Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File:                     tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier:          pV6dX/Qnt2Mn8FxSQnodOc4BtMrya9ZxMKDcbAyq564=
Subject key identifier:   9E:3F:C3:04:27:D9:6E:1C:B0:24:04:DA:AA:45:EC:42:3E:A1:F1:1E
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer:       /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial:       01A0E81CFAD478AFC1C1501B0DF10059B529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number:          081D
Signing time:             Mon 28 Sep 2026 13:03:28 +0000
Manifest this update:     Mon 28 Sep 2026 13:03:28 +0000
Manifest next update:     Tue 29 Sep 2026 13:03:28 +0000
Files and hashes:         1: JgdyZSLi_X3qU3ZvyP9GWKpdO74.roa (hash: vGubJxspvp/eaW13ArIa5sIF6BGxA2eNPeBTEfU9qPQ=)
                          2: f7CpyN6sW0ZcgvCuLUdNYJVfmi4.roa (hash: BUr3/0WmGIaDdHN6nw+UqfT6IUf3UU/+UGTcpdHXJwI=)
                          3: hYVqkrvIsjb2mA84Thi0hIWdE_I.roa (hash: bIGRKUxgZlKcay6HazV4E5FCIEHkxDiDElQJfP8xDRs=)
                          4: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: SKM69+r2l9HklEWRFJXjw4i5Q0thXinN40zFMzmyIwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 13:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:1c:fa:d4:78:af:c1:c1:50:1b:0d:f1:00:59:b5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
        Validity
            Not Before: Sep 28 13:03:28 2026 GMT
            Not After : Sep 29 13:03:28 2026 GMT
        Subject: CN=9e3fc30427d96e1cb02404daaa45ec423ea1f11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:98:17:70:2d:41:7d:24:28:00:55:2a:f0:9e:
                    ce:89:da:4a:72:b6:d0:22:35:5b:8e:d2:11:e5:bb:
                    59:89:f3:89:7e:2f:6d:90:97:f5:91:b2:57:f5:d3:
                    48:e4:24:da:20:54:39:b9:34:97:9b:48:8b:28:2c:
                    5f:06:9d:3e:70:83:93:fa:de:22:80:4d:2b:59:3e:
                    db:4e:02:e5:01:71:39:a0:bc:c8:23:2f:9b:c0:66:
                    58:0d:8c:b5:33:3b:05:ee:46:5d:20:06:bb:51:85:
                    43:86:83:14:0f:c6:6c:6a:c3:8c:a9:5c:7d:3b:ff:
                    80:6d:be:e6:00:30:4e:f3:6c:70:d7:49:6b:d8:07:
                    67:11:62:35:fd:ab:e5:35:27:91:60:e6:7a:00:b9:
                    a7:2d:f0:9b:a3:9a:3d:4f:ab:b4:0b:5e:b8:89:7d:
                    b3:99:f8:28:a2:18:bd:58:5a:21:ae:d9:e6:50:9d:
                    eb:71:45:a8:4d:9e:35:0d:3a:86:c0:c8:75:c3:0a:
                    ba:10:06:2b:3f:83:3e:1b:f8:b9:50:d2:69:9f:f9:
                    5d:f8:19:37:2d:fe:20:a0:ac:22:45:69:39:9f:53:
                    cd:f6:27:d4:c0:a6:96:a3:8a:a6:7c:00:7f:c0:18:
                    b4:a1:be:ce:9a:2b:b1:60:91:a8:81:34:0e:c0:66:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3F:C3:04:27:D9:6E:1C:B0:24:04:DA:AA:45:EC:42:3E:A1:F1:1E
            X509v3 Authority Key Identifier:
                keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:43:02:7a:ba:48:be:cc:aa:71:a2:bb:94:fe:55:f6:09:54:
         57:39:aa:1d:e9:99:17:f2:04:51:9c:05:eb:74:70:21:67:41:
         46:3f:61:03:44:6b:eb:12:76:55:7e:3e:2e:3e:eb:d0:c3:b4:
         84:86:fb:da:db:69:86:8d:ee:28:b2:9f:fe:25:2a:52:fc:e4:
         f7:df:4f:bb:b8:0b:84:c3:df:76:05:cb:8f:64:fb:0d:49:d0:
         c6:19:37:d9:ea:f4:fd:5c:5a:2f:b5:b8:63:e3:af:8a:e0:10:
         37:8e:f5:70:98:53:9b:d6:c6:48:51:04:ff:cb:a1:7e:0d:a3:
         ce:8a:8e:99:c1:86:9d:4e:21:cb:a3:9a:3e:4f:9c:01:7a:14:
         a6:21:be:48:9c:43:bc:08:7f:a4:8f:f5:ee:1c:cd:71:ea:94:
         eb:c0:e1:62:29:39:4e:3c:b6:d1:b8:f0:0e:64:d1:92:b7:d6:
         bd:e5:78:c7:c5:f5:9b:70:5a:e8:51:29:c5:ed:91:39:65:7e:
         af:c1:14:88:2a:ce:15:11:3f:34:e7:5f:fb:af:23:46:14:6a:
         5c:46:c8:77:07:3f:91:af:db:e1:70:fa:22:79:27:71:59:08:
         6e:87:ba:a0:ae:0a:49:43:67:93:ad:b4:ed:3b:7a:4b:55:7d:
         91:b7:5b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:05:35 2026 by rpki-client