: 86pULR+fbjp+HIMXs4j+2SEmIr4Htvw47MfRZHiRzRU=)
                          3: ehZg7NVKRiPcTGHWVyISklSxV_0.roa (hash: Dyhn6Vhbep1Q3HKDE2Bpn72ONwXFiRAQ/djQCOZfQXE=)
                          4: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: AfCI8AUoK61zHbbZogxsj+vxR1gOBKW3+eGZ1utqsmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:43:63:d9:01:00:ec:60:b1:a1:56:22:68:27:72:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
        Validity
            Not Before: Sep 21 00:00:14 2026 GMT
            Not After : Sep 22 00:00:14 2026 GMT
        Subject: CN=6fdf42d70e29368d64bdae3796c3a9ac23812b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:03:46:92:b5:bc:1e:c8:94:cc:eb:45:96:
                    a8:83:3d:58:70:75:1e:50:e2:96:f4:16:86:4b:e0:
                    c6:03:0b:77:26:54:a4:5a:0a:ef:49:cd:18:ea:9b:
                    52:a6:c6:17:97:b4:49:7e:b7:92:72:d1:f6:fb:6d:
                    05:08:40:54:00:d5:9c:fd:b0:6a:ee:14:e2:14:9b:
                    27:7f:fe:c0:a8:ef:93:dd:f5:99:b4:f9:0d:ad:0e:
                    2f:f9:cd:cc:66:3d:e0:15:7b:ff:a6:41:ef:71:71:
                    97:56:8c:83:4b:ac:17:31:f5:be:b5:d2:ed:e0:b3:
                    54:0a:25:72:b7:6b:0a:a4:6f:83:94:8b:7a:22:db:
                    96:a2:07:c2:f7:55:f9:44:c5:43:82:7f:e8:23:96:
                    3c:7f:01:34:f2:bb:cf:24:0f:97:6e:63:0f:a0:fe:
                    c3:09:ca:7b:e8:ec:3e:45:fb:68:c0:15:62:05:71:
                    01:78:15:9c:5f:a7:57:34:ad:5e:b4:11:61:95:a4:
                    32:cf:56:5f:26:fa:3c:44:84:84:8c:f9:e3:f9:49:
                    cd:5d:f7:da:b7:65:fa:63:89:bd:27:2e:04:b9:ad:
                    76:41:6b:4a:4a:7a:5c:38:e3:9e:76:fb:ec:1e:32:
                    1d:b5:43:95:22:dc:c0:79:39:c7:5f:8f:5d:e6:20:
                    9f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DF:42:D7:0E:29:36:8D:64:BD:AE:37:96:C3:A9:AC:23:81:2B:7A
            X509v3 Authority Key Identifier:
                keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c6:72:5a:5e:16:ca:a4:ba:d1:7e:e5:4c:5e:24:1f:f0:d9:
         9d:81:a1:fb:d7:ef:85:81:c6:ca:b8:0c:e6:5d:b3:57:45:24:
         a3:ed:af:56:f3:89:82:23:55:27:0d:a2:6c:e9:01:66:23:ab:
         ab:91:3a:90:96:65:00:8f:2a:81:10:6e:b5:45:33:7a:7f:ed:
         8c:49:04:a4:69:6e:38:98:45:15:35:00:3e:6d:6b:55:55:f4:
         46:17:3e:65:17:80:5f:47:18:4e:40:ed:93:a7:3a:63:af:8c:
         d9:9c:36:0b:30:26:63:a9:78:86:d0:ba:33:05:8a:f4:5e:dc:
         0f:44:e3:d1:2d:69:5b:c2:bc:3b:d0:77:e0:bf:c2:1f:79:4f:
         aa:07:a4:1d:80:61:5a:a8:42:24:2a:93:64:bc:7b:4b:ed:4a:
         09:b6:b0:da:37:a6:85:69:69:ea:42:ab:35:9f:3c:4d:4e:31:
         00:55:d5:2b:3e:19:5a:6b:13:5e:8c:73:05:8f:dd:2a:ac:94:
         94:73:b9:58:bd:37:fd:31:47:0e:52:f4:e2:92:a5:59:b4:17:
         59:0c:9d:03:73:4a:32:53:cc:72:60:1d:98:9a:7e:9e:01:14:
         6b:7b:25:ed:c5:3a:34:e0:16:74:73:ca:c4:69:9b:4b:18:88:
         f3:85:48:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:52:04 2026 by rpki-client